What Cyrus can and cannot do on your server

When you connect a server, you grant Cyrus a short list of permissions for that server only.

What Cyrus can do

• See the server: name, game, version, status, resources and player count.
• See installed plugins and mods: names and versions, to check for conflicts before a build or install.
• Write mods and config: only into the plugin, mod, config, data pack and resource pack folders, and only over the exact file it expects.
• Reload or restart the server after an install, within a daily limit.
• Read recent logs: the end of the console, to check an install worked.
• Set the resource pack in the server settings.

What Cyrus cannot do

• It has no access to your Nxeon password, SSH keys or server login.
• It cannot touch servers you did not tick.
• It cannot write outside the folders above, or overwrite a file it did not expect.
• It cannot run console commands, change your billing, delete a server, or read your wallet.
• It cannot restart a server as often as it likes: restarts are limited.

Every action is recorded

Each action is tied to you, the server and the grant. Nxeon keeps an audit trail.

Revoking

Open Account, then Connected servers, and choose Disconnect on a server. All permissions for it end at once. You can reconnect later.

If you revoke while an install is running, Cyrus keeps one narrow ability: to roll back what it was installing, so the server is not left half-changed.

Related: installing and rolling back.