Best Rust Admin Plugins in 2026

This list comes from building Rust plugins and running servers with them. The free staples do most of the work, so they get top billing. Download counts below are uMod lifetime totals as of July 2026. Two of the picks are ours; they appear where the free stack has a gap. If your server isn't set up yet, start with the setup guide.

The short version:

• Vanish: moderate invisibly
• Admin Radar: see what suspected cheaters see
• Permissions Manager: GUI for groups and permissions
• BattleMetrics: ban attribution, RCON, and shared ban lists
• A report + anti-cheat layer, ReportMe for F7 handling, Payback for confirmed cheaters
• Tebex or PayNow: a store that sells VIP and delivers it automatically
• SkinBox: let players apply community workshop skins
• Monumental Signs: server branding and VIP store ads in game

Everything below is grouped by the job it does.

Moderation basics

Vanish

Vanish makes you invisible to players, NPCs, and turrets. A suspect walks past you without knowing you're there, which is the only way to observe one, cheaters behave when they see an admin online.

• Why: invisible observation is the foundation of every investigation. 468K downloads, third most-downloaded plugin on uMod, actively maintained.
• Get it: Vanish by Whispers88 on uMod.
• Tip: grant vanish.damage and vanish.unlock only to admins you trust. Junior staff don't need to open doors or deal damage while invisible.

Admin Radar

Admin Radar draws an overlay of player positions, health, distance, and entities. Pair it with Vanish to watch a suspect's aim tracking and pre-fires against information they can't legitimately have.

• Why: wall-tracking and pre-firing are only visible when you can see what the cheater sees. 385K downloads.
• Get it: Admin Radar by nivex on uMod.
• Tip: adminradar.allowed grants a temporary admin flag while active. Trusted staff only, and keep it off until you're actively investigating.

Permissions and groups

Every Oxide plugin exposes its features as permission strings, vanish.allow, kits.vip, payback3.admin, and you assign those permissions to groups, not individual players. Set up the groups once and staffing changes become one command.

How it works:

oxide.group add vip              # create a group
oxide.grant group vip kits.vip   # give the group a permission
oxide.usergroup add Adam vip     # put a player in the group
oxide.show group vip             # see what the group has
oxide.revoke group vip kits.vip  # take it back

Set up four groups:

Grant to groups, not players. oxide.grant user exists, but every direct grant is one you'll forget about later.

For a GUI over this system, Permissions Manager by Steenamaroo (free) does the job: /perms opens a panel where you click permissions on and off per player or group, with backup and restore. Learn the console commands first so you know what the GUI is doing.

BattleMetrics

Not a plugin, but it belongs on this list. BattleMetrics is the RCON and player-intelligence service most serious Rust servers run, and it fixes a blind spot in Steam's own ban data:

• VAC bans and game bans are different things. VAC is Valve's anti-cheat. Rust's main protection is EAC, so a VAC ban on a profile is usually from another game, weak evidence for Rust.
• Steam shows game bans but not which game. A profile with "1 game ban" could have been banned in any EAC-protected title. You cannot confirm it was Rust from Steam alone.
• BattleMetrics attributes bans to Rust. Its ban records tell you whether an account's ban was actually a Rust ban, and when. That's the difference between "this guy has a ban somewhere" and evidence.

Beyond ban attribution: live RCON console, player session history, and, the part that compounds, shared ban lists and data sharing between organizations. The more orgs you share with, the more ban history and alt-account linkage is visible on players connecting to your server. Set up your org, join or create a shared ban list, and your bans start working for other servers and theirs for you.

Reports and anti-cheat

The free stack covers moderation and permissions. It does not triage your F7 report queue or screen connecting accounts. That's the gap our two plugins fill, both built on the BattleMetrics data above.

Handling F7 reports: ReportMe

F7 reports on a busy server are dozens per wipe, most noise, a few real. ReportMe collects them, enriches each target with BattleMetrics and Steam data, scores trust, alerts Discord, and can ban automatically on the clearest cases. It ships in shadow mode: it logs what it would do until you've watched it and set the thresholds.

• Why: the free stack investigates one player at a time. It doesn't tell you which reports deserve your time.
• What it doesn't do: decide who's cheating for you. It ranks and routes, and shadow mode lets you verify the scoring before it acts.
• Setup: in the docs, including the exact config we run in production.

Dealing with confirmed cheaters: Payback

Payback is an in-game panel with 60 punishment and investigation cards for a caught cheater, from silently zeroing their damage to launching them out of a cannon. Rust's developers have confirmed it's allowed on Community and Official servers.

• Why: the free stack ends at "ban". Payback covers confirmation testing and the graduated response before it.
• Team morale: most admin teams are volunteers. Catching a cheater takes hours of unpaid work, letting your admins have some fun with a confirmed cheater is what keeps them putting in those hours.
• What it doesn't do: detect. Use it after you've confirmed the cheat. Card list in the docs.

Selling VIP: server stores

The vip group from the permissions section needs a way to take payment, and a PayPal address in your Discord isn't it, you'd be handling sales tax, fraud, and chargebacks yourself, and granting every purchase by hand. A server store platform fixes both: it hosts the checkout as the legal seller (the "merchant of record", tax, fraud, and chargebacks are its liability, not yours), and its Oxide plugin fulfills purchases by running the console commands you define. A VIP sale becomes oxide.usergroup add <player> vip with no admin online.

Two platforms are worth recommending, and they split on pricing:

Tebex

Tebex is the longest-established option (formerly Buycraft) and widely used across games.

• Pricing: flat 5% per transaction on the free Starter plan. The Plus plan (£12.49/mo) keeps the 5% and adds a custom domain, deeper webstore customization, and abandoned-cart recovery.
• Rust integration: official plugin on uMod, installed like any other Oxide plugin. It checks for due purchases and runs your configured commands, item grants, group adds, whatever you map to each package.
• Fit: the safe default. Biggest track record, simplest pricing.

PayNow

PayNow is the newer, Rust-focused competitor, Rust and Rust Console are its headline games.

• Pricing: 3.5% per transaction on the free plan, 3% on Pro ($19.99/mo), 2.5% on Business ($49.99/mo). Every tier includes full chargeback protection and tax handling.
• Rust integration: official Oxide plugin (also works under Carbon), same command-fulfillment model as Tebex. Supports subscriptions, so monthly VIP renews without repurchase.
• Fit: lower fees at every tier, the free plan's 3.5% already undercuts Tebex's 5%, and Pro's 3% + $19.99/mo comes out ahead of Tebex's flat 5% above roughly $1,000/mo in sales.

Whichever you pick: sell permissions and queue skip, deliver through groups (oxide.usergroup add), and keep your package command mappings written down somewhere so a wipe doesn't cost you the setup.

Community skins: SkinBox

SkinBox by k1lly0u lets players apply Steam Workshop skins to their items in game. Know the rule before installing it: since Facepunch's July 2025 Terms of Service update, servers cannot grant access to paid skins or DLC a player doesn't own. Community skins are the carve-out: workshop skins Facepunch has never sold aren't paid content, and applying those is still allowed. That's what SkinBox is used for now, and the plugin has been updated for the policy.

• Why: players like customizing their gear, and community skins are the compliant way to offer it. Works as a VIP perk through the permissions groups.
• The rule: no paid skins, no DLC content for players who don't own it. Full context in the setup guide's monetization section.
• Get it: SkinBox on ChaosCode.

Server branding: Monumental Signs

Monumental Signs pins custom image-URL signs to monuments, place one at a monument type and every spawn of that monument on the map gets it. Signs persist through wipes and map changes, players can't break or move them, and each URL can auto-refresh on a timer.

• Why: players can't buy from a VIP store they never hear about. Your logo, Discord link, and store ad at every monument reaches everyone without chat spam.
• Also works for: sponsor banners, event announcements, and live leaderboards (built-in leaderboard.chadius.io support).
• Get it: Monumental Signs.

If you want video walkthroughs of installing and configuring any of this, SRTBull's Rust Admin Academy is the best starting point for new admins.

Questions about the anti-cheat side: discord.fragmod.com.