Detect and fight the exploitation of various flaws/bugs in Minecraft!

Features Permissions Commands Configuration Jenkins


NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.

NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.

Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).

NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.

The following plugins might be useful to have a look at.


Allows NoCheatPlus to activate packet-level checks, covering a range of exploits that can't be monitored using ordinary means. Since roughly Minecraft 1.7.10, the fight.speed check can't work as expected anymore, due to changes in CraftBukkit. With ProtocolLib this can be repaired.

CompatNoCheatPlus (cncp)

Make plugins like mcMMO, Citizens, MagicSpells or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or create an issue/ticket request for cncp.


Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have". (Latest versions of Spigot contain features of Orebfuscator.)

Downloads and History of Changes


Documentation Resources

Contact us

  • Quick questions can be asked on this page,
    or on IRC (Server: | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC)
  • For real issues or feature requests please create a new issue/ticket or add to an existing issue/ticket.
  • To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. @IceAP (IRC: ICE) will also help or redirect the conversation. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.

Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).

You must login to post a comment. Don't have an account? Register to get one!

  • Avatar of MarkElf2204 MarkElf2204 May 27, 2016 at 00:50 UTC - 0 likes

    @asofold: Go

    As I left in the original response:

    Edit:To be fairly honest: it isn't quite worth my own time to open a ticket as I'm not personally experiencing the issue and it is the first time I've seen the issue occur - if I happen to see it reported to me through another user (as this issue seems to be unique to the user who informed me of this issue), I'll open a ticket.

    Additionally, I would check this site in regards to PaperSpigot as it contains a download for both the latest build(s) and the api.

    I personally haven't ran into any errors running with PaperSpigot and NCP through the coarse of over two years, I assume MasterMithrandir ran Build 973 which had a null error.

    Last edited May 27, 2016 by MarkElf2204
  • Avatar of asofold asofold May 26, 2016 at 16:15 UTC - 0 likes

    @MarkElf2204: Go

    The video is interesting and should be reproduced and debug logged. If possible to produce with vanilla client, i assume they somehow manage de-synchronize server and client states concerning blocking . Can't tell if it's like near-permanent (static) or due to wild clicking. If this isn't a cheat, then we will have a little bit of trouble keeping up any speed checking for blocking, because we would have to manually alter the server side state on detecting fake blocking, provided that's detectable at all (possibly by interaction). My suggestion: open an Issue on GitHub, so others notice. A debug log would be great too, if you can reproduce it.

    Edit: the blocking speed bypass permission should help, provided it's legit. (nocheatplus.checks.moving.survivalfly.blocking)

    The bunny stuff will be lower priority, unless it's been a misunderstanding and the speed gain is significant over what we have been assuming to be possible anyway. There will be attempts to tackle it, but fight checks are also an interesting area of higher priority to continue with.

    @MasterMithrandir: Go

    PaperSpigot? There are no known issues with default spigot - if you don't throw some of the exceptions at us, how are we supposed to notice? I would like to test with PaperSpigot too, but i need an openjdk8 (??) in the repo first, in order to run their tools thing, and that version doesn't exist. I don't feel like installing java 8 (non open) just for that. On the other hand i need java 8 also for latest eclipse (neon), and thats slightly better than than mars.2, because the git staging dialog can be used for committing by default, and the mars.2 commit dialog doesnt show the file names (don't ask me how they manage to achieve that). So don't read this, unless you have to :p, for such 'errors' you could just make a ticket each, even if you can't come back, just make it like an info notice a) this versions etc. b) these exceptions/issues + 'rolled back' and/or similar.

    1.9.4 builds are the latest ones on jenkins currently , soon to release - if you have real issues with those on PaperSpigot (or whichever), i'd love to see exceptions / descriptions (+ versions if possible).

    Last edited May 26, 2016 by asofold


    Latest beta release (1.8.x, this site) 3.13.0-BETA-sMD5NET-b878
    (Development builds, 1.8.x: Jenkins)

  • Avatar of MasterMithrandir MasterMithrandir May 25, 2016 at 23:26 UTC - 0 likes

    Hello. Could someone be so kind as to indicate me to a stable build? I've tried the latest release, and various last dev builds, but they all give some pretty big bugs & or errors which are laging my server.

    I don't know which to choose, they all seem unstable lately.

    Looks like it may be 1.9.4 causing these issues.

    Last edited May 26, 2016 by MasterMithrandir

    Servidor Español:

  • Avatar of MarkElf2204 MarkElf2204 May 24, 2016 at 16:40 UTC - 0 likes

    This is more so on the behalf of someone else: Can anything be done regarding the following issue?

    Supposedly this occures when 'left and right clicking a player", I haven't been able to recreate this issue myself but supposedly it occured with just NCP running. I had him provide the output of /ncp debug player (name) which can be found below. Video of issue occuring: here. "I removed all plugins expect NoCheatPlus and we still got the bug.

    Here is the NCP log info:"

    This was taken with the latest development build at the time with the default configuration.

    Onward to my own question, has any progress been done in reguards to bunny hopping? I have had a number of people bring up that it still isn't blocked with NCP.

    Last edited May 25, 2016 by MarkElf2204
  • Avatar of asofold asofold May 10, 2016 at 08:45 UTC - 0 likes

    @MasterMithrandir: Go

    That's like i indicated below.

    You might switch to build 960, which we might mark as 'mostly stable' soon-ish (possibly release as beta or alpha). If you don't trust that build for other reasons, set checks.fight.pvp.knockbackvelocity to true instead of default.

  • Avatar of asofold asofold May 08, 2016 at 14:22 UTC - 0 likes

    @spiderrecon11b: Go

    Not being able to walk will need the proper versions installed (in fact that's always needed for basic operation), so could you post the output resulting from the 'ncp version' command? I have no clue what versions/features are in use at all...

    With mcMMO you should use CompatNoCheatPlus as well for now, but we do need version information to suggest what to do.

    Last edited May 08, 2016 by asofold
  • Avatar of spiderrecon11b spiderrecon11b May 07, 2016 at 22:25 UTC - 0 likes

    I put this on my server while server was shutdown, I restarted my server an everyone couldn't move from the spot they were in. Once I fixed that issue then no one could walk through doors, up stairs or slabs. Also it will not allow people to use McMMO special abilities. After I fixed all these were people could use the abilities my tester went and was able to use the the hacks. Is there a way to fix this?

  • Avatar of asofold asofold May 07, 2016 at 12:33 UTC - 0 likes


    @MarkElf2204: Go

    Yes, sweep attack should be supported in general, though there could be issues, as it's a nasty workaround. In any case always consider posting the output of running the 'ncp version' command, as that'll make quick hints and directions much easier.

    @MasterMithrandir: Go

    @MarkElf2204: Go

    Might need to know more details (versions, and if latest, a debug log if possible)... i do however prefer text for the version information, at least consider using a page to upload screenshots to that doesn't require java script or even worse :). There has been a change recently, to (re-) activate a velocity workaround for pvp knockback just for MC 1.9.

  • Avatar of MarkElf2204 MarkElf2204 May 06, 2016 at 01:05 UTC - 0 likes

    @MasterMithrandir: Go

    I remember seeing that occur on servers where server owners continue to run outdated builds of NCP with new version of spigot. Updating to the latest version has always resolved that issue for those who have asked me for support in regards to knockback like that. Please screenshot the output of /ncp version.

    Last edited May 06, 2016 by MarkElf2204


Date created
Apr 02, 2012
Last update
Jan 31, 2016
Development stage
GNU General Public License version 3 (GPLv3)
Curse link
Reverse relationships
Recent files



Optional dependency