How to Configure Vault on a Minecraft Server
Bridge economy, permissions, and chat metadata between plugins without making each plugin integrate with every provider directly. This guide covers install order, first startup, LuckPerms permissions, config files, use-case presets, integrations, performance checks, common failures, and admin FAQ.
Audience
Owners configuring economy shops, chat prefixes, rewards, jobs, and permission-aware plugins.
Install Jar
Vault.jar.
Tested Stack
Paper or Purpur 1.20.6 to 1.21.x, Java 21, LuckPerms for permissions, and a staging server before production changes.
What Vault Does
Vault should be treated as part of your server architecture, not as a random jar dropped into production. The safe workflow is to define the job the plugin owns, decide which groups can touch it, test the generated files on staging, then move only the reviewed configuration to the live server.
For Vault, the main job is: Bridge economy, permissions, and chat metadata between plugins without making each plugin integrate with every provider directly. That means every setting should support a concrete player workflow or staff workflow. If a setting does not have an owner, a test, and a rollback path, leave it at the generated default until you have a reason to change it.
The most common failure pattern is configuring the plugin as OP, seeing it work, and assuming players are ready. Operators bypass too much. For every section below, create a temporary non-OP account in the target LuckPerms group and test the exact command or interaction that normal players will use.
Keep a small audit note beside the config. Record the plugin version, the file paths changed, the exact permissions granted, the test account used, the commands verified, and the rollback file or database backup to restore. When another plugin depends on Vault, repeat the same test after updates because the failing part may be the bridge, provider, world context, or display plugin rather than Vault itself. Keep the note in your operations runbook.
Installation and First Startup
Back up the server before installing Vault. At minimum, keep a copy of the existing plugins folder, the world data if the plugin touches worlds or claims, and any database used by related plugins. Upload Vault.jar. into the plugins folder, then perform a full restart so Bukkit, Paper, or Purpur loads the plugin cleanly.
On first startup, do not edit every generated file immediately. Let the plugin create its folder, read the startup log, then run a small command or player action to prove the plugin is alive. The first goal is a known-good baseline. After that, make one config change at a time.
First startup checklist
- Confirm Vault appears in /plugins after a full restart.
- Check startup logs for detected economy, permission, and chat providers.
- Install an actual economy provider if shop plugins need money.
- Install LuckPerms if plugins need group and permission metadata.
LuckPerms Permission Setup
Configure Vault permissions through groups. A clean setup usually has default, trusted, helper, moderator, admin, and owner groups. Default players get only the commands required for normal gameplay. Staff groups get narrow operational permissions. Owner keeps destructive, economy-changing, rollback, purge, import, or wildcard permissions.
Use this pattern for every permission below. Replace the group and permission with the row you are granting. Run the command from console or as an owner, then test with a non-OP player in that group.
/lp group <group> permission set <permission> true
/lp group <group> permission check <permission>
/lp user <player> parent add <group>vault.adminGrant to owner: Allows Vault administrative info and conversion commands where available.
vault.updateGrant to owner: Shows update notifications to trusted administrators.
luckperms.meta.setprefixGrant to admin: Needed when Vault is used for prefix and suffix output through LuckPerms.
Command Workflows
Commands are not just a reference list. They are the operational workflows your staff will use under pressure. Write the exact command patterns into your runbook and include which group may run each one. For sensitive commands, test with a preview, a limited radius, a staging world, or a throwaway account before using them live.
/vault-infoShow Vault hooks where this command is available.
/version VaultConfirm Vault is loaded and see its version.
/lp group default meta setprefix 10 "&7Player &f"Create metadata that Vault-aware chat plugins can read.
/eco give <player> 10Verify a Vault economy provider is connected through an economy plugin.
Config File Deep Dive
The config files below are the parts of Vault most likely to matter on a real server. Do not copy a random full config from another network. Generated files change between plugin versions, and old examples can silently disable modern safeguards. Keep the generated comments, change only the setting you understand, then reload or restart using the plugin-specific path.
For every setting, write down the old value, the new value, why it changed, and how to back out. This is slower than editing blindly, but it prevents mystery behavior three weeks later when another admin tries to debug the server.
update-check
plugins/Vault/config.yml
Controls Vault update checking.
Recommendation: Leave notifications on for owners, but manage plugin updates manually.
Provider detection
Startup log
Vault reports which permission, economy, and chat provider it hooks.
Recommendation: Read startup logs after every provider change.
Economy provider
Dependent plugin setup
Vault is only a bridge. It does not create a full economy by itself.
Recommendation: Install EssentialsX Economy, CMI, or another compatible economy provider.
Chat metadata provider
LuckPerms and chat plugin setup
Vault can expose prefixes and suffixes from supported permission plugins.
Recommendation: Use LuckPerms for metadata, Vault for compatibility, and one chat plugin to display it.
Permission bridge
Dependent plugin setup
Older plugins may use Vault to query permission groups.
Recommendation: Keep LuckPerms installed even if modern plugins hook it directly.
Use-Case Configs
A good Vault setup depends on the type of server. Survival wants stability and player trust. Creative wants build speed and plot safety. Skyblock and economy modes care about item generation and abuse loops. Use these presets as decision checklists, then convert them into exact config changes for your own server.
Shop economy
Vault sits between a shop plugin and your economy provider.
- Install Vault.
- Install economy provider.
- Install shop plugin.
- Restart.
- Check logs for a successful economy hook.
Chat prefixes
LuckPerms stores metadata and Vault exposes it to compatible chat plugins.
- Set LuckPerms prefixes.
- Install Vault.
- Configure chat format.
- Test with a non-OP player.
Permissions integration
Some older plugins ask Vault for group or permission data.
- Keep LuckPerms as the permission source.
- Install Vault.
- Avoid duplicate permission plugins.
- Verify provider selection in logs.
Plugin Integrations
Most Minecraft plugin problems happen at the boundary between plugins. Vault may load correctly while the full workflow still fails because a dependency, bridge, economy provider, permission group, display plugin, or world manager is missing. Check integrations during startup and after every plugin update.
LuckPerms
Most common provider for permissions, groups, prefixes, and suffixes.
EssentialsX
Can provide an economy that other plugins access through Vault.
ChestShop
Needs Vault plus an economy provider for paid sign shops.
Jobs Reborn
Uses Vault-compatible economies for job payouts.
Performance and Maintenance
Performance tuning starts with scope. Do not enable every module, world, render, placeholder, command, or log type just because the plugin supports it. Enable the parts that support your server design, measure the impact, and keep a short maintenance checklist for future updates.
- Do not install multiple economy providers unless you know exactly which one Vault selects.
- Restart after changing economy or permission providers so hook order is clean.
- Use logs as the source of truth for which provider Vault selected.
- Avoid outdated permission plugins when LuckPerms already covers the role.
Common Errors and Fixes
When Vault misbehaves, separate facts from guesses. Capture the command used, player group, world, plugin version, and console output. Then work through the smallest reproducible test instead of changing five settings at once.
Shop plugin says no economy found
- Vault is installed.
- An economy provider is installed.
- Startup logs show an economy hook.
- The shop plugin started after Vault.
Fix: Install or enable an economy provider, then perform a full restart.
Prefixes do not show
- LuckPerms prefix exists.
- Vault is installed.
- A chat formatter is installed.
- The chat format uses prefix or display name placeholders.
Fix: Connect all three parts: LuckPerms metadata, Vault bridge, and chat display.
Wrong provider selected
- Multiple economy plugins are installed.
- Old jars remain in plugins folder.
- Startup order changed.
- Provider plugin failed to load.
Fix: Remove duplicate providers during maintenance and keep the intended provider documented.
Vault FAQ
Should I configure Vault on a live production server?
Use a staging copy for the first setup, then move the finished configuration to production during a quiet period. Vault may read files, register commands, or touch player data during startup, so testing on a copy prevents avoidable downtime.
Can I use /reload after changing Vault?
Avoid the global /reload command. Use a full server restart after provider changes when the plugin supports it, or schedule a normal restart when the change affects dependencies, database settings, worlds, generated regions, or plugin jars.
Where should I keep backups before changing Vault?
Back up the plugin data folder, the jar you are replacing, and any database tables used by the plugin. Keep the backup outside the live plugins folder so a later cleanup or plugin scan cannot accidentally load it.
How should I grant permissions for Vault?
Grant permissions to LuckPerms groups, not individual players. Use a small default group, a trusted staff group, and an owner group. Temporary exceptions should use LuckPerms temporary permissions with a clear expiration.
Why does Vault work for operators but not normal players?
Operators bypass many checks, so OP testing is not enough. Test with a non-OP account in the default group and watch the console for missing permission messages or plugin-specific deny output.
How do I know whether Vault loaded correctly?
Check the startup log for the plugin name, run the main info command, confirm the data folder was created, and test one normal player workflow. Do not assume the plugin is ready just because it appears in /plugins.
Should I edit generated config files by hand?
Yes, but keep comments, indentation, and encoding intact. YAML and HOCON are strict enough that one bad indent or missing quote can stop a plugin from loading its configuration.
How often should I review Vault settings?
Review the config after major Minecraft updates, plugin major releases, and changes to your server mode. Survival, skyblock, creative, and proxy networks usually need different defaults.
What is the safest way to update Vault?
Read the changelog, back up the existing jar and data folder, test the new version on staging, then replace the jar during a normal restart. Do not hot swap core plugins that hold data or hook deeply into server internals.
How do I document the final Vault setup?
Write down the plugin version, config files changed, permissions granted, commands staff use, and rollback steps. Store that note beside your server runbook so another admin can recover the setup later.
Official References
Check the upstream documentation before changing version-specific settings. This tutorial avoids full copied configs because plugin defaults and generated comments can change between releases.