Detect and fight the exploitation of various flaws/bugs in Minecraft!

Main Features Permissions Commands Configuration Jenkins


NoCheatPlus attempts to prevent cheat clients from exploiting weaknesses of Minecraft or its protocol, making your server more safe. Checks cover a wide range of issues including flying and speeding, fighting hacks, fast block breaking and nukers, inventory hacks, chat spam and other types of malicious behaviour. For a more complete list have a look at the Features Page.

NoCheatPlus puts emphasis on configurability and allows you to customize actions that are carried out when a player fails a check (e.g. silent cancelling, executing commands, just logging). Bypass permissions allow to control what check to apply for which players, all checks can be deactivated in the configuration, also having the option for world-specific configuration files. Many checks allow more detailed configuration to adjust sensitivity.

Certainly NoCheatPlus is not a magical bullet, it uses a lot of heuristics and even guessing, so you will encounter false positives here and there and also not catch every single violation. Example video of how NoCheatPlus blocks cheats (outdated plugin version).

NoCheatPlus was introduced by NeatMonster, building on the code base of NoCheat by Evenprime.

The following plugins might be useful to have a look at.

CompatNoCheatPlus (cncp)

Make plugins like mcMMO, Citizens, MagicSpells or MachinaCraft more compatbile with NoCheatPlus. Not all existing plugins are covered (yet), but you can leave a note or ticket request for cncp.


Orebfuscator fights all sorts of X-ray-hacks by altering the map information that is sent to the players, such that they have to mine blocks to actually reveal what is behind. Virtually a "must have".

Downloads and History of Changes

  • Download officially approved versions on the Files page at BukkitDev.
  • Development builds have been moved over to the Jenkins at EcoCityCraft.
  • Do not download from any other source, do not use jars other people send you.
  • Changes by build number can be examined in the Jenkins changes list.
  • All commits can be seen in the GitHub commit history.
  • Plugin statistics are no longer reported to


Documentation Resources

Contact us

  • Quick questions can be asked on this page,
    or on IRC (Server: | Default-Port: 6667 | SSL-Port: 6697 | Channel: #nocheat | Web client: WebIRC)
  • For real issues or feature requests please create a new ticket or add to an existing ticket.
  • To send information that is not to be seen by all, you can also reach us by PM to @asofold and @MyPictures. Please do not contact the user 'NoCheatPlus', it is for administrative purposes only and will likely not be answered in time. Keep to BukkitDev and GitHub for support, do not trust users on other forums or websites, also not if their nick names are the same as NCP staff on BukkitDev.

Please always state the output of the "ncp version" command to let us know versions in use (users of cncp also the "cncp" command).

You must login to post a comment. Don't have an account? Register to get one!

  • Avatar of Theepwner Theepwner Oct 21, 2014 at 08:47 UTC - 0 likes

    @asofold: Go

    Spigot: git-Spigot-1.7.9-R0.2-207-g03373bb (latest spigot patch as of now)

    NoCheatPlus: 3.11.2-SNAPSHOT-sMD5NET-b745

    I also looked into the issue more and it is the SurvivalFly move check.

  • Avatar of asofold asofold Oct 20, 2014 at 22:57 UTC - 0 likes

    Sorry for the late replies...

    @kristijan260393: Go

    NCP itself only allows to confine commands to the console by configuration (consoleonly feature), if you want to be able to use commands that other ops can't use, i'm afraid it might not be possible easily.

    A way around it could be a permissions plugin that can change the op-default permissions, such that ops don't have those, and configure it accordingly (not sure that exists at all, could be PEX). Though, if you use a permissions plugin, why op players in the first place (double book-keeping, though admittedly it's more simple). I suggest using a permissions plugin, ~ also in the first place, instead of opping people.

    I'm afraid the command protection feature of NCP can't solve the issue, because commands might default to "op".

    @Theepwner: Go

    No idea (yet). What's server + plugin version ("ncp version" command for convenience)?

    @iVultra: Go

    Do you happen to know what the highest placed-block-y-coordinate is/was?


    Latest release (1.7.2-1.7.10, approved) NoCheatPlus 3.11.1-RC-sMD5NET-b743
    (Development builds: Jenkins)

  • Avatar of iVultra iVultra Oct 18, 2014 at 19:16 UTC - 0 likes

    Any idea what would cause this to happen?

  • Avatar of Theepwner Theepwner Oct 18, 2014 at 04:18 UTC - 0 likes

    Getting lots of lag-backs from running around cactus. Also launching yourself with punch 2 and 3 bows will sometimes lag you back, especially when near cactus. Any ideas?

  • Avatar of ProdigyOG ProdigyOG Oct 17, 2014 at 04:34 UTC - 0 likes

    @bartico6: Go

    That AHK script acts just like an autoclicker; while you have your mouse held down, it clicks for you (at the rate of 20+ clicks per second).

    If a player were to get a combination of hits at that speed, they would end up flagging fight_speed and possibly fight_angle (depending on # of people hitting).

    Last edited Oct 17, 2014 by ProdigyOG

    ====== meh > aVo ======

  • Avatar of kristijan260393 kristijan260393 Oct 16, 2014 at 21:39 UTC - 0 likes

    hello people can you tell me is they any whey to by pass blocked command if I block some commands in game so they can only can be run from console because of my admins whic have Op and if I am a owner and i wan t to by pass blocked commands so I can run them from game only me is that posible

  • Avatar of asofold asofold Oct 16, 2014 at 19:35 UTC - 0 likes

    @devanmist: Go

    Thanks, that's most readable now! Unfortunately i have no idea at present. Is there anything else in the server log with the player getting connected/disconnected?

    @dNiym: Go

    Noswing usually would be with things like block breaking or fight. You can get a more precise information with "ncp info playername", though one would have to monitor changes to before causing a violation, because it accumulates.

  • Avatar of dNiym dNiym Oct 16, 2014 at 17:38 UTC - 0 likes

    I work on a server with bending which is throwing a lot of NCP warnings since installation.   However most of these seem to be appearing when players are using bending moves.
    Spigot 1.8

    I am looking at how to integrate the NCP exceptions into the plugin now.   My question is There was a player just standing still in spawn and occasionally would throw a "player failed noswing" while he standing still/idling.

    Any idea what would cause this one?  There shouldn't be anything going on that would affect blocks while hes just standing still in spawn.

  • Avatar of devanmist devanmist Oct 15, 2014 at 23:47 UTC - 0 likes
  • Avatar of asofold asofold Oct 15, 2014 at 20:27 UTC - 0 likes

    @devanmist: Go

    Could you put that into a paste with type/language set to "text only" ( Would help reading it and the conversation :)...


Date created
Apr 02, 2012
Last update
Sep 21, 2014
Development stage
GNU General Public License version 3 (GPLv3)
Curse link
Recent files