Investigate one chest withdrawal with a bounded CoreProtect lookup

Applies to: CoreProtect; match the linked maintainer documentation to your installed platform and release.
Documentation checked 9 November 2026.

A missing item report needs the correct container, time window and transaction type. Query a small area first so an unrelated server-wide result does not become an accusation.

Follow the procedure

Ask the owner for the chest location, approximate time and missing item type. Record the world and coordinates privately and avoid moving items during the investigation.
Check /co status and confirm CoreProtect was logging the relevant container actions at the time. A plugin installed afterward cannot reconstruct an earlier withdrawal.
Stand at the reported chest and use a bounded query such as /co lookup t:1h r:5 a:-container. Adjust the time to the report rather than searching every historical transaction.
Read the actor, item amount and timestamp for each relevant row. Use the documented include parameter to narrow the item type if the first result contains unrelated transactions.
Compare deposits as well as withdrawals when calculating the change. Check linked containers or automation separately; a net missing count is not necessarily one player’s single action.
Save the relevant evidence and discuss any restoration with the owner. A lookup is read-only and should remain separate from an authorized inventory or container rollback.

Check the result

The result should identify relevant withdrawals in the selected area and period, or establish that no matching logged transaction was found. It does not by itself prove malicious intent. Correlate the item count and ownership context before applying moderation or restoring possessions.

If the result is wrong

If no rows appear, verify the world, time range, logging configuration and retention before widening the search. Do not treat an empty result as proof that the owner invented the loss. Avoid a global rollback or manual database edits while the transaction scope remains uncertain.

Give a LuckPerms permission an expiry without leaving permanent access

Make a LuckPerms event rank expire while preserving other ranks

Limit a LuckPerms command permission to one Minecraft world

Keep a LuckPerms permission local to one network backend

Move a player along a LuckPerms track without replacing unrelated groups

Fix a LuckPerms prefix priority without changing chat formatting

Remove a direct LuckPerms exception without weakening its parent rank

Apply a small LuckPerms web-editor session to the correct server

Export LuckPerms data before changing its storage configuration

Find an inheritance cycle before it complicates a rank change

Keep default-player permissions separate from staff inheritance

Diagnose LuckPerms edits that reach one backend but not another

Check a player UUID before changing LuckPerms account data

Remove a staff member from one LuckPerms track without clearing their account

Give an EssentialsX rank a fixed home limit

Restrict one EssentialsX warp to an approved player group

Test EssentialsX teleport delay and movement cancellation

Add an EssentialsX cooldown to one utility command

Resolve an EssentialsX command alias conflict without removing either plugin

Check EssentialsX AFK kick exemptions for a staff role

Limit EssentialsX nickname changes without granting formatting control

Give staff a read-only EssentialsX player-information role

Recover from an accidental EssentialsX ignore setting

Restrict EssentialsX repair commands to the intended tool policy

Review EssentialsX command-disabled entries after a plugin change

Test an EssentialsX jail location without trapping a real player

Change the EssentialsX starting balance for new players only

Set EssentialsX maximum and minimum money limits with a boundary test

Change the EssentialsX currency symbol without changing stored money

Test an EssentialsX pay dispute using two controlled accounts

Review EssentialsX worth prices before enabling item selling

Explain an EssentialsX balance leaderboard that looks out of date

Trace an unexpected EssentialsX command charge

Back up EssentialsX money before a player-data migration

Verify a LiteBans temporary ban expires at the intended time

Test whether a LiteBans mute covers a private-message command

Build a LiteBans appeal-review role without punishment access

Check a LiteBans moderator’s maximum punishment duration

Find which plugin handled a ban command on a mixed-plugin server

Verify the server scope of a LiteBans network punishment

Investigate a LiteBans database connection failure without losing history

Reverse one appealed LiteBans punishment while preserving the audit trail

Test an AdvancedBan time layout before staff use it

Check AdvancedBan warnings without accidentally escalating a real player

Give an AdvancedBan helper access to history without ban powers

Check AdvancedBan storage before changing from local files to MySQL

Lift one AdvancedBan restriction after an approved appeal

Locate AdvancedBan correctly on a proxy network

Test SuperVanish visibility with separate staff and player accounts

Check whether a vanished SuperVanish moderator can pick up items

Verify flight is safe when a SuperVanish moderator reappears

Check silent chest inspection without changing container contents

Find a SuperVanish join or player-list information leak

Remove vanish access from a staff role without leaving a hidden account

Check PremiumVanish layered visibility after changing staff ranks

Verify PremiumVanish network vanish across Velocity backends

Check vanished staff interactions before a live investigation

Recognize the PremiumVanish API jar before installing an integration

Give GrimAC alerts to one observer without granting exemptions

Remove a GrimAC exemption and verify when checks resume

Collect a GrimAC prediction log for a false-positive report