Features
Authentication & Admin
Accounts, passkeys, Microsoft sign-in and the admin panel
The dashboard and API sit behind a login. MCSM is built for a small, trusted group — you and the people who help you run your servers.
Create the admin account
On first launch, a setup wizard creates the admin account. There is no open registration — every additional user is created by an admin from the Admin panel.
Sign in your way
Every user can sign in with:
- Password — the classic way.
- Passkeys (WebAuthn) — Touch ID, Windows Hello or hardware security keys, registered from the user menu.
- Sign in with Microsoft — optional Entra ID OAuth; the button appears once configured and matches users by their account email.
Manage everything from the Admin panel
| Section | What it does |
|---|---|
| Users | Create and delete dashboard accounts, grant admin rights. |
| Domains | The domains servers can be created under — what the wizard offers as subdomain.domain. |
| API keys | Global keys injected into servers that need them, e.g. a CurseForge API key for modpack downloads. |
| Status | Health checks for Docker connectivity, the proxy and DNS. |
| Maintenance | Re-apply configuration to all managed servers in one go. |
What stays public
Published BlueMaps remain reachable without a login — everything else (dashboard, API, private maps) requires a session.
Server icons and resource packs are also served without authentication, since
Minecraft game clients and containers download them directly.