Mythras: customer guide

1. Requirements

• Paper or Spigot 1.21 or newer (Folia: Pro plan only), Java 21+.
• PacketEvents 2.14.0 or newer in plugins/.
• Optional: ViaVersion (older clients), Geyser/Floodgate (Bedrock players), WorldGuard (region exemptions), PlaceholderAPI (placeholders, Pro).

2. Installation

1. 1

   Download

   Download Mythras-<version>.jar (the same file for every plan).

2. 2

   Add it to plugins

   Put it in plugins/ together with PacketEvents.

3. 3

   Start the server

   Without a key Mythras starts the Free plan (beta test).

4. 4

   Add your key

   To use Pro, type in the server console:

   mlicense MYTH-XXXX-XXXX-XXXX-XXXX

   Copy

   then restart the server. The console shows License valid: plan PRO..

The key is saved in plugins/Mythras/license.yml. Do not copy this file to other servers: each server has its own server-id, and a Pro key works on 1 server.

3. Plans

Add-ons (5,99 € each, one payment, yours for ever, on a Free or a Pro key)

No plan includes the add-ons: a Free server can have only Anti-XRay, a Pro server Pro + both, and so on. The X-Ray check (it spots X-Ray users from how they mine) is part of Pro; the add-on is what hides the ores.

Buying. On mythras.eu log in with Discord, open the shop and pay with PayPal.

• Pro: the key appears in your customer area as soon as PayPal confirms the first payment. If you already have a Free key (for an add-on), you can turn that key into Pro and keep its add-ons.
• Add-on: choose one of your keys, Free or Pro; without a key you get a Free key with the add-on (install it with mlicense <KEY> like any key). It turns on by itself within a few minutes, no restart needed (the console shows Add-on Anti-XRay active.).

Renewal and cancelling. Pro renews every month by itself and moves the expiry of your key (3 days of margin after each billing date). You can cancel at any time from the customer area or from PayPal: the key keeps working until the end of the month you paid. Add-ons are paid once and never expire; if your Pro ends, the key becomes a Free key and its add-ons keep working.

AI learning (Pro). The AI looks at 20 combat behaviours every 20 hits (clicks, rotations, aim, reach, target switching) and learns what is normal on your server, from punished and clean players. Every setting can be tuned, staff can train it (/ac ai label), and it can punish.

Mythras Cloud AI (Pro). Every Pro server also gets a global model, trained every hour on the combat data of all Pro servers. It protects a new server from the first day, before your own AI has learned enough; then the two are combined. The global model is a small neural network when that is more accurate than a simple model, so it also recognises combinations (for example fast turning together with perfectly steady aim). What is shared: 20 numbers per 20 hits (click speed and rhythm, how the view turns, reach, hit ratio, aim steadiness...) and whether the player was punished, never names, UUIDs or IP addresses. ai.cloud.share: false only downloads the model, ai.cloud.enabled: false turns it off. /ac ai status shows the global model.

Why the AI flagged someone. Every AI alert says why, for example combat model 95% cheating: very regular clicks, aim locked on the body: the behaviours that are most unusual compared to the normal players of your server. You see it in the alert, in /ac info <player> and in the replay.

Reviewing suspects (Pro). /ac ai review opens the list of players the AI found suspicious in the last hour, also if they already left. Left click opens their replays; right click = cheating, shift + click = legit. Your verdict teaches the AI (on your server and, with Cloud AI, everywhere), so it gets better the more you use it.

Bedrock players (Geyser) are never judged by the AI: touch controls and aim assist would look like cheating.

The Free plan only sends alerts to staff: no setbacks, no punishments.

Shop

All checks

Every check is configured under checks.<name> in config.yml. The badge shows the lowest plan that includes it; higher plans include everything below.

Movement

Combat

Crystal PvP

World and building

Packets and protocol

Inventory, vehicles and AI

4. Managing your license

You can do everything from the customer area of this website or from our Discord server:

My licenses Discord server

Panel. In the customer area you see your servers (online, players, TPS, versions), the alerts, punishments and saved replays of the last 30 days, the most flagged players and checks, and a page for each player. It updates every 10 seconds. Name your servers with panel.server-name in config.yml.

Moving to another machine: reset the servers of your key (on the website or with /license reset), then use mlicense <KEY> on the new server.

Updates: Pro updates itself. At every restart the server downloads the latest version. When a new Mythras-<version>.jar is published, the console and the admins joining the server are told; download it from the customer area (it updates the loader and the Free plan).

If our license server is unreachable, your server keeps starting with your plan for 72 hours.

5. Commands

Main command: /mythras (aliases /ac, /myth).

6. Permissions

7. Configuration

Files in plugins/Mythras/:

• config.yml: contains only the options of your plan (Free or Pro). After an upgrade the new options are added at the end.
• messages_<code>.yml: all texts, hex colours and gradients supported, in 8 languages (en, it, es, pt, de, fr, pl, zh). Choose with /ac lang <code> or language: en.

Main options

• language: en, it, es, pt, de, fr, pl or zh (or change it in game with /ac lang <code>).
• database.type: file (default), sqlite, mysql, mongodb. If the connection fails Mythras falls back to file.
• alerts: alerts in chat and console, cooldown-ms, click-command.
• exemptions (Pro): whitelist and exemptions. players (names or UUIDs), worlds and WorldGuard regions where no check runs (staff, minigames, launch pads).
• bedrock: checks used on Bedrock players (Geyser).
• checks.<name>: every check has:
  • enabled;
  • buffer: how many proofs are needed before a flag (higher = fewer false flags);
  • vl-weight and vl-decay-per-second;
  • punish-vl: VL that runs the punishment, 0 = alerts only (Pro);
  • punish-commands: punishment commands for this check only (Pro).
• punishments.commands (Pro): [kick] <message>, [message] <text> or any console command, for example ban %player% 7d Cheating. Placeholders: %player%, %check%, %vl%, %kick-message%.
• setback (Pro): pulls the cheater back to the last valid position.
• discord (Pro): webhook for alerts and punishments. ai-suspects (Pro): new AI suspects (85%+) with the reason.
• mitigations: (Pro) cancels impossible hits, halves damage after combat flags, health filter; with the add-ons, on any plan:
  • anti-esp and anti-storage-esp (Anti-ESP add-on, any plan): containers the player cannot see are sent as the block next to them, so StorageESP/ChestESP show nothing behind walls (blocks = which containers);
  • anti-xray (Anti-XRay add-on, any plan): ores out of sight are sent as rock, also those open to caves, until the player can see them (blocks, max-y, max-distance). It replaces Paper's anti-xray, which you can leave off.
  • Anti-ESP works on its own thread, so it costs almost nothing on the main thread. Walls changed by commands or WorldEdit (no block event) are noticed within 3 seconds; walls broken, placed or blown up by players at once.
• replay (Pro): mode: flag records flagged players, mode: always keeps the last 25 seconds of everyone. Replays are kept 7 days, then deleted.
• ai (Pro): self-learning model; tune it and train it with staff labels (/ac ai label). ai.cloud (Pro): Mythras Cloud AI, enabled and share (see Plans).
• checks.freecam (Pro): clicks on blocks hidden behind walls (FreeCam, GhostHand) are refused with cancel: true (a chest behind a wall stays closed) and flagged.
• checks.xray (Pro): min-veins, max-stone-per-vein, window-minutes, ores. Alerts only by default: check the player's replay before punishing. Paper's anti-xray (engine-mode: 2 in paper-world-defaults.yml) works well together with it.
• network (Pro): alerts of all servers behind BungeeCord/Velocity. With MythrasProxy (below) set network.proxy-plugin: true.
• panel (Pro): the customer panel on this website. server-name: the name shown in the panel; enabled: false stops sending (only the names and UUIDs of flagged players are sent, with the alerts).

8. MythrasProxy (Velocity / BungeeCord) Pro

A free companion plugin for the proxy: download MythrasProxy-<version>.jar and put it in the plugins/ folder of Velocity or BungeeCord/Waterfall (the same jar works on both). On every Mythras server set:

network:
  enabled: true
  server-name: "lobby"      # the name of this server in the proxy
  proxy-plugin: true

• Network alerts: staff see the alerts of every server, on any server they are, with the server name; clicking one takes them there (/server). Permission on the proxy: mythras.alerts (e.g. with LuckPerms on the proxy).
• Network bans: a punishment "[netban] 30d Cheating (%check%)" (or perm) in punishments.commands or in a check's punish-commands bans the player from the whole network, also when they reconnect to another server.
• Proxy commands (/mythrasproxy, /mpx, permission mythras.proxy.admin): alerts (toggle), bans, ban <player> <30d|12h|perm> [reason], unban <player>, reload.
• Settings and texts in plugins/mythras-proxy/config.properties (Velocity) or plugins/MythrasProxy/config.properties (BungeeCord); bans in bans.json.

9. Developer API and placeholders Pro

• Events: MythrasFlagEvent (cancellable flag) and MythrasPunishEvent (cancellable punishment).
• MythrasAPI.get() methods:
  • getVl(player, check), getTotalVl(player), getViolations(player);
  • getAiProbability(player), getClient(player), isBedrock(player);
  • exempt(player, millis): exempt a player for a while (for example during a custom launch pad).
• PlaceholderAPI:
  • %mythras_vl%, %mythras_client%, %mythras_version%, %mythras_ai%;
  • %mythras_bedrock% and %mythras_checked%.

// exempt a player for 3 seconds during your launch pad
MythrasAPI.get().exempt(player, 3000);

10. What's new

• 1.25: the add-ons Anti-XRay and Anti-ESP (with Anti-StorageESP) are paid once (5,99 €) and kept for ever, also on Free servers (a Free key with the add-on).
• 1.24: two plans, Free and Pro (19,99 €/month, everything that was Enterprise, 1 server per key), paid with PayPal on mythras.eu. Anti-XRay and Anti-ESP became add-ons and turn on without a restart. Keys bought before (Base, Pro, Enterprise) are now Pro and keep their servers.
• 1.23: the answers you give in the setup link on mythras.eu configure the plugin by themselves (at the next restart or within 6 hours); your later changes in game or in config.yml stay until you fill in the link again. A key can be locked to your server's IP address.
• 1.22: new detections: Criticals "Jump" (Meteor), ElytraFly "vanilla" while using rockets, ChestStealers with random delays (Meteor steal); Blink catches holds from 0.4 s.
• 1.21.2: NoSlow now also catches NoSlow modules for cobwebs, soul sand and honey blocks. No more BadBreak, BadPlace, Phase or FreeCam false flags when the server refuses a break or a placement (spawn protection, WorldGuard, claims); no more Jesus false flag when walking out of the water onto a bank at the same height.
• 1.21.1: no more Blink false flags when a client (e.g. Lunar) freezes for a moment after joining.
• 1.21: simpler config: bstats: true|false and update-checker.enabled only; replays are always kept 7 days; punishments run at once. Old options are removed from config.yml automatically.
• 1.20: Mythras rebuilds the world as each player's client sees it: other players where their screen shows them (Reach and KillAura are stricter on moving targets, with no false flags from lag) and the real shape of slabs, stairs, fences and panes (Prediction now also judges next to walls).
• 1.19: new Prediction check (Pro): it replays the vanilla movement of every tick with the keys the player is pressing and flags what no input explains (light speed hacks, AirStrafe, "legit" BHop). Alerts only at first (checks.prediction.punish-vl: 0): set a punishment once you have seen it on your server.
• 1.18: Anti-ESP, Anti-XRay and Anti-StorageESP also on Folia (Pro).
• 1.17: MythrasProxy for Velocity/BungeeCord: network alerts and network bans ([netban]).
• 1.16: customer panel on the website: your servers, alerts, punishments and replays from the browser.
• 1.15: the AI looks at 20 behaviours instead of 12; every AI alert says why; /ac ai review (Pro) to judge the suspects of the last hour; Mythras Cloud AI uses a neural network when it is more accurate. Your AI keeps what it already learned.
• 1.14.1 / 1.14.2: performance: Anti-ESP on its own thread, lighter work per player (the main-thread time of Mythras is about a third of before).
• 1.14: Mythras Cloud AI (Pro): a global model trained on all Pro servers, active from the first day.

11. FAQ

A legit player gets flagged.

Use /ac info <player> and /ac debug <player>, then send us the check name, the details of the alert, the client and the version. Meanwhile raise that check's buffer or set its punish-vl: 0.

A plugin launches players (launch pads, knockback, custom elytra).

Add the world or region to exemptions, or call MythrasAPI.get().exempt(player, millis) from your plugin.

The console says "License key refused".

The message says why:

• the key does not exist: check the key;
• revoked or expired;
• maximum number of servers: a Pro key works on 1 server; reset the servers in the customer area or with /license reset;
• IP not allowed: the key is locked to other IP addresses (change them in the customer area).

"License server unreachable"

The server starts with the saved copy of your plan for up to 72 hours. Check that the machine can reach https://license.mythras.eu.

Does Mythras lag the server?

No: checks run on the network threads, Anti-ESP and the AI on their own threads. With 100 players fighting, Mythras uses about 0.3 ms of the 50 ms of a tick. /ac perf shows how much time Mythras uses per tick on your server.

The AI flagged a legit player.

Open /ac ai review (Pro) and shift + click the player: their fights are taught to the AI as legit. The alert says why it flagged (for example very regular clicks): send it to us with the player's client if it keeps happening.

Support

Open a ticket on our Discord server with your key (only the first part, e.g. MYTH-ABCD-…), server version, Mythras version and the console log. Discord server