Plugins are the good kind of unfair: your server gains homes, claims, rollback and live maps, and your friends install nothing: they join with plain vanilla Minecraft and it all just works. These are the twelve worth having, in the order a new server should install them. All free, all running on Paper.
First, the one prerequisite
Plugins need a server that can load them, which in 2026 means Paper. It runs your existing world, accepts vanilla clients, and is faster than the vanilla server even before you add anything. If you're on vanilla, switch first; the plugin install guide covers it.
Run the basics
1. EssentialsX
The commands every server is assumed to have: /home, /spawn, /tpa (teleport requests), /warp, kits, and a hundred small conveniences. Install it first; your friends will use /sethome within the hour and never stop.
2. LuckPerms
The standard permissions system: who may use which commands, organized into groups (default, trusted, admin). Its in-game editor (/lp editor) opens a web UI, which makes it the rare permissions tool you can configure without reading a wiki chapter. Every other plugin on this list respects it.
3. Vault
Not a feature, a glue layer: plugins talk to each other (permissions, chat prefixes, economy) through Vault's API. You install it once, configure nothing, and several other plugins quietly require it. Two minutes, done forever.
4. CoreProtect
The undo button. Every block placed, broken or burned is logged; /co inspect tells you who did what, and /co rollback puts it back: a griefed base restored in one command, days later. The plugin you install before you need it, because afterward is too late.
Protect the world
5. GriefPrevention
Self-service land claims: players claim their own builds with a golden shovel and nobody else can touch them. Zero admin workload once installed, which makes it the right protection model for friend servers, you stop being the police.
6. WorldGuard (with WorldEdit)
The admin-defined alternative: you mark regions (spawn, the communal farm) and set their rules (no PvP, no explosions, no builds). It rides on WorldEdit, which you'll keep anyway for its mass-editing wands (//set, //copy, //undo) the moment anyone builds something big. Pick GriefPrevention or this as your main protection; running both models confuses everyone.
Keep it fast
7. Chunky
Pre-generates your world's terrain overnight (chunky radius 3000, chunky start) so exploration never causes generation lag again. Pair it with a world border. The single biggest performance favor you can do a new server; the full reasoning is in our lag guide.
8. spark
A profiler, not a fixer: /spark profiler runs for a minute and hands you a report naming exactly which chunk, entity or plugin is eating your tick time. It ends the guessing phase of every lag investigation, which is why it's on this list even though your players will never see it.
Let everyone in
9. Geyser + Floodgate
The crossplay pair: Geyser translates the Bedrock protocol so phone, console and Windows-app friends join your Java server; Floodgate lets them do it without owning Java accounts. On SpawnFort this pair is the crossplay checkbox at creation, but it's a normal plugin install anywhere.
10. ViaVersion
Lets newer clients join your server across Minecraft versions, so the friend who updated on day one still gets in while you wait for plugins to catch up. Removes the "everyone must update in lockstep" coordination problem entirely.
See the world
11. BlueMap
A live 3D map of your world in the browser, builds, players, the terrain itself, explorable like a video game Google Earth. The plugin your group shares screenshots of. (Dynmap is the venerable 2D alternative; BlueMap is the one that makes people say "whoa".)
12. TAB
Polish: prefixes and colors in the player list, sorted by LuckPerms group, a header with your server name. Cosmetic, five minutes to set up, and it makes a friend server feel like a real one.
The full list at a glance
| Plugin | Job | Install when |
|---|---|---|
| EssentialsX | Homes, warps, teleports, kits | Day one |
| LuckPerms | Permissions and groups | Day one |
| Vault | API glue other plugins need | Day one |
| CoreProtect | Logging and grief rollback | Day one |
| GriefPrevention | Player-made land claims | Before strangers join |
| WorldGuard + WorldEdit | Admin regions + mass editing | When spawn needs rules |
| Chunky | Pre-generate terrain | Before anyone explores |
| spark | Performance profiling | When lag appears |
| Geyser + Floodgate | Bedrock crossplay | When console/phone friends exist |
| ViaVersion | Newer clients on older servers | Every version season |
| BlueMap | Live 3D web map | Whenever, it's delightful |
| TAB | Player-list polish | Last |
The mistakes to skip
Wrong version jar: a plugin built for another Minecraft version fails on boot, always download for your server's exact version. Using /reload: it half-reloads plugins into broken states; restart the server instead; it takes seconds. Stacking overlapping plugins: two protection systems or two teleport suites fight each other, pick one per job. And skipping CoreProtect because nothing bad has happened yet: rollback only works on history that was being recorded.