Dash - Dashboard

Dash 5.0

Dash 5.0 is the biggest release so far. It also includes everything from 4.5.1 (the Minecraft 26.3 release that was never published on Modrinth), so you can update straight from 4.5. Every feature below is in Dash for Paper, FabricDash and ForgeDash. Loader limits on FabricDash and ForgeDash: the update manager cannot run a trial in the Shadow Boot Lab on a mod server (it says so and never reports a pass; installing needs an explicit override); the update swap on Windows with Fabric completes only after the server process ends; a restart needs a launcher script or host that starts the server again; the apply and appeal hints in the join message are Paper only; chat moderation has no bypass permission (operators can be exempt) and Fabric cannot rewrite a message, it refuses it and sends the censored text as a system line.

Material 3 Expressive interface and 14 languages

- Rebuilt every page on Material 3 Expressive: navigation rail and drawer, phone layout with bottom bar, dark and light themes, shared components and Material tooltips. - Added a language switcher with 14 languages: English, German, Spanish, French, Italian, Portuguese, Dutch, Polish, Turkish, Russian, Japanese, Korean, Simplified and Traditional Chinese. Each user keeps a personal choice or follows the browser; the sign-in page respects it too. - Pages that are new in 5.0 show English text in some languages until their translations are complete. - Stylesheets, scripts and dictionaries are served under content-hashed paths, so a new release is never shown with stale cached assets. - Sessions survive panel restarts, and the restart watcher recognises the panel as soon as it answers.

Autopilot

- Explained findings: confidence with the factors behind it, evidence lines, alternatives and what would change the diagnosis. - Modes Off, Suggest (default), Approve and Auto, with guardrails: daily cap, cooldown, quiet hours, deny list, restarts only when allowed. - Every action is journaled, verified afterwards and can be undone; the Autopilot card is shown on the dashboard. - Paper: learning statistics with a suggested confidence threshold (never applied automatically), custom rules ("if this error then notify or propose"), and a pause after you reject a proposal. - NeoDash: fleet warnings check every server that runs the same plugin when one server has a problem.

AI access (MCP) replaces the internal Dash AI

- The internal Dash AI and its Gemini integration are removed; stored provider keys are deleted at the first start. - New MCP server (POST /mcp, Streamable HTTP, JSON-RPC 2.0) with read and action tools for status, console, players, Guardian, diagnoses, Autopilot, backups, plugins, files, audit log and tickets. Off by default; only the Main Admin switches it on. - Scoped API tokens (dash_pat_...) with a read and write API under /api/v1: a token never does more than its owner may do. Tokens expire, can be rotated and are shown only once. - Per-tool switches, a kill switch, rate limits, output masking and an audit entry for every call. - NeoDash offers fleet tools over MCP as well.

Security

- Two-factor login for every user (authenticator app with locally generated QR code, ten recovery codes, policy for everyone or selected roles) and passkeys. - Session overview with sign-out of single devices and alerts for new devices. - IP allow-list with trusted proxies, lock-out preview and the console switch /dash allowlist off. - Signed audit log: hash chain with signed checkpoints, export and verification in the panel or offline. - Guided secret rotation for the bridge secret (with connection test and automatic rollback), Discord webhooks and API tokens.

Operations

- Scheduled restarts with countdown, player warnings and an optional quiet window. - One-click maintenance mode with whitelist, server-list message, polite kick and automatic end. - Lag detective: evidence, spark profile when available, ranked suspects, no automatic changes. - Update manager: trial run in the Shadow Boot Lab, rollout only after a pass, automatic rollback on errors, 30 days of manual rollback. - Encrypted offsite backups (S3-compatible, Google Drive, local or NAS folder) with a standalone decrypt tool and an automatic restore test.

Community

- Your own public website. Switch on the public site and the status page, whitelist applications, ban appeals, support tickets and player reports are served on a separate port that exposes nothing else: login, panel, API and staff pages answer 404 there. Point your domain at it with nginx, Caddy or Cloudflare, for example https://paper.example.de/whitelist. The main admin edits every path, the site title and the public base URL in the panel and changes apply immediately. A dashboard card and copy/open buttons on the staff pages show where the site lives, and /dash site prints the addresses. On Paper, players who are not whitelisted are told in the kick message where to apply, and banned players where to appeal. - Restart button: with Dash linked to NeoDash the restart no longer hangs on "restarting" (the browser now opens NeoDash's confirm page), NeoDash's own restart and stop controls send the current server, and Dash without a restart script says honestly that the server will only stop. NeoDash fleet: opening a server interface is faster and no longer needs several clicks. Lag detective: the page no longer reloads every few seconds while a diagnosis runs. - Public status page with real state, uptime history, incidents and planned maintenance. - Whitelist applications and ban appeals as public forms with abuse protection and staff review. - Chat moderation with word filters, link protection, spam rules and an escalating mute ladder. - GDPR tool: export or erase all data about a player, with preview and signed receipt, without breaking the audit chain.

Changes carried over from 4.5.1

- Verified against Minecraft 26.3. - Fixed same-origin form actions such as Restart and Stop being rejected as cross-site requests over plain HTTP. - Added base-path so the panel can be served below a sub-path of a reverse proxy. - Hardened HTML and JavaScript escaping in the file manager and page renderers. - Sessions of a deleted user are dropped immediately.

Other changes

- Intelligence, Maintenance and Guardian are no longer beta features. Installs that had them switched off only because of the beta gate get them switched on once (not with the Light profile). - Guardian is organised in top tabs; the read permission of Guardian also grants inspect and preview. - Fixed Discord webhooks being lost on every restart in FabricDash and ForgeDash. - NeoDash: opening a server interface while the server is still starting now shows a "starting" page instead of an error. - Removed the unused 4.3 stylesheet, Tailwind and Chart.js remnants.

Compatibility

- One Paper-family artifact for Minecraft 1.21.x, 26.2 and 26.3 (Java 21 or 25 as before). - FabricDash and ForgeDash for Minecraft 1.21 through 1.21.11, 26.1, 26.1.1, 26.1.2, 26.2 and 26.3. - NeoDash 3.0.

Partner

Dash is partnered with EmeraldHost. Use the code Frxme10 for 10% off your server.