Decoy

Silent honeypot anti-cheat for catching x-rayers, killaura, ESP, and reach cheaters.

---

How It Works

Decoy places invisible traps around players that are completely undetectable during normal gameplay. Fake ore veins, hidden entities, and bait chests are scattered underground on a repeating cycle. Legitimate players will never encounter them. Cheaters using x-ray, killaura, ESP, or reach hacks will interact with these traps and get flagged silently — they receive no warning or alert.

All traps use vanilla-accurate generation. Ore veins match real Minecraft blob shapes and per-ore sizes (diamonds spawn in veins of 4-8, emeralds as singles, etc). Traps are placed behind solid walls so only cheaters can find them.

---

Features

• Ore Traps — Fake ore veins using vanilla blob generation with correct sizes per ore type. Depth-aware placement (deepslate variants below Y=0, nether ores in the nether). Blocks give no drops and revert instantly on break.
• Entity Traps — Invisible armor stands that catch killaura and reach. Flags players who hit entities they shouldn't be able to see or reach beyond 4 blocks.
• NPC Traps — Invisible stands with floating player nametags. Only visible to ESP/entity radar cheats.
• Chest Traps — Bait chests buried in stone with valuables inside. Inventory never opens for the player — they get flagged on interaction.
• Nether Support — Ancient debris, nether gold, and quartz traps in nether worlds with correct block replacement (netherrack, basalt, blackstone).
• Flag Threshold — 1 flag marks a player as suspicious. 3+ flags (configurable) marks them as confirmed. Severity shows in all alerts and commands.
• Mining Path Tracking — Tracks recent block breaks per player. Calculates how many blocks a player mined in a straight line toward a trap (beeline detection).
• Discord Webhooks — Rich embed alerts with player head thumbnail, severity color coding, flag history breakdown, location, and beeline data. Fully async, won't lag your server.
• Auto Punish — Configurable command tiers that execute at specific flag counts. Set up automatic kicks, tempbans, and bans with {player} and {count} placeholders.
• SQLite Storage — All detections logged with player UUID, name, type, coordinates, timestamp, and approach distance. Persists across restarts.
• Crash Recovery — Active trap blocks are tracked in the database and restored to their original state on server restart.

---

Commands

Command	Description
/decoy status	Plugin overview (active traps, total detections)
/decoy check <player>	View player flags with type breakdown and severity
/decoy recent [count]	Recent detections across all players
/decoy clear <player>	Wipe all flags for a player
/decoy test	Force deploy traps around you (admin testing)
/decoy near [range]	List nearby trap ores
/decoy tp	Teleport to nearest trap ore
/decoy reload	Reload configuration and restart trap cycle
/decoy purge	Remove all active traps and stop the cycle

---

Permissions

Permission	Description	Default
decoy.admin	Access to all /decoy commands	op
decoy.notify	Receive in-game detection alerts	op
decoy.bypass	Exempt from all traps	false

---

Configuration

Everything is configurable in config.yml. Key settings:

• traps.interval — How often traps refresh around players (default: 90 seconds)
• traps.ore.veins — Number of ore veins placed per player per cycle (default: 25)
• traps.ore.radius — Placement radius around each player (default: 48 blocks)
• flags.confirm-threshold — Flags needed to mark a player as confirmed (default: 3)
• discord.webhook — Your Discord webhook URL for alerts
• punish.tiers — List of flag thresholds with commands to execute
• worlds.blacklist — Worlds where traps won't be placed

Discord Setup

Set discord.enabled: true and paste your webhook URL. Alerts are sent asynchronously and include player avatars, severity levels, flag breakdown, and coordinates.

Auto Punish Setup

Set punish.enabled: true and configure tiers in config. Works with any punishment plugin — just use the console commands you'd normally run.

punish:
  enabled: true
  tiers:
    - flags: 3
      commands:
        - "kick {player} Suspicious activity detected"
    - flags: 5
      commands:
        - "tempban {player} 1d Automated ban - xray detected ({count} flags)"
    - flags: 10
      commands:
        - "ban {player} Confirmed cheating - xray ({count} flags)"