iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Playing with friends? Godlike.Host runs hosted Terraria servers from 10 data-center locations, with free DDoS protection.
TShock uses permission nodes—not group names—to decide what a Terraria player can do. Set up the first owner account, create narrowly scoped groups, assign nodes such as tshock.admin.kick or tshock.world.save, and verify effective permissions with the group commands. This guide covers the initial setup sequence, command syntax, role design, REST access, and the checks to perform when TShock reports that a user lacks permission.
What TShock adds to a Terraria server
TShock is a server-side toolbox for Terraria. It provides account authentication, permission-based groups, server-side characters, anti-cheat controls, item bans, regions, warps, moderation commands, and world-management commands. Because these functions run on the server, players do not need a client-side mod to use ordinary commands.
Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →The important distinction is that TShock does not treat a group called “admin” as automatically privileged. A group is a collection of permission nodes. A player receives those capabilities through the group assigned to the player, and optionally through parent-group inheritance. A group can therefore be named moderator, builder, or anything else while having precisely the permissions you choose.
TShock documentation is still evolving, and some references are versioned or marked as migrated. Command names and permission nodes can change between releases. Use the permission reference that matches the TShock release installed on your server, and confirm a command in that release before granting it broadly.
#1 Best Overall
- Powerful Turbo Fan:CAGIWIRU Electric Air Duster have reached speed up to 130000RPM,Can efficient remove dust and debris.With LED light and Three Adjustable Speed to meet with different cleaning tasks.
- With Attached USB C Fasting Charging cable.Charing 3 hours,Enjoy up to 240 minutes of use on the lowest setting, For third speed can use for 25mins.with four charging options to meet with your needs.
- Wide Application: attached 5 different nozzles,making it suitable for a variety of scenes, such as car,pet, pc, keyboards, and other electronic devices. It also serves for office and home clean duster.
- Handy Design & Portable:Cordless air duster electric nozzle is Light weight and small size, design and comfortable to hold and space saving, convenient to carry around. You can put it in your room or inside the car without taking up space.
- Economical &Reusable: Built durable materials with a long-lasting battery,our CAGIWIRU air duster it's a sustainable alternative to disposable air cans.
Complete the first-time TShock setup
The first setup creates the account that can administer groups and permissions. Perform it from a trusted console or an authenticated in-game session, and use a unique, strong password for the owner account.
- Start the TShock server. Read the server console and copy the setup code it displays. The code is intended for the initial setup flow.
- Join the server with a Terraria client. Connect to the world running the TShock server.
- Claim setup access. Run
/setup [setupcode], replacing the bracketed value with the code shown in the console. TShock uses square brackets in documentation to indicate a value you must replace; do not type the brackets unless the value itself requires them. - Create the first privileged account. Run
/user add [username] [password] owner. Choose the account name and password you intend to protect as the server owner identity. - Log in. Run
/login [username] [password]with the credentials you just created. - Finish setup. Run
/setupagain after logging in. This completes the setup state and leaves the account with the owner-level privileges needed to administer the server.
Do not use the owner account for routine play. It has all privileges, so a stolen password or an accidental command has a much larger impact than the same mistake made by a limited moderator account. Create separate staff accounts and reserve the owner identity for configuration and emergency administration.
Recommended Free Tools
Command prefixes and command syntax
TShock’s default command prefix is /. Its default silent prefix is .; a silent command can execute without displaying the command text to other players. Both specifiers are configurable, so a server that changed them will not behave like a fresh installation. If /kick does not invoke a command, check the server configuration for the active prefix before changing permissions.
Arguments shown as [value] are placeholders. Replace them with the relevant name, password, group, or permission node. The following commands are the core account and group-management tools.
Rank #2
- Screen Cleaner is Your Screen’s New Bestfriend! - EVEO is proud to present a screen cleaner that’s perfectly suited for your TV. Meet your new screen cleaner, computer screen cleaner, laptop cleaner, iPad cleaner, Macbook,tv cleaner or any other electronic device. Our screen cleaner spray and wipe along with the included plush microfiber cloth, easily removes dust, fingerprints & other smudges on the screen’s surface. Clean effectively for a streak-free screen
- Gentle on your Screens - Our screen cleaner spray and wipes is compatible to be used even for the most sensitive LCD, LED, CRT, and OLED screens in proper use. Be at ease knowing that this product is compatible with all the major brands: LG, SONY, Samsung, Sharp, iPad, iPhone, Android screens, Kindle, PC monitors - we’ve got you covered! Can be used as LCD screen cleaner, tv cleaner, smart tv screen cleaner, and more
- Premium Super Soft Plush Microfiber Cloth - Included in this efficient screen cleaning kit. This screen cleaner spray and wipe has our signature plush microfiber cloth specially designed to comply with screens and monitors and leave them streak-free. Has been shown to effectively absorbs stubborn stains, zero streaks, and no fiber shedding. Always use this together with our screen cleaner for the best results
- Easy-to-Use Screen Cleaner Kit + microfiber cleaning cloth - The EVEO Screen Cleaning Kit will easily be your new favorite tool when it comes to taking care of the things you love most, quick and easy solution for a streak-free screen. Simply screw on the sprayer gun on the screen cleaner bottle. Spray the cleaning liquid onto the microfiber cloth, then wipe the screen until desired cleanliness & shine is achieved.
- Quality Screen Care Kit Worth Purchasing - Enjoy a convenient Screen Cleaner anytime, anywhere you need it. Your satisfaction is our top priority. We stand behind the quality of our products and that’s why, you shouldn’t be worrying at all. We manufacture the Best Screen Cleaner. and can be used for laptop cleaning kit, laptop screen cleaner, tv screen cleaner for smart tv. MacBook screen cleaner, monitor cleaner or screen cleaner spray for electronic devices with microfiber cleaning cloth
| Command | What it does | Typical use |
|---|---|---|
/login [username] [password] |
Authenticates a registered account. | Run after joining when you need the permissions of a registered user. |
/user add [username] [password] [group] |
Creates an account and assigns it to a group. | Create a staff or player account during setup or administration. |
/user group [username] [group] |
Moves an existing account to another group. | Promote a player to moderator or return a staff account to a lower role. |
/group add [group] [permissions] |
Creates a group, optionally with permissions. | Make a role such as moderator or builder. |
/group addperm [group] [permission] |
Adds a permission node to a group. | Grant one capability without replacing the group’s existing nodes. |
/group delperm [group] [permission] |
Removes a permission node from a group. | Revoke a capability while leaving the rest of the role intact. |
/group list |
Lists groups known to TShock. | Check the exact spelling of a group before assigning a user. |
/group listperm [group] |
Displays permissions assigned to a group. | Audit what a role can do, including permissions inherited through its design. |
/group parent [child] [parent] |
Makes one group inherit from another. | Build a role hierarchy deliberately instead of duplicating nodes. |
Representative player-facing commands include /kick, /ban, /mute, /region, /warp, and /save. Having the command available in the server does not make it available to every player; the relevant permission node still has to be present in the user’s effective permissions.
How TShock permissions work
A permission node is the capability check performed by a command or feature. The user’s effective permissions come from the group assigned to the logged-in account and any parent relationship configured for that group. The group label itself has no magic meaning.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
For example, a group named moderator can receive tshock.admin.kick and tshock.admin.mute while receiving neither tshock.admin.group nor world-editing permissions. That arrangement lets moderators handle player behavior without allowing them to create accounts, change roles, or alter the world.
| Permission node | Capability or command | Role-design implication |
|---|---|---|
tshock.admin.kick |
/kick |
Useful for a moderation role that needs immediate removal of disruptive players. |
tshock.admin.ban |
/ban |
Grant only to staff trusted to impose longer-term sanctions. |
tshock.admin.mute |
/mute |
Allows chat moderation without granting ban or configuration control. |
tshock.admin.group |
/group |
Controls group administration; keep it away from ordinary moderators. |
tshock.admin.region |
/region |
Needed for region protection and related region administration. |
tshock.admin.warp |
/warp |
Controls warp management and travel points. |
tshock.world.save |
/save |
Allows a role to trigger a world save without broader administration. |
tshock.world.info |
/world |
Provides world-information commands. |
tshock.account.register |
/register |
Allows account registration when your server permits players to register themselves. |
tshock.account.login |
/login |
Allows account authentication. Keep login available to the accounts that need to authenticate. |
tshock.cfg.maintenance |
/checkupdates, /off, /restart, and /version |
Maintenance and shutdown controls can interrupt the server, so reserve them for trusted operators. |
The exact command-to-node mapping is release-dependent. Treat this table as the documented mapping for the listed nodes, then verify the installed release’s permissions reference before deploying a production role.
Rank #3
- 【Large size】：Measuring 800 x 300 mm/ 31. 5×12 inches, which is wider and taller than others. Large mouse pad can perfectly fit your keyboard and mouse of any size, and there is also ample space for peripherals such as phones, tablets, etc.
- 【LED backlight mouse pad】：Blade Hawks RGB mouse pad provides 7 static modes and 7 dynamic modes will give you the options you are looking for. Power-off memory function remembers the last lighting mode you selected. The super glow fiber Chroma will give you a colorful gaming setup that you want.
- 【Anti-slip rubber base】：Made from Natural rubber, this gaming mousepad will firmly grip your desktop, allowing you to enjoy the ultimate precision in the games you are most passionate about. It also comes with a texture that enhances this ability even further.
- 【Smooth and waterproof surface】: Micro-textured cloth surface, for extremely precise mouse control and a smooth movement. When liquid splashes on the gaming mouse pad, it forms water droplets and slides down. Will not delay your work or gameplay.
- 【Plug and play】: This mouse and keyboard pad is powered by USB, plug and play, no driver required. One button control light modes. Press one time to change the lighting mode, press twice to change the brightness, press and hold about 3 seconds turn ON/OFF.
Design groups with least privilege
Start with roles that reflect jobs on your server, not with a single all-powerful “admin” group. A practical baseline is a normal member group, a moderator group, a builder group, and an administrator or operator group. Add only the nodes each role needs.
| Role | Command scope | Permission breadth | Inheritance choice |
|---|---|---|---|
| Member | Account login and the ordinary commands your server intentionally exposes. | Minimal; no moderation, group, or maintenance nodes. | Standalone or inherited from a deliberately empty base group. |
| Moderator | Player-behavior moderation such as kick and mute; add ban only when appropriate. | Individual moderation nodes rather than a wildcard. | May inherit member settings, but not operator permissions. |
| Builder | Building and protected-area administration that your server has chosen to delegate. | Region-related nodes as needed; no account or shutdown control. | Can inherit member settings; keep world-edit scope explicit. |
| Administrator | Group, region, warp, world, and maintenance management. | Broad but still auditable; use explicit nodes where practical. | May inherit moderator or builder roles only after reviewing the combined effect. |
| Owner | All server capabilities. | Full privileges; avoid assigning this role to ordinary players. | Use only for the protected owner account created during setup. |
Use /group parent [child] [parent] when inheritance expresses a real relationship. For example, a moderator can inherit the member role and add moderation nodes, while an administrator can inherit a carefully reviewed staff role. Inheritance reduces duplicate configuration, but it can also hide a permission that came from a parent. Audit the resulting role with /group listperm [group] after every hierarchy change.
The Tool Desk
Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Give a player exactly one command
To grant one capability without turning a player into a superadmin, create or select a limited group, add a single node, and move the account into that group. The sequence below gives a player kick access without granting group administration or world maintenance.
- Log in with an account that already has permission to manage groups.
- Create a role if one does not exist:
/group add kickstaff. - Add the one capability:
/group addperm kickstaff tshock.admin.kick. - Assign the player:
/user group [username] kickstaff. - Inspect the role:
/group listperm kickstaff. Confirm that the kick node is present and that no unintended wildcard or parent grants additional powers. - Have the player log in again, or otherwise refresh the account session as required by the installed release, then test
/kickin a controlled situation.
Use the same pattern for a mute-only role with tshock.admin.mute, a save operator with tshock.world.save, or another single documented node. Do not add * merely because the command is not working; first find the exact node required by that command.
Rank #4
- 【Softer and More Comfortable】Vaydeer wrist rest has unique diamond pattern, which is the combination of softness and aesthetics. The materials of wrist rest are improved into higher quality memory foam and covered with silky smooth lycra. The computer wrist rest makes you as comfortable and cushiony as like rest your wrists on clouds.
- 【Ergonomic Wrist Saver】The wrist rests for keyboard and mouse comes with a 17.32×3.15×0.83 inch keyboard wrist pad and a 5.94×3.15×0.83 inch mouse wrist support. Based on ergonomic design, the unique concave shape is the perfect fit for your wrist joints. The wrist rest pad fits most computer keyboards and laptops, improve hand and wrist posture, release your wrist and arm stress.
- 【Non-Slip Rubber Bottom】Featuring an anti-skid silicone base on the bottom, this wrist keyboard support stays firmly in place on your desk, preventing the padding from sliding around, ensuring stable and consistent wrist support during extended computer sessions.
- 【Better Experience & Pain Relief】Our keyboard arm rest is beneficial to alleviate the soreness caused by direct contact and friction between your arm and a hard desk surface, reducing the risk of wrist fatigue or carpal tunnel. The soft texture of memory foam can evenly distribute the pressure around your wrists and provide good support with just enough give.
- 【Helpful in Multiple Scenarios】Whether you're working, studying, writing, typing, gaming, this keyboard and mouse rest combo is an essential accessory to add comfort and support to your hands and wrists. It’s also a great gift for men, women, family, friend, coworker, gamer, teacher, etc.
Wildcards, inheritance, and permission audits
Wildcard permissions
The versioned group guide documents * as a wildcard group target. A wildcard can grant a very broad set of capabilities, which makes it convenient for a controlled administrator role but dangerous for players, temporary staff, or accounts used for testing. Prefer individual nodes for moderators and builders so that a newly added command does not silently become available to them.
Do these 3 things before closing this tab:
1Repair Windows errors before they cause bigger problems2Scan for outdated or missing drivers - takes under a minute3Clear out junk files and repair common Windows errorsParent groups
Parent relationships are useful when several roles share a base set of permissions. They also create transitive access: a child receives what the parent grants, and a later change to the parent changes every child. Before promoting a player, inspect both the child role and its parent chain. Keep the hierarchy shallow enough that an operator can explain where each effective permission came from.
Routine audits
- Run
/group listto verify the roles that actually exist. - Run
/group listperm [group]for each staff role and record unexpected nodes. - Check
/user group [username] [group]assignments for former staff and temporary accounts. - Review wildcard use and parent relationships after installing a TShock update.
- Test a representative command with a non-owner account instead of testing only while logged in as the owner.
REST and API permissions are separate
TShock’s REST capabilities use their own permission family. In-game moderation access does not automatically mean that an account or API client should be able to call the same operation over HTTP. Grant REST access separately and choose the narrowest node required by the integration.
| REST node | What it permits | Security decision |
|---|---|---|
tshock.rest.command |
Run raw TShock commands through REST. | Extremely broad because a raw command endpoint can expose many operations; avoid unless the integration truly requires it. |
tshock.rest.groups.manage |
Manage groups through REST. | Reserve for a trusted administration service. |
tshock.rest.groups.view |
View group information through REST. | Use when an integration only needs to inspect roles. |
tshock.rest.kick |
Kick through REST. | More narrowly scoped than raw command access for a moderation panel. |
tshock.rest.cfg |
Configuration-related REST access. | Keep separate from ordinary in-game moderation and protect the API endpoint. |
When an external panel needs only one action, grant that action’s REST node rather than tshock.rest.command. Treat API credentials like server credentials: limit who can obtain them, rotate them when staff changes, and avoid exposing an administrative endpoint to an untrusted network.
Best Value
- 【No Drill Mounted】Cable management tray can be assembled in as little as 3 minutes or less-simply. Side clips easily clampe the edge of desk, pass through the holes on the sides, and secure excess cables with baskets. Desk cable management supports inward or outward installation to meet your needs in different scenarios, and provides you with great convenience when collecting and organizing wires.
- 【Rubber Pad Protects Desk】Wire organizer under desk built-in soft rubber pads on the clamp protect your desk from scratches, so you will not damage your furniture or office.
- 【Sturdy and Beautiful】Cord management under desk is made of high-quality carbon steel and holds about 15 lbs. The wire basket has 2 holes on each side of the tray to enable your cables to pass freely. Cable baskets are suitable for desk thickness use from 0.4" to 2.4".
- 【Space Saving & Keep Organized】Desk cable management tray holds all your power cords, outlet strips, USB hubs and computer transformers hidden from your feet, and the data cables will not enter the vacuum cleaner to keep your desk clean and tidy. Desk wire organizer is also suitable for use in the kitchen and outdoors.
- 【Reduce Safety Risks】Cable tray under desk keeps all plugs away from your kids, no more worry about tripping. Using 2 holes wire tray saves extra space, helps you easily cabling and wire protection. The mesh design is not easy to accumulate dust, but avoids safety accidents caused by messy wires.
Why TShock says “you do not have permission”
A permission error usually means the command is working and the authorization check failed. Troubleshoot from the narrowest cause to the broadest rather than granting a wildcard.
Crashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minutePC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11- Confirm the account. Make sure you logged in with the account you intended to test. An owner account and a similarly named player account can have completely different permissions.
- Check the group assignment. Verify that the username is in the expected group and that the group name is spelled exactly as configured.
- Inspect the group’s permissions. Run
/group listperm [group]. Look for the exact node required by the command, such astshock.admin.kickfor/kick. - Review parent inheritance. If the role depends on a parent, confirm the parent relationship with
/group parent [child] [parent]and inspect the parent’s permissions. Conversely, make sure a supposed limited role did not inherit an overly broad administrator parent. - Check the command prefix. The default is
/, but a configuration change may use another prefix. The silent prefix defaults to.. - Check spelling and release compatibility. A permission node documented for another TShock version may not match the installed command or permission name. Compare the installed release with the current permissions reference and versioned group guide.
- Refresh authentication. Log out and back in, then retest with the intended account. This removes uncertainty about whether the server is still using an earlier session state.
- Test from the correct interface. A node such as
tshock.rest.kickapplies to REST access, whiletshock.admin.kickapplies to the in-game command. Granting one does not substitute for the other.
Only after these checks should you change a group. Add the single missing node, inspect the result, and test again. Broadening the role first can hide the actual configuration error and leave the account with more access than intended.
Operational and security practices
- Protect the owner account. Use a strong, unique password and do not share it for routine moderation.
- Separate duties. Give moderators moderation nodes, builders region-related access, and operators maintenance access according to their responsibilities.
- Prefer explicit permissions. Individual nodes are easier to audit than a wildcard, especially as new TShock commands are added.
- Use group inheritance deliberately. Document why a child has a parent and review the complete chain after role changes.
- Keep API rights independent. An in-game moderator does not automatically need REST access, and an integration that can kick does not necessarily need group-management rights.
- Review after upgrades. Documentation can be migrated or versioned, and command details may evolve. Recheck important nodes against the release installed on the server.
- Test with a non-owner account. Owner privileges can make a broken role appear to work, masking missing permissions until a real moderator tries the command.
A practical role-building workflow
For a new server, the safest order is to establish authentication first, then build permissions from the smallest useful role upward.
- Complete the setup sequence and secure the owner account.
- Create a normal member role with only the account capabilities your server intends to expose.
- Create a moderator role and add individual moderation nodes, starting with kick or mute as appropriate.
- Create a builder role separately if players need region or building administration.
- Create an administrator role for group, warp, world, or maintenance work. Add only the nodes that role truly requires.
- Use parent groups only where the inheritance is easy to explain and audit.
- Assign one test account to each role and verify both allowed and denied actions.
- Record the role definitions and repeat the audit after a TShock upgrade or staff change.
This workflow keeps command scope, permission breadth, inheritance, interface, and release compatibility visible—the five dimensions that matter when deciding whether a role is safe for a particular player or integration.
Quick Recap
Key takeaways
- TShock authorization is node-based: a group name alone never creates administrator powers.
- The initial setup is
/setup [setupcode],/user add [username] [password] owner, login, and a final/setup. - Use the exact node for the command you want to grant, such as
tshock.admin.kickfor/kickortshock.world.savefor/save. - Build custom roles with least privilege, audit parent inheritance, and avoid wildcard access for ordinary players.
- REST nodes are separate from in-game permissions; grant them independently and as narrowly as possible.
- When access fails, verify the account, group, node, parent chain, prefix, session, interface, and installed release before widening permissions.
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
