permissions.json / allowlist.json Editor
Edit player permissions and whitelists on the screen. You can also look up the XUID from a gamertag.
Load an existing file (optional)
Add a Player
Add in bulk (one person per line)
Your gamertag is sent to GeyserMC's public API (api.geysermc.org) only when you look up a XUID.
Output
How to Use the permissions.json/allowlist.json Editor
On a dedicated server (BDS), the permissions for each player are permissions.json, a whitelist that restricts who can access it is allowlist.json I'll write it there. Both of them let players XUIDYou must specify the XUID (a numeric ID unique to your Xbox account); you cannot set this using just your gamertag. This editor searches for the XUID based on your gamertag and allows you to edit permissions and whitelists on the screen.
Procedure
- Enter a player's gamertag to search for them and retrieve their XUID.
- Select a role (visitor / member / operator) and add it to permissions.json.
- If you're using a whitelist, add it to allowlist.json as well.
- Place the exported file in the BDS folder and restart the server.
Differences in Authority
- visitor: Viewing only. You cannot place or destroy blocks.
- member: A regular player.
- operator: An administrator who can use commands and other functions. Please assign this role only to those who need it.
To enable the whitelist, in the `server.properties` file, allow-list=true is required.server.properties EditorYou can configure this there.
Other Tools
- server.properties Editor — Edit all BDS settings with Japanese explanations
- manifest.json Generator — Create an add-on's manifest.json with automatic UUID generation
- lang Generator — Automatically generates ja_JP.lang files for item and block names
- Add-on Loading JSON Generator — Automatically Generates world_behavior_packs.json
- server-ui Form Builder — Build forms using the Script API and generate code
- server-ui Form Builder (OreUI Edition) — Building CustomForms in OreUI (DDUI)
- Add-on Studio — Create add-ons in your browser and export them as .mcaddon files
- Music List → YouTube Link Converter — Convert a playlist URL into a list of song titles and YouTube links
- Bedrock Server Status Checker — Check server status, player count, and ping instantly
Frequently Asked Questions
What is the difference between `permissions.json` and `allowlist.json`?
permissions.json is a file that defines permissions for each player (operator, member, or visitor). allowlist.json is a list of players allowed to join when allow-list=true is set in server.properties. Both files should be placed directly in the server folder.
What is XUID? How do I find it?
An XUID is a unique number assigned to each Xbox Live account. The `permissions.json` file specifies permissions using the XUID rather than the gamertag. When you enter a gamertag into this tool, it uses the API provided by GeyserMC to look up the XUID. The gamertag is sent to `api.geysermc.org` only when performing this lookup.
After editing, how do I save the changes to the server?
After replacing the file, run "permission reload" for permissions and "allowlist reload" for the allowlist in the server console. No restart is required. The permissions (permissions.json) take effect only when `online-mode=true`.
Is the "xuid" field in `allowlist.json` required?
This is not required. If you leave it blank, the server will automatically fill it in when a player with that name joins for the first time. However, to prevent someone who has changed their gamertag from being treated as a different person, we recommend entering the XUID.
What is "ignoresPlayerLimit"?
When enabled, that player will not be counted toward the maximum number of players (max-players). This is used when an administrator or similar user wants to allow players to join even when the room is full.