Detections reference

Every detection has an Enable toggle and most have an Action that controls what happens when a player triggers it. Actions are set in the server config and can also be edited from the dashboard Main Settings and Protection Rules pages.

Aim and shooting

AntiAimbot

Detects aimbot behavior by monitoring player targeting patterns. Two detection sub-types can be enabled or disabled independently.

• Types.Assist: detect aim-assist style aimbots (true/false)
• Types.External: detect externally injected aimbot tools (true/false)

AntiSilentAim

Detects silent aim, including magic-bullet shots that register hits without a visible trajectory toward the target.

• Types.Normal: detect standard silent aim (true/false)
• Types.MagicBullet: detect magic-bullet shots specifically (true/false)

AntiSpoofBulletShot

Detects spoofed bullet shots where the reported shot data does not match actual game state.

AntiDamageManipulation

Detects abnormal damage values submitted by a client, covering damage exploits such as one-hit kills, spoofed damage, blocked-damage manipulation, and damage spam.

• Types.Exploits: detect damage exploits such as instant-kill and excessive melee damage (true/false)
• Types.Spoofed: detect spoofed damage packets (true/false)
• Types.Blocked: detect blocked-damage manipulation (true/false)
• Types.Spam: detect rapid repeated damage events, configurable withEnable, Threshold (hit count), and TimeFrame (milliseconds)

Weapons

AntiSpawnWeapons

Blocks players from spawning weapons that are not permitted on the server.

• WhitelistWeapons: array of weapon names that are always allowed
• AddonWeapons: array of addon weapon names to permit alongside base-game weapons

AntiGiveWeapons

Blocks unauthorized weapon-give network events from being processed by the server.

• Types.Player: block giving weapons to other players (true/false)
• Types.Ped: block giving weapons to non-player peds (true/false)

AntiRemoveWeapons

Blocks unauthorized weapon-removal network events from affecting other players.

• Types.Player: block removing weapons from other players (true/false)
• Types.Ped: block removing weapons from non-player peds (true/false)

AntiNoReload

Detects players who keep firing without ever reloading, which indicates a no-reload cheat is active.

AntiInfiniteAmmo

Detects players whose ammo count never depletes while firing, indicating an infinite-ammo cheat.

Player and body

AntiGodmode

Detects players using godmode or invincibility flags that prevent them from taking damage.

• WhitelistZones: areas where godmode is never flagged (see the intro note for the format)

AntiInfiniteStamina

Detects players whose stamina value never depletes, indicating a stamina cheat is active.

AntiRagdoll

Detects abuse of the ragdoll state, such as forcing other players into a ragdoll permanently.

AntiClearPedTasks

Detects misuse of clear-ped-tasks calls that can be used to freeze or grief other players. Three detection modes are available.

• Types.Block: block all unauthorized clear-ped-tasks calls
• Types.Normal: detect standard clear-ped-tasks abuse
• Types.Immediately: detect the immediate variant of the task-clear call

AntiChangeOutfit

Detects outfit changes that were not initiated through an approved server-side pathway.

AntiVoiceSpoofing

Detects players spoofing their voice range to communicate across distances that should be impossible.

• Maximum: the highest voice range value that is considered legitimate (number)
• Whitelist: array of specific range values that are always permitted

Vehicles

AntiVehicleModification

Detects illegal changes applied to vehicles that were not made through legitimate server mechanics.

• Types.Armor
• Types.Engine
• Types.Colors
• Types.BulletProofTires
• Types.PlateText
• Types.PlateIndex
• Types.Gravity
• Types.DirtLevel
• Types.Livery
• Types.Windows
• Types.InstantFlip
• Types.RepairSpam
• WhitelistZones: areas where vehicle changes are never flagged (see the intro note for the format)

AntiSpawnIsolatedVehicle

Detects vehicles spawned in an isolated or networked state that bypasses normal spawn controls.

AntiTeleportInVehicle

Detects players teleporting while inside a vehicle, which is a common speed and position exploit.

World and entities

EntitiesSpawnProtection

Blocks entities spawned without server authorization, covering NPCs, vehicles, objects, and pickups.

• RemoveNPCs: automatically remove unauthorized NPCs, configurable withEnable and a Buckets array of routing bucket IDs to target
• Types.Pickups, Types.Peds, Types.Vehicles,Types.Objects: per-entity-type toggles. Peds andVehicles also carry a Methods object with independent Normal and Ai toggles. If both are off, that entity type is ignored
• WhitelistModels: array of model names that are always allowed to spawn
• WhitelistResources: array of resource names whose spawns are always trusted

EntitiesSpamProtection

Blocks rapid entity creation that can be used to crash or lag the server.

• Types.Peds: Threshold and TimeFrame for ped spam
• Types.Vehicles: Threshold and TimeFrame for vehicle spam
• Types.Objects: Threshold and TimeFrame for object spam

BlacklistEntitiesProtection

Blocks any entity whose model appears on a configurable blacklist, regardless of who spawned it.

• Models: array of model names to block

AntiEntityTakeOver

Blocks attempts to take network ownership of entities that belong to other players or the server.

AntiRemoteAttachment

Blocks remote attachment calls that can be used to grief players by attaching objects to them without consent.

AntiRemoteAttachmentV2

A second-generation remote-attachment guard that catches newer attachment exploits the original check does not cover. Keep both enabled for full coverage.

AntiControlEntity

Blocks players from forcing network control of entities they should not be able to command, such as another player's vehicle or a server-owned entity.

AntiExplosionAi

Controls how explosions are handled, covering full blocking, fake explosions, and explosion spam. This detection was named ExplosionProtection before Raven 1.5.9.4.

• Types.CancelAllExplosions: block all unauthorized explosions
• Types.Fake: detect fake/spoofed explosions, configurable withEnable and WhitelistExplosions array
• Types.FakeV2: a second-generation fake-explosion check that catches newer spoofing methods (true/false)
• Types.Spam: detect explosion spam, configurable withEnable, a WhitelistExplosions array, and up to five numberedRules, each with a type (normal, cluster, or spread),Threshold, and TimeFrame

AntiParticleAi

Controls particle effects: blocks unauthorized particles, caps particle scale, and detects spam. This detection was named ParticleProtection before Raven 1.5.9.4.

• Types.CancelAllParticles: block unauthorized particle effects
• Types.Scale: limit particle scale, configurable withEnable, MaximumScale, and WhitelistParticles array
• Types.Spam: detect particle spam, configurable withEnable, a WhitelistParticles array, and up to five numberedRules, each with a type, Threshold, and TimeFrame

AntiFireEvent

Controls fire events that can be used to grief players or crash the server.

• Types.Block: block all unauthorized fire events
• Types.Distance: restrict fires by distance, configurable withEnable and Maximum (distance value)

AntiPlaysound

Blocks play-sound network events that can be abused to spam disruptive audio for other players.

Events and resources

AiServerEventsProtection

Blocks unauthorized server-side network events triggered by clients.

• BlockedEvents: array of event names to always block
• WhitelistEvents: array of event names that are always allowed
• WhitelistResources: array of resource names whose events are always trusted

AiClientEventsProtection

Blocks unauthorized client-side network events, preventing cross-client event injection.

• WhitelistEvents: array of event names that are always allowed
• WhitelistResources: array of resource names whose events are always trusted

AntiStartResources

Blocks players from triggering resource start commands on the server.

AntiStopResources

Blocks players from triggering resource stop commands on the server.

AntiResourcesInjection

Blocks injection of unauthorized resources at runtime.

• WhitelistResources: array of resource names that are always permitted

Cheat tools and injection

AntiLuaMenus

Detects texture names associated with known Lua cheat menus rendered on the client.

• Textures: array of known cheat menu texture names to scan for

ClipboardScanner

Detects known cheat-related strings that have been copied to the player clipboard, which is a common indicator of script injection.

AntiExecutor

Detects cheat executors and injection tools running alongside the game. This detection replaced the earlier AntiOverlay check.

• Types.Internal: detect executors injected into the game process
• Types.BlockInput: detect tools that block normal input
• Types.External: detect executors running outside the game
• Types.Bypass: detect known detection-bypass techniques
• Types.Spoofed: detect executors that spoof their identity

AntiNuiTamper

Detects tampering with the Raven NUI, such as opening the browser DevTools panel to inspect or manipulate the client. This detection was named AntiNuiDevTools before Raven 1.5.9.4.

• Types.Inspector
• Types.Timeout

AntiScreenOcr

Detects screen-reading OCR tools that scan the game image to feed external cheats such as ESP and aimbot overlays.

Heartbeat

An anti-tamper heartbeat that verifies the Raven client has not been modified or killed. The default Action for this detection is "kick".

• Types.Timeout: flag a client that stops sending heartbeats
• Types.Model: flag an unexpected player model reported in the heartbeat
• Types.Coords: flag impossible coordinates reported in the heartbeat
• Types.Vehicle: flag a spoofed vehicle model reported in the heartbeat
• Types.Advanced: flag a frozen or unresponsive client

Other settings

Raven supports Discord webhooks for kick logs and ban logs. On 1.5.9.4 and newer theDiscord section was removed from the config and Discord logging is configured in the dashboard instead, so the webhooks live on the server rather than in the file you edit by hand. See the Discord logs reference for setup instructions.

Screenshots and recordings captured by a detection are stored on the Raven cloud CDN atravenac.net/cdn/... and linked from the dashboard activity log, so you do not need a screenshot webhook anymore.

Punishment display is controlled by the Display settings, which configure the message shown to a kicked player and the ban screen content shown to banned players.

AutoInstallation automatically loads Raven across server resources without requiring manual integration in each resource.

• Enable: turn AutoInstallation on or off
• IgnoreResources: array of resource names to exclude from automatic loading