Best Rust Admin Plugins in 2026

This list comes from building Rust plugins and running servers with them. The free staples do most of the work, so they get top billing — download counts below are uMod lifetime totals as of July 2026. Two of the picks are ours; they appear where the free stack has a gap.

The short version:

• Vanish — moderate invisibly
• Admin Radar — see what suspected cheaters see
• Permissions Manager — GUI for groups and permissions
• BattleMetrics — ban attribution, RCON, and shared ban lists
• A report + anti-cheat layer — ReportMe for F7 handling, Payback for confirmed cheaters
• Monumental Signs — server branding and VIP store ads in game

Everything below is grouped by the job it does.

Moderation basics

Vanish

Vanish makes you invisible to players, NPCs, and turrets. A suspect walks past you without knowing you're there, which is the only way to observe one — cheaters behave when they see an admin online.

• Why: invisible observation is the foundation of every investigation. 468K downloads, third most-downloaded plugin on uMod, actively maintained.
• Get it: Vanish by Whispers88 on uMod.
• Tip: grant vanish.damage and vanish.unlock only to admins you trust. Junior staff don't need to open doors or deal damage while invisible.

Admin Radar

Admin Radar draws an overlay of player positions, health, distance, and entities. Pair it with Vanish to watch a suspect's aim tracking and pre-fires against information they can't legitimately have.

• Why: wall-tracking and pre-firing are only visible when you can see what the cheater sees. 385K downloads.
• Get it: Admin Radar by nivex on uMod.
• Tip: adminradar.allowed grants a temporary admin flag while active. Trusted staff only, and keep it off until you're actively investigating.

Permissions and groups

Every Oxide plugin exposes its features as permission strings — vanish.allow, kits.vip, payback3.admin — and you assign those permissions to groups, not individual players. Set up the groups once and staffing changes become one command.

How it works:

oxide.group add vip              # create a group
oxide.grant group vip kits.vip   # give the group a permission
oxide.usergroup add Adam vip     # put a player in the group
oxide.show group vip             # see what the group has
oxide.revoke group vip kits.vip  # take it back

Most servers need four groups:

Grant to groups, not players. oxide.grant user exists, but every direct grant is one you'll forget about later.

For a GUI over this system, Permissions Manager by Steenamaroo (free) is the popular pick — /perms opens a panel where you click permissions on and off per player or group, with backup and restore. Learn the console commands first so you know what the GUI is doing.

BattleMetrics

Not a plugin, but it belongs on this list. BattleMetrics is the RCON and player-intelligence service most serious Rust servers run, and it fixes a blind spot in Steam's own ban data:

• VAC bans and game bans are different things. VAC is Valve's anti-cheat. Rust's main protection is EAC, so a VAC ban on a profile is usually from another game — weak evidence for Rust.
• Steam shows game bans but not which game. A profile with "1 game ban" could have been banned in any EAC-protected title. You cannot confirm it was Rust from Steam alone.
• BattleMetrics attributes bans to Rust. Its ban records tell you whether an account's ban was actually a Rust ban, and when. That's the difference between "this guy has a ban somewhere" and evidence.

Beyond ban attribution: live RCON console, player session history, and — the part that compounds — shared ban lists and data sharing between organizations. The more orgs you share with, the more ban history and alt-account linkage is visible on players connecting to your server. Set up your org, join or create a shared ban list, and your bans start working for other servers and theirs for you.

Reports and anti-cheat

The free stack covers moderation and permissions. It does not triage your F7 report queue or screen connecting accounts. That's the gap our two plugins fill — both built on the BattleMetrics data above.

Handling F7 reports: ReportMe

F7 reports on a busy server are dozens per wipe — most noise, a few real. ReportMe collects them, enriches each target with BattleMetrics and Steam data, scores trust, alerts Discord, and can ban automatically on the clearest cases. It ships in shadow mode: it logs what it would do until you've watched it and set the thresholds.

• Why: the free stack investigates one player at a time. It doesn't tell you which reports deserve your time.
• What it doesn't do: decide who's cheating for you. It ranks and routes, and shadow mode lets you verify the scoring before it acts.
• Setup: in the docs, including the exact config we run in production.

Dealing with confirmed cheaters: Payback

Payback is an in-game panel with 60 punishment and investigation cards for a caught cheater — from silently zeroing their damage to launching them out of a cannon. Rust's developers have confirmed it's allowed on Community and Official servers.

• Why: the free stack ends at "ban". Payback covers confirmation testing and the graduated response before it.
• Team morale: most admin teams are volunteers. Catching a cheater takes hours of unpaid work — letting your admins have some fun with a confirmed cheater is what keeps them putting in those hours.
• What it doesn't do: detect. Use it after you've confirmed the cheat. Card list in the docs.

Server branding: Monumental Signs

Monumental Signs pins custom image-URL signs to monuments — place one at a monument type and every spawn of that monument on the map gets it. Signs persist through wipes and map changes, players can't break or move them, and each URL can auto-refresh on a timer.

• Why: players can't buy from a VIP store they never hear about. Your logo, Discord link, and store ad at every monument reaches everyone without chat spam.
• Also works for: sponsor banners, event announcements, and live leaderboards (built-in leaderboard.chadius.io support).
• Get it: Monumental Signs.

Questions about the anti-cheat side: discord.fragmod.com.