Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more

To stop most X-ray users on a Paper Minecraft server, enable Anti-Xray in each world, use engine mode 2 or 3, and maintain complete hidden-blocks and replacement-blocks lists for the ores and containers you need to protect. Mode 1 is cheaper to run but leaves ores visible when they are exposed to cave air or water. Modes 2 and 3 hide those exposures more effectively, especially when air is included in hidden-blocks.

Anti-Xray is an obfuscation layer, not a guarantee. Players with a bypass permission, clients that extend the range of real blocks, or knowledge of the world seed can still gain an advantage. Treat the configuration below as one part of a defense that also includes permission audits, seed-hardening settings and behavior-focused anti-cheat tools.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

What Paper Anti-Xray does

Paper changes the block data sent to a client before a chunk is transmitted. Blocks in your protected lists are replaced with plausible blocks, so an X-ray texture or scanner cannot simply reveal every real ore from the chunk data it receives. The setting is configurable per world; enabling it in one world does not automatically enable it in another.

The world-configuration reference lists Anti-Xray as disabled by default and engine mode 1 as the default mode. You must therefore make an explicit choice for every survival, mining or resource world where hidden ores matter.

#1 Best Overall
Elebase USB to USB C Adapter for iPhone 18 Pro Max,USBC Car Charger Adapter | 4Pack Type C Female to A Male Cable Converter for Apple Duo 17 16 15 14 Plus,iWatch Watch 12 11 10,iPad 9 8 Air,Airpods 5 4
  • Read Before You Buy — No Video Output: These adapters support charging and USB 2.0 data transfer, but cannot transmit video signals. Except for standard USB webcams (which use USB data only), they are not compatible with HDMI/DisplayPort cables, video-capable USB-C hubs, or docking stations with video output.
  • Convert USB-A Ports to USB-C: Designed to connect USB-C earphones, cables, flash drives, card readers, and other USB-C accessories to standard USB-A ports. Plug-and-play with no drivers or software required.
  • Aluminum Alloy Housing: Built with a sturdy aluminum alloy shell that aids in heat dissipation and protects against daily wear and scratches. Designed to maintain a stable and secure connection.
  • Compact & Travel-Friendly: The ultra-compact design allows the adapter to stay plugged into your device without blocking adjacent ports or adding bulk, reducing wear and tear on your original USB ports.
  • 12-Month Warranty: Backed by a 12-month manufacturer warranty for peace of mind. Designed to meet strict quality control standards for reliable everyday performance.

What it can and cannot protect

  • It can obscure ores, container blocks and other entries that you place in the relevant lists.
  • It can make cave-exposed ores harder to identify when you use mode 2 or 3 and hide air.
  • It does not detect suspicious mining behavior by itself, remove a player’s bypass permission or invalidate information a client already possesses.
  • It cannot provide a permanent defense if a player obtains the world seed and derives generated ore locations.

Choose an engine mode

Pick the mode based on the world’s player count, hardware and tolerance for client-side rendering cost. The three modes are available independently for each world.

Mode How blocks are obfuscated Cave and air exposure Resource and network considerations Best fit
1 Listed hidden blocks are replaced with dimension-appropriate fake blocks, such as stone, deepslate below Y=0, netherrack or end stone. Ores exposed to air or water remain visible. Less computationally intensive than the other modes. A lower-cost baseline where exposed ores are an acceptable limitation.
2 Hidden and replacement blocks are replaced with randomly generated hidden blocks. With air in hidden-blocks, it can hide ores exposed to air; the documentation warns that this may lower some players’ FPS. More obfuscation work than mode 1 and potentially more client rendering work. Most survival servers that want strong concealment without mode 3’s chunk-layer behavior.
3 Works like mode 2 but randomizes blocks per chunk layer. Can conceal exposed ores when the same hidden-block and replacement-block coverage is used. Layer randomization can reduce network load when players join and improve chunk-packet compression. Paper describes the reduction as about a factor of two, not as a universal benchmark. Servers prioritizing concealment and efficient chunk transmission, after testing client FPS.

Mode 2 and mode 3 are not magic settings that compensate for incomplete lists. A missing deepslate ore variant, container block or air entry remains a hole even when the engine itself is set to 3.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Prepare the world configuration

Identify every world that needs protection

Paper stores world-specific settings separately. Apply the change to the configuration used by each world where players can mine or obtain resources. If your server has a separate Nether, End, resource or event world, review each one rather than assuming the main-world setting is inherited.

Back up before editing

Stop the server cleanly and copy the relevant Paper world configuration files before changing YAML. Keep a copy of the previous file so a malformed edit can be reversed without guessing which value changed. YAML indentation is significant: use spaces, not tabs, and keep child keys indented under their parent.

Rank #2
Sale
Anker USB-C Hub, 5-in-1 USB Hub for Laptops, 4K HDMI Multiport Adapter | USB C Dongle with 90W Max Power Delivery, 3×5Gbps USB A Data Ports, for MacBook, Dell, and More (Charger Not Included)
  • 5-in-1 USB-C Hub: Experience comprehensive connectivity featuring a Power Delivery input, two USB-A 2.0 ports, a USB-A 3.0 port, and an HDMI port. (Note: The USB-C power delivery input port is only for connecting an external wall charger to power your laptop and cannot power peripheral devices.)
  • 90W Pass-Through Charging: Achieve optimal charging with 90W pass-through power to your laptop, supported by a total input of 100W, with the hub reserving 10W for operational efficiency. (Note: Wall charger not included.)
  • Quick Data Transfers: Accelerate your productivity with rapid data transfers using a high-speed 5Gbps USB 3.0 port and two 480Mbps USB 2.0 ports.
  • 4K HDMI Display: Enhance your visual experience with a hub capable of delivering 4K resolution at 30Hz in both mirror and extend modes. Please note that this hub is compatible with MacBook (macOS 12 and newer), Windows 10 and 11, ChromeOS, and laptops equipped with DP Alt Mode and Power Delivery. Note: This device is not compatible with Linux.
  • What You Get: Anker USB-C Hub (5-in-1, 4K HDMI), welcome guide, 18-month warranty, and our friendly customer service.

Decide the protected Y range

Paper’s documented example uses max-block-height: 64. That number is a starting point, not a universal recommendation. Set the ceiling high enough to cover the ore-bearing layers in the Minecraft version and world-generation settings you actually run. A ceiling that is too low leaves higher protected blocks outside the obfuscation range; one that is unnecessarily high increases work in regions where no protected resources exist.

Enable Anti-Xray step by step

  1. Open the Paper world configuration. Use the file for the specific world, or the world-default configuration from which that world is generated, according to your Paper installation and version.
  2. Locate the Anti-Xray section. The setting path is anticheat.anti-xray. If the section is absent, create it with the same indentation shown below.
  3. Enable the feature and choose a mode. Set enabled: true and select engine-mode: 2 or engine-mode: 3. Use mode 1 only when its cave-exposure limitation is acceptable.
  4. Populate hidden-blocks. Include every ore variant you want hidden in that world, including stone and deepslate forms where both exist. Include container or utility blocks that an X-ray client could target, such as the container entries relevant to your server. Add air when you need to hide ores that would otherwise be exposed in caves.
  5. Populate replacement-blocks. Provide a broad set of ordinary blocks that can safely stand in for hidden data in the dimension. Use material names valid for your Paper/Minecraft version and include the dimension-appropriate stone, deepslate, netherrack or end-stone choices you expect underground.
  6. Set the range and update behavior. The official example uses max-block-height: 64, update-radius: 2 and use-permission: false. Keep those values only if they match your world and permission policy.
  7. Save, restart and inspect the log. A full restart is the safest way to ensure Paper reads the edited world configuration. Correct any YAML or material-name errors reported during startup before allowing players to mine.
  8. Test with a non-administrator account. Move through stone, deepslate and caves in a test area. Confirm that protected blocks are obfuscated and that ordinary mining, block updates and chunk loading still behave normally.

Example starting configuration

The following is a template based on Paper’s documented mode-3 example. Replace the material entries with the complete set appropriate to your Minecraft version and world. The lists are intentionally shown explicitly so that a missing entry is easy to spot.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
anticheat:
  anti-xray:
    enabled: true
    engine-mode: 3
    hidden-blocks:
      - air
      - coal_ore
      - deepslate_coal_ore
      - iron_ore
      - deepslate_iron_ore
      - gold_ore
      - deepslate_gold_ore
      - redstone_ore
      - deepslate_redstone_ore
      - lapis_ore
      - deepslate_lapis_ore
      - diamond_ore
      - deepslate_diamond_ore
      - emerald_ore
      - deepslate_emerald_ore
    replacement-blocks:
      - stone
      - deepslate
      - tuff
      - netherrack
      - end_stone
    max-block-height: 64
    update-radius: 2
    use-permission: false

This example does not claim that those are the only blocks your server needs. Add container blocks and any custom or modded materials that should not be revealed. Conversely, do not list a material that your clients cannot legally render in the target dimension.

Build complete hidden and replacement lists

Cover every ore form

Modern worlds commonly have separate stone and deepslate ore IDs. If you hide only the stone form, a scanner can still identify the deepslate form below Y=0. Check the material names against the Minecraft version your server runs, and update the list when new ore variants or blocks are introduced.

Rank #3
Sale
Anker USB C Hub, 7in1 Multi-Port USB Adapter, 4K@60Hz USBC to HDMI Splitter | 85W Max PD, 2 USB 3.0 & 1 USBC Data Ports, SD/TF Card Reader, for Laptops/Mac and Other Type C Devices (Charger Not Included)
  • Sleek 7-in-1 USB-C Hub: Features an HDMI port, two USB-A 3.0 ports, and a USB-C data port, each providing 5Gbps transfer speeds. It also includes a USB-C PD input port for charging up to 100W and dual SD and TF card slots, all in a compact design.
  • Flawless 4K@60Hz Video with HDMI: Delivers exceptional clarity and smoothness with its 4K@60Hz HDMI port, making it ideal for high-definition presentations and entertainment. (Note: Only the HDMI port supports video projection; the USB-C port is for data transfer only.)
  • Double Up on Efficiency: The two USB-A 3.0 ports and a USB-C port support a fast 5Gbps data rate, significantly boosting your transfer speeds and improving productivity.
  • Fast and Reliable 85W Charging: Offers high-capacity, speedy charging for laptops up to 85W, so you spend less time tethered to an outlet and more time being productive.
  • What You Get: Anker USB-C Hub (7-in-1), welcome guide, 18-month warranty, and our friendly customer service.

Include containers and special targets

Players use X-ray tools to locate more than ores. Add the container blocks and other valuable targets that matter on your server, such as the block types used for storage or generated rewards. A protection policy that hides diamonds but leaves a valuable container visible is incomplete.

Understand the role of air

In mode 1, a diamond ore exposed on a cave wall remains visible because the engine does not conceal that exposure. Adding air to hidden-blocks enables mode 2 to effectively hide ores exposed to air; mode 3 uses the same concealment approach with per-layer randomization. Paper warns that hiding air can increase the amount of geometry a client must draw, so some players may experience FPS drops. Test on low-end machines before imposing the setting on a large community.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Why players may still see ores

The server is still using mode 1

This is the most common explanation for ores visible on cave walls or underwater. Mode 1 is functioning as documented; it simply does not hide those exposed blocks. Move to mode 2 or 3 and include air if cave concealment is required.

A list entry is missing or invalid

Check for omitted deepslate variants, a typo in a material name, or a custom block that was never added. Compare the actual block IDs in the running version with the YAML entries. A valid engine mode cannot obfuscate a block that is not in the protected list.

Rank #4
Sale
UGREEN USB to USB C Adapter Combo 4-Pack, 10Gbps USB C Converter Space Gray | Data transfer & Fast charging for MacBook, iPhone 17/16/15, iPad, Samsung Galaxy, Apple Watch
  • Dual Converters, Infinite Potential:Includes 2× USB C male to USB A female adapters and 2× USB A male to USB C female adapters. Perfect for a wide range of uses—tablets with Bluetooth keyboards, expand USB ports on macbook, and more. Two different converters for all your daily needs
  • Next-Level 10Gbps & 3A Charging: No more slow 480Mbps, this usb to usb c adapter has a transfer speed of up to 10Gbps, allowing you to do more transferring in less time. This usb adapter fits both USB A and USB C charger, supporting up to 3A fast charging
  • Upgraded Exquisite Craftsmanship: With an aluminum alloy housing and metal connector, the usbc to usb adapter is extremely durable and sturdy. Rigorously tested to withstand more than 10,000 times of plugging and unplugging, ensuring long-lasting performance
  • Broad Compatible: The usb c to usb adapter widely supports all USB C/ USB A devices like laptops, tablets, cellphones, car chargers, and phone chargers. Such as compatible with MacBook Pro/Air 2023/2022, Thunderbolt 4/3 Devices,Apple MagSafe Watch 9/8/7/SE/Ultra, iPad Pro 2022/2021, Samsung Galaxy S23/S20/S10, and iPhone 17/16/15 Pro. Plug and play
  • Please Note: To reach 10Gbps speed, keep the cable under 3.3 ft. For USB A Male to USB C adapters, try flipping the USB C connector. USB C Male to USB A adapters support bidirectional 10Gbps transfer within 3.3 ft

The relevant world was not changed

Because settings are per world, a player can appear protected in the main world and unprotected in a resource or Nether world. Verify the file and world name for the location where the test was performed.

The player has a bypass permission

Paper documents paper.antixray.bypass as the permission that allows a player to bypass Anti-Xray. Restrict it to trusted administrators and inspect your permissions plugin, inherited groups and temporary grants. Test with an account that does not inherit the permission through an administrator or moderation role.

The client is using information Anti-Xray cannot remove

Paper notes that a client may extend the range of real ores. More seriously, a client that obtains the world seed can derive generated ore locations and bypass obfuscation. Anti-Xray alone prevents the majority of casual X-ray use, but it is not infallible.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Harden the seed and add behavior detection

Reduce seed-derived advantages

Use Paper’s documented seed-hardening measures, including feature-seeds together with the applicable Spigot structure-seed options for your server version. These measures make seed-based prediction harder, but Paper does not present them as complete protection. Keep the world seed private, limit access to backups and console output, and treat any leaked seed as a security incident requiring a new assessment.

Best Value
Sale
Anker USB C Hub, 5-in-1 USBC to HDMI Splitter with 4K Display | 85W Max PD, 1 Powered USB-C 5Gbps & 2 Powered USB-A 3.0 5Gbps Data Ports, for MacBook Pro, MacBook Air, Dell and More (Black)
  • 5-in-1 Connectivity: Equipped with a 4K HDMI port, a 5 Gbps USB-C data port, two 5 Gbps USB-A ports, and a USB C 100W PD-IN port. Note: The USB C 100W PD-IN port supports only charging and does not support data transfer devices such as headphones or speakers.
  • Powerful Pass-Through Charging: Supports up to 85W pass-through charging so you can power up your laptop while you use the hub. Note: Pass-through charging requires a charger (not included). Note: To achieve full power for iPad, we recommend using a 45W wall charger.
  • Transfer Files in Seconds: Move files to and from your laptop at speeds of up to 5 Gbps via the USB-C and USB-A data ports. Note: The USB C 5Gbps Data port does not support video output.
  • HD Display: Connect to the HDMI port to stream or mirror content to an external monitor in resolutions of up to 4K@30Hz. Note: The USB-C ports do not support video output.
  • What You Get: Anker 332 USB-C Hub (5-in-1), welcome guide, our worry-free 18-month warranty, and friendly customer service.

Use anti-cheat for behavior Anti-Xray cannot see

Obfuscation changes what the client receives; it does not decide whether a mining path is suspicious. Add a behavior-focused anti-cheat or moderation workflow for patterns such as unusually direct ore routes, impossible reaction times or repeated high-value finds. Review alerts with context rather than punishing solely on one statistic, because legitimate branch mining and fortune tools can resemble automated behavior.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Performance and tuning trade-offs

CPU cost

Mode 1 is the least computationally intensive. Modes 2 and 3 perform more replacement work, and the cost rises with the number of chunks being generated or updated. Monitor server tick health while players explore new terrain, not only while everyone is standing in an established area.

Network cost

Paper describes mode 3’s per-chunk-layer randomization as capable of reducing network load when players join and improving chunk-packet compression. The documentation gives an approximate factor-of-two reduction in that context, but it is not a hardware-independent TPS or bandwidth benchmark. Measure your own join and exploration traffic before promising a particular saving.

Client FPS

Including air can make hidden geometry more complex for some clients and may cause FPS drops. Test with the graphics settings and hardware your community actually uses. If reports concentrate on low-end systems, compare mode 2 and mode 3, reduce the protected height to the ore-bearing range, and reconsider whether every air block must be hidden.

Update radius and coverage

The documented example uses update-radius: 2. This controls how far around a block update Paper refreshes obfuscated data. Keep the value consistent with your gameplay and test redstone, explosions, pistons and mining near chunk borders after changing it. The setting does not replace a complete hidden-block list or expand the configured Y range.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

A verification checklist

  • Configuration: enabled is true in every protected world, and the selected engine mode is intentional.
  • Coverage: stone and deepslate ore variants, valuable containers and any custom targets are listed.
  • Exposure: air is present when cave and water exposure must be concealed.
  • Height: max-block-height reaches the highest relevant ore layer for the world version.
  • Permissions: only trusted administrators have paper.antixray.bypass.
  • Seed security: feature-seed and structure-seed hardening is configured where supported, and backups are access-controlled.
  • Testing: a normal player account has been tested in stone, deepslate, caves, water, new chunks and each alternate dimension.
  • Monitoring: server tick time, bandwidth, chunk-join behavior and client FPS have been observed after deployment.

Recommended decision for most servers

Start with engine mode 3, a complete ore and container list, air in hidden-blocks, a height that covers your actual ore distribution, and the documented update-radius: 2 baseline. Test it with ordinary and low-end clients. If client FPS is unacceptable, compare mode 2 and mode 3 before removing air; removing it restores the cave-exposure weakness that prompted the change. Use mode 1 only when lower server cost is more important than hiding ores visible from caves.

Finally, audit bypass permissions and seed access, then pair Anti-Xray with behavior monitoring. That combination addresses configuration gaps, exposed blocks, seed-derived prediction and clients that do not rely solely on the obfuscated chunk data.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.