Admins and local API

Server Admins

The Admins tab on the Players page lets you invite other people to help manage a server without giving them access to your computer or your Coalstack account. You invite someone by email, and they get an email with a link to accept. Each admin gets a configurable set of permissions:

• Can use the console (send commands)
• Can restart the server
• Can manage backups
• Can manage files
• Can manage the whitelist

Admins manage the server through the coalstack.net website, not through the desktop app. Their actions reach your app over Conduit, which keeps a live outbound connection to coalstack.net and falls back to a periodic check-in if that drops. This same tab's admin log records every admin action with a timestamp and the admin's email. Bedrock servers work with Conduit too; the one thing that doesn't carry over is the ban button, since Bedrock has no ban command.

Local API

Coalstack runs a small local HTTP API server on 127.0.0.1 with a randomly generated API key. The app uses it for remote commands and the website's server management, and with Coalstack Plus you can call it from your own scripts as the Automation API. You can view and regenerate the API key under Settings → Integrations. The API only listens on localhost, so it's never reachable from outside your machine.