Developer Notes

How Grace works,
and why it works that way.

This page covers the vision behind GraceAC, the technical decisions that shape it, and the license that governs the open parts of it.

The vision

Most anticheats today fall into one of two camps. Either they are heavy, intrusive, and punish players before a human ever looks at the evidence, or they are lightweight but blind to anything more subtle than fly hacks.

GraceAC was built to sit between those two extremes. The goal is high detection accuracy with near-zero TPS impact, running at the proxy level so it sees every player on every backend server from a single point. No agents. No per-server installs. One plugin, full network visibility.

The ML sidecar handles what rules cannot. Ghost configs, humanised movement, bypass timing that sits just under every threshold. That layer is trained on real packet logs from real servers, not synthetic data.

Technical architecture

Async processing

All detection logic runs off the main server thread. Your TPS stays clean regardless of how many players are being checked simultaneously. Grace is designed to be invisible to your server performance.

Proxy-level interception

Grace runs on Velocity and intercepts packets before they reach your backend servers. This gives it full network-wide player tracking, reduced packet overhead compared to per-server solutions, and a single configuration point for your entire network.

Packet-level analysis

Checks operate on raw packet data, not on game-engine abstractions. This means Grace sees movement, combat, and timing data at the lowest possible level, before the game has a chance to interpret or smooth it.

GeyserMC compatible

Grace works with GeyserMC, so Bedrock players on your network are covered alongside Java players. Detection thresholds account for the differences in Bedrock movement and combat behaviour.

Detection philosophy

Grace does not auto-ban. That is a deliberate choice, not a limitation.

Every detection fires an alert, graded by confidence. High-confidence alerts are flagged prominently. Lower-confidence detections are logged quietly for review. Your moderators and administrators see everything in real time and make the call themselves, with full context.

When action is needed, the tools are there. A configurable kick and ban system lets you set your own thresholds. A rubberband system can silently correct suspicious movement without alerting the player. All of it is tunable per server, because a 20-player SMP and a 500-player network do not need the same settings.

The philosophy is simple. Grace flags. Humans decide. No innocent player gets banned because a check misfired at 3am with nobody watching.

Compatibility and extensibility

Grace targets Minecraft 1.19 and above on Velocity proxy networks. The Companion Plugin handles backend communication and is open source for review and custom integration.

The API is open for extension. You can build custom alert handlers, pipe detections into your own Discord bot, integrate with your ban database, or add your own checks on top of the rules layer. The closed part is the Engine. Everything built around it is yours to use.

License

GraceAC API and Companion License

This license covers the open-source portions of GraceAC only. The closed-source Engine is not included.

1. Definitions

"Software" refers to the GraceAC API and Companion Plugin source code and binaries. "Engine" refers to the closed-source GraceAC core logic, which is not covered by this license. "Author" refers to MH-Al0.

2. Grant of License

Subject to the terms of this license, the Author grants you a non-exclusive, royalty-free license to use, copy, and execute the Software for personal or commercial Minecraft server operations.

3. Restrictions on Redistribution and Modification

You may not redistribute, sub-license, or sell the Software in original or modified form to any third party without express written consent from the Author. You may modify the Software for private use on your own server. Any public display or distribution of modifications is prohibited unless permission is granted. All requests must go through the official GraceAC Discord or GitHub.

4. Reciprocity

If the Author grants permission to distribute a modified version, that version must be made open source, licensed under this exact license, and must include a prominent notice stating what was changed along with a link to the original GraceAC repository.

5. Proprietary Engine Notice

This license applies strictly to the API and Companion Plugin. No rights or licenses are granted toward the GraceAC Engine. Any attempt to reverse-engineer, decompile, or bypass the obfuscation of the Engine is a violation of this agreement.

6. Limitation of Liability

The Software is provided as is, without warranty of any kind, express or implied. In no event shall the Author be liable for any claim, damages, or other liability, whether in an action of contract, tort, or otherwise, arising from or in connection with the Software or its use.