Server safety¶
Overview¶
fkdr is an overlay (apart from the enhancements tab, below). It reads what Hypixel already sends your client and draws over it. Everything it prints in chat is local, prefixed [fkdr], and never leaves your machine.
What does talk to the server¶
Outside the enhancements tab, only these ever send anything to Hypixel, and all of them are ordinary chat commands you could type yourself:
| feature | sends | when |
|---|---|---|
| AutoRequeue | /play bedwars_two_four |
when it decides to leave a lobby. Mode = Confirm only prints the command instead. |
| AutoGG | your Message |
when a game ends |
| PartyNotifier | a party-chat line | when AntiCheat flags someone or a party joins, at most one message per CooldownMs |
/pl stats |
/p list, once |
only if your party roster is not known yet |
Queue shortcuts (/bw1, /2s, /bridge1…) |
the matching /play … command |
when you type the shortcut on its own |
| Block denick (Anti-sniper) | /block … |
only while it is switched on |
| Lobby detection | /locraw |
quietly, after you join a world, to tell which game or lobby you are in |
fkdr hides Hypixel's reply to its own /locraw, and to the /p list that /pl stats sends to read your party, so neither shows up in your chat.
Automation and Hypixel's rules
Sending commands automatically is against Hypixel's rules, whatever the command. That is why AutoRequeue and AutoGG ship off and why AutoRequeue has a Confirm mode. Use them at your own risk.
Modules that change what you can do¶
Almost every module outside the enhancements tab changes what you see. Sprint keeps you sprinting whenever you move forward, and is off by default. The enhancements tab's combat, movement and player modules (KillAura, Scaffold, BedDefender and the rest) act in game for you; each one is off until you switch it on.
Hitboxes or Outline with ThroughWalls on, and BedESP, draw things you could not otherwise see. Hypixel treats that as a disallowed modification. ThroughWalls is off by default on both for exactly that reason, and the whole enhancements tab can be hidden from the menu with Interface → HideEnhancements (hide enhancements).
What fkdr sends elsewhere¶
| destination | what | why |
|---|---|---|
| fkdr.dev | your fkdr licence key (the XXXX-XXXX-XXXX-XXXX key from your fkdr.dev key page), a code for this computer and your Minecraft account id, over a secure connection |
checking your licence and looking for updates |
| fkdr.dev or the stats source | names or account ids from your tab list | resolving stats and threat scores |
| fkdr.dev | tag labels you create (notes only if ShareNotes is on) |
the shared tag database, if Cloud is on |
| api.hypixel.net | names or account ids, with your own Hypixel API key | only if you entered one in Configs → api keys |
| api.urchin.gg | names, with your own Urchin API key | only if you entered one |
| bordic.xyz (Aurora) | account ids, no key; for the number denicker, a finals or beds count with your own Aurora API key; for other players' ping in TAB, the account ids in your tab list with your Aurora key | when you use the Anti-sniper tab, and while Ping → OthersPing is on with an Aurora key saved |
| the server you are playing on | a server-list ping (the same status request the multiplayer screen sends), on a separate connection | every few seconds while your own ping is shown and the server hides it, as Hypixel does in games |
| fkdr.dev (Aurora backup route) | the same Aurora request | only when fkdr cannot reach Aurora directly. Your Aurora key is passed along for that request and not stored |
Which keys these are
The only key fkdr keeps sending to fkdr.dev is your fkdr licence key. The Hypixel, Urchin and Aurora keys are optional API keys from those services that you paste in yourself, and each goes only to its own service. The one exception is the Aurora backup route above: when Aurora cannot be reached directly, that one request goes through fkdr.dev with your Aurora key, which is not stored. None of them is your Minecraft or Microsoft account: fkdr never sends your account password or login to any of these. Accounts added in the account switcher sign in with Microsoft directly and stay on your machine.
The code for your computer
A licence works on the computers it is set up on, so fkdr sends a code for this computer. It says nothing about you and is used only to count how many computers the key is on.
Nothing else fkdr keeps on your computer is uploaded. The safety page under Support has the full list and the scripting caveats.