Hardware FixRecommendedDevice not working? Your driver may be the problemCheck updates for common hardware issues.Fix DriversHalloween DealsAmazon USHalloween week deals: useful picks before month-endAmazon US: current deals, useful picks and tech finds.Check DealsSlow PC?RecommendedPC slow today? Run a repair scan before it gets worseResolve common Windows issues and optimize system performance.Scan Now×
FREEDOM251

Freedom251 › Blog › game server administration

Path of Titans RCON Setup and Commands: Ports, mcrcon, Security, and REST Automation

By Freedom251 Team · · 10 min read

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

To enable RCON on a Path of Titans server, stop the server, edit Config/WindowsServer/Game.ini (the directory name varies by operating system), add a [SourceRCON] section with a valid password and port, save the file, and restart the server. With Port=0, the server selects the game-server port plus two; on the documented 7777 game-port layout, that makes RCON port 7779. Connect with a Source-compatible client such as mcrcon, enter help, and run commands without the leading / or #. For scripted administration, Alderon’s REST API provides HTTP/JSON endpoints with bearer-key authentication and permission controls.

For a hosted Path of Titans setup, Godlike.Host provides game servers with its own game panel, free DDoS protection, and up to three free backups a day. Not on Alderon Games’ list of Path of Titans server providers (alderongames.com, 11 Oct 2026).

As an Amazon Associate I earn from qualifying purchases.

What RCON does in Path of Titans

RCON (remote console) is a server-administration interface. It lets an authorized operator send console commands from another process instead of typing in the game chat or opening a local server console. That makes it useful for a rented dedicated server, a headless machine, scheduled maintenance, moderation tools, and automation.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Path of Titans exposes a Source/Valve-style RCON service when the [SourceRCON] section is enabled. RCON access is separate from ordinary in-game chat: the RCON client sends a command directly to the server, while chat commands are entered by players with a leading slash. A server can therefore allow ordinary players to use public commands such as /rules while reserving administrative actions for accounts or connections that have the relevant permission.

Before changing the configuration

  • Stop the server first. The official Alderon Games Hosting Wiki says the server must be stopped while server files are edited.
  • Back up Game.ini. Keep a copy of the last working configuration so you can recover from a syntax or startup error.
  • Know the game-server port. RCON port 0 is calculated from it, and a manually assigned port must be reachable through the host firewall and any router or provider firewall.
  • Prepare a strong password. The minimum is eight characters. A longer, randomly generated value is safer. The password cannot contain a double quote, single quote, backtick, equals sign, or pipe character.
  • Decide which source addresses may connect. An IP allow list is safer than exposing RCON to every address on the internet.

Enable RCON in Game.ini

1. Open the correct file while the server is stopped

Open Config/WindowsServer/Game.ini in the server installation. The folder name can differ on another operating system or hosting layout, but the file is the server’s Game.ini. Do not edit it while the process is running; changes are read at startup.

2. Add a SourceRCON section

Add this section, replacing the example password and allow-list address with values appropriate for your server:

[SourceRCON]
bEnabled=true
bLogging=false
Password="replace-with-a-long-valid-password"
Port=0
IP="0.0.0.0"
MaxFailedAttempts=5
Timeout=60
PageTimeout=5
MaxConnectionsPerIP=3
IPAllowList=192.168.1.1

bEnabled is false by default, so omitting the section or leaving this value disabled leaves RCON off. The password must meet the eight-character minimum and the character restrictions above; if it does not, the guide says RCON is disabled rather than accepting the invalid credential.

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

3. Choose the bind address and allow list

IP="0.0.0.0" binds the service on all local interfaces. That is convenient when the server has to accept connections from another machine, but it increases the importance of firewall rules and IPAllowList. If your hosting arrangement supports a specific interface, binding more narrowly reduces exposure.

Repeat IPAllowList= for every trusted address that needs access. For example:

IPAllowList=192.168.1.10
IPAllowList=203.0.113.42

Use the public address only when it is genuinely stable and controlled. A private administration VPN or a provider firewall can limit the service to your management network before traffic reaches the game server.

Rank #2
UniVersus Attack on Titan: Battle for Humanity - Clash Deck Levi - Ready to Play Character Deck, Deck-Building Collectible Card Game, AOT Licensed
  • LEVI CHARACTER DECK: Each ready to play deck contains 61 cards (60 cards + 1 character card) focused on that character’s particular strengths.
  • PLAYMAT: Decks also contain a learn to play guide and a paper playmat.
  • BRINGING THE MANGA TO LIFE in our set gives it a distinct visual style that is sure to attract a lot of attention.
  • NON-CHARACTER CARDS in these decks are found in Attack on Titan: Battle for Humanity, providing a good starting point for a new player to build their collection.

4. Understand the connection and response limits

Setting Value in the example What it controls
bLogging false Whether RCON activity logging is enabled.
MaxFailedAttempts 5 Failed-attempt threshold in the documented configuration.
Timeout 60 seconds Connection or command timeout value.
PageTimeout 5 seconds How long a generated response page remains available.
MaxConnectionsPerIP 3 Concurrent connections permitted from one IP in the example.

The setup guide also documents harder settings for an exposed server, including MaxConnectionsPerIP=1 and MaxLoginAttempts=1. Use the stricter values when they fit your administration workflow; a single-connection limit can interfere with multiple legitimate tools running behind one NAT address.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

5. Save, start, and verify

  1. Save Game.ini without changing the section name or key spelling.
  2. Start or restart the Path of Titans server.
  3. Check the server log for startup errors and confirm that the configured RCON port is listening.
  4. From an administration machine, connect with an RCON client and run help.

Editing the file without a restart will not apply the change. If the server starts but RCON refuses connections, verify the effective port, host firewall, provider firewall, allow list, and password before changing unrelated server settings.

Which RCON port should you use?

Automatic selection with Port=0

Port=0 tells Path of Titans to choose the game-server port plus two. The documented port map is:

Service Port when the game server uses 7777
Game server 7777
Reserved 7778
RCON 7779
Stats 7780
Query 7781

Consequently, a server on game port 7777 normally places RCON at 7779 when the automatic setting is in effect. If you move the game port, the automatically selected RCON port moves with it.

Explicit RCON ports and the mcrcon example

You may assign a specific RCON port instead of zero, provided it does not collide with another service and is opened in the relevant firewalls. The official connection example is:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
./mcrcon -H 127.0.0.1 -P 7778 -p password

This is an example command, not a guarantee that every server uses 7778. The same documentation maps 7778 as reserved and 7779 as RCON for a 7777 game port. Use the actual port shown by your [SourceRCON] setting, startup arguments, or hosting control panel. If you leave Port=0, test the calculated game-port-plus-two value rather than copying the sample blindly.

Rank #3
Cryptozoic Entertainment Teen Titans Go DBG Board Game
  • Take on the role of a teen Titan, and recruit others Titans to help you!
  • 100% compatible with other Cerberus engine deck-building games, including cartoon Network Crossover crisis deck-building game!
  • Two-player format perfect for new players!
  • For 2 players, ages 12 & up
  • Plays in 30-45 minutes

Connect with mcrcon

Local connection

Run mcrcon on the server host and substitute the configured port and password:

./mcrcon -H 127.0.0.1 -P 7779 -p 'replace-with-a-long-valid-password'

Use the quoting convention supported by your shell. Do not put a password containing one of the forbidden characters into Game.ini; changing shell quoting cannot make an invalid server password valid.

Remote connection

Replace 127.0.0.1 with the server’s externally reachable address and use the port that is actually exposed:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
./mcrcon -H server.example -P 7779 -p 'replace-with-a-long-valid-password'

Any Source/Valve-compatible RCON client should work in principle. The official guide cautions that an incorrectly implemented client may crash, so use a maintained client and test it against a non-production server when possible.

Confirm that the session works

After connecting, enter:

help

The server returns the commands available to that connection. Treat that output as authoritative for the running server version and permission set instead of relying on an old command list.

RCON command syntax

Commands sent through RCON do not use the leading slash or hash used by some in-game interfaces. For example, send:

Rank #4
Japanime Games Attack on Titan: Last Stand Board Game | from The Creator of 7 Wonders Duel | Become a Titan or Team up to Take It Down | 2-5 Players | 30 Min | Ages 14 +
  • Strong Table Presence - with a vertical boardgame that allows players to “climb” the Titan to victory
  • Strong License - the game is based on the famous Japanese anime seires Attack on Titan and 30k+ copies were already sold.
  • Designed by 2 Titans - This is a game by Antoine Bauza (7 wonders) and Ludovic Maublanc, 2 Titans when it comes to game design.
  • Replayability - 4 different Titan roles and 8 dierent Heroes for a dierent feel in every play.
  • Game runtime is 30 minutes with 3-5 players
teleportall talonspoint

That documented command teleports all players to Talons Point. Sending /teleportall talonspoint or #teleportall talonspoint through RCON adds characters the RCON command parser does not require and can cause the command to fail.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

In-game chat commands are a separate interface

The command reference lists these permission-free examples for chat:

  • /rules
  • /motd
  • /help
  • /clear
  • /mapbug
  • /bugsnap
  • /respawn
  • /mute <user>
  • /unmute <user>
  • /listplayers
  • /whisper [Username] [Message]
  • /w [Username] [Message]

These examples are written for in-game chat, so retain the slash when using them there. Administrative chat commands are permission-controlled. For instance, /bring depends on the teleport permission. The current complete command and permission list is maintained in the Alderon Games Community Server Wiki; use the in-game /help output and your server’s current documentation when a command has changed.

Handling long RCON responses

On revisions that support paged responses, output longer than 4,000 characters is split into pages. The response begins with a marker such as:

[Page(Key 1) 1/5]

The marker identifies the page key and the current position. Request another page by sending the page command with the key and index, for example:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
page:1-3

Pages remain available for the configured PageTimeout. With the example value of five seconds, retrieve subsequent pages promptly. Concatenate the page bodies in order if a script needs the complete response. A client that reads only the first response can appear to lose data even though the server has generated all pages.

Best Value
Cryptozoic Entertainment DC Deck-Building Game: Teen Titans Go!
  • New edition of beloved game: now officially part of the DC Deck-Building Game series and featuring updated rules!
  • Features art from the Teen Titans Go! animated series.
  • Duel your friends as Robin, Starfire, Cyborg, Beast Boy, and Raven!
  • Introdudes “Sidekicks,” which allow you to play with more than one Hero!
  • Weakness and Event cards cause all sorts of hijinks and interesting dilemmas.

Startup arguments that affect RCON

The official setup guide documents these server arguments:

  • -AuthToken
  • -Database=Local or -Database=Remote
  • -ServerGUID
  • -RconIP
  • -RconPort
  • -RconPassword
  • -ExternalRconPort (optional when the externally reachable port differs from the internal RCON port)

When both command-line arguments and Game.ini appear to define the same value, check the launch configuration used by the hosting service and the effective startup log. A control panel may generate arguments after you edit the file, or an external port mapping may make the public port differ from the local listener.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Secure an exposed RCON service

Use layered restrictions

  • Use a password substantially longer than eight characters and generate it randomly.
  • Share it only with operators who need access, and rotate it periodically.
  • Populate repeated IPAllowList= entries with trusted administration addresses.
  • Limit inbound traffic with host and provider firewall rules; expose only the chosen RCON port.
  • Prefer a private administration network or VPN when your hosting environment supports one.
  • Enable logging when you need an audit trail and monitor failed connections.
  • Use MaxConnectionsPerIP=1 and MaxLoginAttempts=1 for a more restrictive exposed setup, after confirming that legitimate tools still work.

Do not assume that changing the port alone provides security. The port number is discoverable; authentication, allow lists, and network filtering are the controls that limit who can reach the service.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

REST API: an alternative for automation

Source RCON is convenient for an operator at a terminal. Alderon’s REST API is better suited to a dashboard, scheduled job, bot, or other HTTP client. It uses HTTP/JSON, bearer API-key authentication, endpoint permissions, and explicit request and response objects.

Base URL and authentication

The API base is:

http://<host>:<port>/v1/api

Send the API key in an authorization header:

Authorization: Bearer <ApiKey>

Protect the key like a password. Give each automation its own key where possible, remove unused keys, and grant only the endpoint permissions that the job requires.

Discover and execute commands

Use GET /commands to enumerate available RCON and console commands. Use POST /rcon to execute a command. Generic RCON execution through the API requires bAllowGenericCommand=true; without that setting, a valid API key alone does not authorize arbitrary command submission.

GET  http://<host>:<port>/v1/api/commands
POST http://<host>:<port>/v1/api/rcon

Build automation around the API’s structured HTTP/JSON responses rather than parsing terminal text. Validate the command, record the response and HTTP status, and implement retry handling appropriate to your job instead of blindly repeating a potentially destructive administrative action.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Source RCON or REST API?

Concern Source RCON REST API
Transport Source protocol over a persistent client connection. HTTP/JSON requests.
Authentication RCON password. Bearer API key.
Authorization Connection-level settings such as password, allow list, connection limits, and command permissions. Endpoint permissions, with generic command execution additionally controlled by bAllowGenericCommand.
Automation ergonomics Interactive tools such as mcrcon; scripts must handle console text and page markers. Works naturally with HTTP libraries, webhooks, schedulers, and JSON-aware code.
Response handling Responses over 4,000 characters may be paged and expire after PageTimeout. Structured API responses are easier for programs to validate and store.

Choose Source RCON for quick interactive administration or when an existing RCON tool is all you need. Choose the REST API for repeatable software integrations, provided you configure API permissions and generic-command access deliberately.

Quick Recap

Bestseller No. 3
Cryptozoic Entertainment Teen Titans Go DBG Board Game
Cryptozoic Entertainment Teen Titans Go DBG Board Game
Take on the role of a teen Titan, and recruit others Titans to help you!; Two-player format perfect for new players!
$29.99
Bestseller No. 5
Cryptozoic Entertainment DC Deck-Building Game: Teen Titans Go!
Cryptozoic Entertainment DC Deck-Building Game: Teen Titans Go!
Features art from the Teen Titans Go! animated series.; Duel your friends as Robin, Starfire, Cyborg, Beast Boy, and Raven!

Troubleshooting checklist

RCON is disabled after restart

  • Confirm the section is exactly [SourceRCON] and bEnabled=true.
  • Check that the password is at least eight characters and contains none of the forbidden characters.
  • Verify that the server was stopped before editing and restarted after saving.
  • Review startup logs for a malformed INI entry or an overriding launch argument.

The client times out

  • Calculate the automatic port as game port plus two; for game port 7777, start with 7779.
  • Do not assume the mcrcon example’s 7778 is your RCON port; use the effective configured or externally mapped port.
  • Open that port in the operating-system and hosting-provider firewalls.
  • Confirm the hostname resolves to the correct public address and that an IPAllowList entry permits your source address.
  • Check IP, -RconIP, -RconPort, and -ExternalRconPort for conflicting bind or mapping values.

Authentication fails

  • Copy the password exactly, including capitalization.
  • Ensure the client is using the same password that the running server loaded, not an unsaved file value.
  • Wait for or clear a temporary failed-attempt lockout according to your configured limits.
  • Try from an address included in IPAllowList or temporarily test locally on the server host.

A command returns nothing or appears incomplete

  • Run help to confirm the command exists on this server version.
  • Remove the leading slash or hash when sending through RCON.
  • For a response over 4,000 characters, read every page before the five-second example timeout expires, then reconstruct the result in order.
  • Check permissions: an in-game administrative command such as /bring requires its associated permission.

Operational workflow for a safe change

  1. Schedule a maintenance window and stop the server.
  2. Back up Game.ini and record the current game port.
  3. Edit or add [SourceRCON], using a new strong password and the narrowest practical allow list.
  4. Set Port=0 for automatic selection or choose an explicit unused port and update firewall rules.
  5. Save the file, start the server, and verify the listener from an allowed administration host.
  6. Connect with mcrcon, run help, and test a harmless command before granting the credential to a bot.
  7. If automating through HTTP, create a scoped API key, verify GET /commands, and enable generic commands only when the workflow requires them.
  8. Monitor logs and failed attempts, rotate credentials when operators or systems change, and remove stale allow-list entries.

Key points to remember

  • Stop before editing and restart after saving.
  • Use at least an eight-character password, preferably much longer, and avoid the five prohibited characters.
  • Port=0 means game-server port plus two; with game port 7777, the documented RCON port is 7779.
  • RCON commands omit / and #; chat commands retain their slash.
  • Use help for the live command list and retrieve all pages for responses longer than 4,000 characters.
  • Use the REST API when HTTP/JSON, bearer keys, endpoint permissions, and structured responses make automation safer than an interactive RCON client.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

game server administrationmcrconPath of TitansRCONREST APIServer Security

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Recommended PC Tool
Recommended PC Tool
Outdated Drivers Are Slowing You DownFree scan - exact matches
Windows Errors? Fix Them Before They SpreadFree repair scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.