Trust & Protection

Trust levels, commands, resolution order and all protection rules for claims and the wilderness.

💡

Tip: Trust is never cached. Every check reads the trust list and LuckPerms membership live, a revocation applies instantly, even with an open chest.

Trust levels #

An ascending chain, each higher level includes the lower ones.

Level	Command	Includes
`ACCESS`	`/claim accesstrust`	Doors, buttons, levers, pressure plates, bell, cake, walking on farmland
`CONTAINER`	`/claim containertrust`	+ chests, barrels, furnaces, hoppers, composters, chested mounts
`BUILD`	`/claim trust`	+ build/break, animals, frames/paintings, portals, buckets
`PERMISSION`	`/claim permissiontrust`	+ grant trust up to `BUILD` to others
`MANAGE`	implicit only	+ grant trust up to `PERMISSION`, `/claim restrictsubclaim`

MANAGE never comes from a command, only from ownership, coreengineclaim.adminclaims in an ownerless claim, an active /claim admin ignore bypass or the team rank MANAGE_TEAM_CLAIM_FLAGS.

💡

Tip: public and [group] are not levels of their own but entries in the trust list with one of the levels above. /claim accesstrust public lets everyone open doors; [vip] applies to the LuckPerms group. On multiple matches the highest level wins.

Commands #

All act on the claim you stand in. Children of coreengineclaim.claims (default true).

Command	Syntax	Permission	Default	Description
Build trust	`/claim trust <target>`	`coreengineclaim.claim.trust`	true	Grants `BUILD`
Access trust	`/claim accesstrust <target>` (`at`)	`coreengineclaim.claim.accesstrust`	true	Grants `ACCESS`
Container trust	`/claim containertrust <target>` (`ct`)	`coreengineclaim.claim.containertrust`	true	Grants `CONTAINER`
Permission trust	`/claim permissiontrust <target>` (`pt`)	`coreengineclaim.claim.permissiontrust`	true	Grants `PERMISSION`
Untrust	`/claim untrust <target\|all>`	`coreengineclaim.claim.untrust`	true	Removes an entry; `all` clears the list
List	`/claim trustlist`	`coreengineclaim.claim.trustlist`	true	Shows all entries
Inheritance	`/claim restrictsubclaim` (`rsc`)	`coreengineclaim.claim.restrictsubclaim`	true	Toggle parent inheritance (needs `MANAGE`)

<target> is <player|[group]|public>. The executor needs at least PERMISSION. Self-trust and formatting codes in the name are rejected; players must be resolvable, groups must exist in LuckPerms. Granting PERMISSION and toggling restrictsubclaim require MANAGE.

💡

Tip: Instead of /claim trust public the flags GUI has two switches: build_mode gives everyone BUILD, public_access gives everyone ACCESS. Both on → build_mode wins.

Resolution order #

First match decides:

Owner → MANAGE
adminclaims in an ownerless claim → MANAGE (not in player claims)
Active ignoreclaims bypass → MANAGE
Explicit player entry
LuckPerms group trust (highest level)
public entry
GUI switches build_mode/public_access
Team-claim resolution (if the subdivision belongs to a team)
Inheritance from the parent (subdivisions only, without restrictsubclaim)
Fallback: NONE

Because steps 1 to 3 run before any list check, public or group trust can never grant more than the owner has.

Team claim (step 8): member with MANAGE_TEAM_CLAIM_FLAGS → MANAGE; with BUILD_IN_TEAM_SUBDIVISIONS → BUILD; allied team with BUILD_IN_ALLY_SUBDIVISIONS → BUILD; otherwise on to step 9. Details on Team Claims & Plots.

Which action needs which level #

Action	Level	Note
Build/break blocks, place bed, door	`BUILD`
Write on a sign	`BUILD`	Shop signs use the shop permission instead of trust
Chest, barrel, furnace, hopper, beacon, lectern, crafter	`CONTAINER`	Anvil is intentionally not protected
Open a chested mount	`CONTAINER`	via mob position
Button, lever, pressure plate	`ACCESS`	only with `PreventButtonsSwitches: true` (default)
Redstone components, note block	`BUILD`
Bell	`BUILD`/`ACCESS`	`BUILD` with `RaidTriggersRequireBuildTrust: true` (default)
Door, trapdoor, fence gate	`ACCESS`	use `public_access` for public doors
Paintings/frames, armour stands	`BUILD`
Attack/leash/lure animals	`BUILD`	only with `PreventTheft: true`; horses/donkeys/llamas exemptable via config
Buckets (water/lava/milk)	`BUILD`
Eat cake, walk on farmland	`ACCESS`	changes block state
Fill an end-portal frame, fill a decorated pot	`BUILD`

💡

Tip: With Claims.EnderPearlsRequireAccessTrust: true (default) an ender-pearl teleport into a claim without ACCESS is cancelled and the pearl returned.

Protection rules #

YAML

Claims:
  PreventButtonsSwitches: true
  PreventTheft: true
  PreventNonPlayerCreatedPortals: true
  PistonMovement: CLAIMS_ONLY   # EVERYWHERE / EVERYWHERE_SIMPLE / CLAIMS_ONLY / IGNORED
Mobs:
  EndermenMoveBlocks: false
  CreaturesTrampleCrops: false
  ZombiesBreakDoors: false
Fire:
  Spreads: false      # applies server-wide, not just wilderness
  Destroys: false
Explosions:
  BedExplosionsAllowed: false
  RespawnAnchorExplosionsAllowed: false

Container/redstone: opening and every click are checked (a revocation closes an open chest instantly). Double chest: one half inside the claim protects it. Hoppers and dispensers only act within the same claim. Virtual GUIs (player as holder) are never protected.
Fluids: water/lava only flows into a claim if the source block is in the same claim.
Portals: a player portal needs BUILD at every portal block; entering also checks the destination.
Explosions: if one block is inside the claim, the whole explosion is cancelled (also protects adjacent wilderness). Bed/respawn-anchor globally blocked (defaults). A wither never spawns in a claim.
Non-player mob grief (sand cannons, enderman, silverfish, ravager, sculk, crop trampling) is always prevented in claims, regardless of trust.

Piston modes:

Mode	Rule
`EVERYWHERE`	Every moved block: source and target claim identical
`EVERYWHERE_SIMPLE`	Bounding box of all blocks in exactly one claim
`CLAIMS_ONLY` (default)	Piston + all moved + all target blocks in the same claim
`IGNORED`	No check (warning in the log)

Wilderness rules #

YAML

Claims:
  WorldModes:
    "*": Survival   # Survival / Creative / SurvivalRequiringClaims / PvP / Disabled
Wilderness:
  DisableRedstone: true   # redstone only in claims
  DisablePistons: true    # pistons only in claims
  LimitSkyTrees: true     # no trees on sky platforms

SurvivalRequiringClaims: outside claims no build/break/bucket for players (unless the ignore bypass is active).
Fire rules (Fire.Spreads/Destroys) apply server-wide.

💡

Tip: RestoreNature (/claim admin restore/restoreaggressive/restorefill) replaces unnatural blocks in the whole chunk with biome-appropriate material (AGGRESSIVE also wood/leaves, FILL only fills air holes). Runs in the background and leaves claim areas untouched.

With Nexo installed, the same trust rules apply to its custom blocks and furniture (break BUILD, interact CONTAINER/ACCESS).

Admin #

Command / permission	Syntax	Default	Description
`coreengineclaim.adminclaims`	(permission)	false	Auto `MANAGE` in ownerless claims, not in player claims
Claim bypass	`/claim admin ignore` (`ic`)	false	Full bypass for the session; must be switched on, cleared on logout

Full example config #

YAML

Claims:
  PreventTheft: true
  PreventButtonsSwitches: true
  EnderPearlsRequireAccessTrust: true
  RaidTriggersRequireBuildTrust: true
  ProtectHorses: true
  ProtectDonkeys: true
  ProtectLlamas: true
  PistonMovement: CLAIMS_ONLY
  PreventNonPlayerCreatedPortals: true
  RavagersBreakBlocks: false
Mobs:
  EndermenMoveBlocks: false
  SilverfishBreakBlocks: false
  CreaturesTrampleCrops: false
  RabbitsEatCrops: true
  ZombiesBreakDoors: false
Fire:
  Spreads: false
  Destroys: false
Explosions:
  BlockSurfaceExplosions: true
  BedExplosionsAllowed: false
  RespawnAnchorExplosionsAllowed: false
Wilderness:
  LimitSkyTrees: true
  DisableRedstone: true
  DisablePistons: true
  SeaLevelOverride: -1

← BackClaim Basics Next →Team Claims & Plots