Path of Titans RCON Setup and Commands: Ports, mcrcon, Security, and REST Automation

To enable Path of Titans RCON, stop the server, edit Config/WindowsServer/Game.ini (or the equivalent configuration folder for your operating system), add a [SourceRCON] section, save it, and restart. Set a password of at least eight characters, use the actual RCON port selected by your configuration, and connect with a Source-compatible client such as mcrcon. With Port=0, the server chooses the game-server port plus two—for the common game port 7777, that is RCON port 7779.

What Path of Titans RCON does

RCON (Remote Console) is a server-administration interface. It lets an authorized operator send console commands from another process instead of typing every action in the game server window. You can use it for player management, teleportation, information queries, moderation workflows, scheduled tasks, and integrations.

#	Preview	Product	Price
1		Shadow of the Tomb Raider - Path of the Apocalypse	$16.80	Buy on Amazon
2		UniVersus Attack on Titan: Battle for Humanity - Clash Deck Levi - Ready to Play Character Deck,...	$15.99	Buy on Amazon
3		Cryptozoic Entertainment Teen Titans Go DBG Board Game	$29.99	Buy on Amazon
4		Japanime Games Attack on Titan: Last Stand Board Game | from The Creator of 7 Wonders Duel | Become...	$29.99	Buy on Amazon
5		Cryptozoic Entertainment DC Deck-Building Game: Teen Titans Go!		Buy on Amazon

As an Amazon Associate I earn from qualifying purchases.

Path of Titans supports the Source/Valve RCON protocol. A compatible client opens an authenticated connection to the server’s RCON listener, sends a command, and receives the server’s text response. The official documentation says that any correctly implemented Source-compatible client should work; a poorly implemented client can crash, so use a maintained client and test it locally before exposing it to the internet.

RCON is separate from the in-game chat command system. RCON commands are entered without a leading slash or hash. In-game commands retain their slash syntax and are subject to the permissions of the player or moderator using them.

#1 Best Overall

Shadow of the Tomb Raider - Path of the Apocalypse

$16.80

Buy on Amazon

Before you edit the server

• Stop the server completely. The official hosting documentation requires the server to be stopped while server files are edited.
• Back up Game.ini. Keep a copy so you can restore the previous configuration if the server fails to start.
• Know the game-server port. RCON port selection depends on it when you use automatic selection.
• Choose a strong password. The minimum is eight characters, but a longer, randomly generated password is safer.
• Plan network access. Decide which administrator IP addresses, VPN addresses, or private network ranges should be allowed before opening a firewall rule.

Folder names vary by operating system and hosting layout. On a Windows dedicated server, the documented file is Config/WindowsServer/Game.ini. Linux or managed-hosting installations may use a different platform directory, but the file remains the server’s Game.ini.

Enable Source RCON in Game.ini

Add the following section to Game.ini. If a [SourceRCON] section already exists, edit its keys rather than creating duplicate sections.

[SourceRCON]
bEnabled=true
bLogging=false
Password="replace-with-a-long-valid-password"
Port=0
IP="0.0.0.0"
MaxFailedAttempts=5
Timeout=60
PageTimeout=5
MaxConnectionsPerIP=3
IPAllowList=192.168.1.1

What each setting controls

Password and allow-list rules

Do not put a forbidden punctuation character in the password even if your password generator normally includes one. A rejected password disables RCON when it does not meet the minimum requirements. Store the final value in a password manager and share it only with administrators who need access.

Use one IPAllowList= line per trusted address, for example:

IPAllowList=192.168.1.10
IPAllowList=203.0.113.25

Replace those example addresses with your actual management addresses. If administrators connect through a VPN, allow the VPN’s egress address or private address range rather than every public address they might use. An allow list is most effective when the firewall also blocks all other inbound traffic to the RCON port.

Rank #2

UniVersus Attack on Titan: Battle for Humanity - Clash Deck Levi - Ready to Play Character Deck, Deck-Building Collectible Card Game, AOT Licensed

• LEVI CHARACTER DECK: Each ready to play deck contains 61 cards (60 cards + 1 character card) focused on that character’s particular strengths.
• PLAYMAT: Decks also contain a learn to play guide and a paper playmat.
• BRINGING THE MANGA TO LIFE in our set gives it a distinct visual style that is sure to attract a lot of attention.
• NON-CHARACTER CARDS in these decks are found in Attack on Titan: Battle for Humanity, providing a good starting point for a new player to build their collection.

$15.99

Buy on Amazon

Save, restart, and verify the listener

1. Stop the Path of Titans server process.
2. Open the server’s Game.ini in a plain-text editor.
3. Add or update the [SourceRCON] block.
4. Save the file without changing the section name or key spelling.
5. Start the server again. The official setup instructions state that edits do not take effect until the file is saved and the server is restarted.
6. Check the server log for startup errors, a rejected password, or a bind failure caused by a port already in use.
7. Connect from the same machine first. Only after local authentication works should you test a remote address or firewall rule.

Which port is Path of Titans RCON on?

With Port=0, RCON uses the game-server port plus two. The documented port map is:

The port is not universally 7779. If your game server runs on another port, add two to that port when automatic selection is enabled. For example, game port 9000 yields automatic RCON port 9002. A fixed nonzero Port overrides automatic selection.

One detail can cause confusion: the official mcrcon example uses 7778 in its command. Treat that as an example for a server whose configured RCON endpoint is 7778, not as a rule that every Path of Titans server uses 7778. Always use the port shown by your own configuration and startup logs.

Optional startup arguments

The official setup documentation also lists command-line arguments that can supply or override server settings:

• -AuthToken — supplies the server authentication token.
• -Database=Local or -Database=Remote — selects the database mode.
• -ServerGUID — identifies the server.
• -RconIP — sets the RCON bind address.
• -RconPort — sets the internal RCON port.
• -RconPassword — supplies the RCON password.
• -ExternalRconPort — optionally maps an externally reachable port when it differs from the internal RCON port.

Use one authoritative configuration path. If your hosting panel generates startup arguments, confirm whether those arguments override values in Game.ini; otherwise you can edit the file successfully and still connect to a different address, port, or password than the running process uses.

Rank #3

Cryptozoic Entertainment Teen Titans Go DBG Board Game

• Take on the role of a teen Titan, and recruit others Titans to help you!
• 100% compatible with other Cerberus engine deck-building games, including cartoon Network Crossover crisis deck-building game!
• Two-player format perfect for new players!
• For 2 players, ages 12 & up
• Plays in 30-45 minutes

$29.99

Buy on Amazon

Connect with mcrcon

The documented mcrcon pattern is:

./mcrcon -H 127.0.0.1 -P 7778 -p password

Change each value for your server:

• -H is the RCON host. Use 127.0.0.1 for a client running on the server itself, or the server’s externally reachable address for a remote administrator.
• -P is the configured RCON port, not automatically the game port.
• -p is the exact password from Game.ini, subject to the character restrictions above.

For a server on game port 7777 with automatic RCON selection, a local connection would normally be:

./mcrcon -H 127.0.0.1 -P 7779 -p 'your-valid-rcon-password'

Shell quoting rules vary, so avoid putting a password with shell-significant characters in command history. Because the server itself disallows several punctuation characters, choose a password that is both valid for Path of Titans and safe for your administration method.

After authentication, run:

help

help lists commands available through the connected console. If authentication succeeds but a command is rejected, the account may lack the required permission, the command may be an in-game-only command, or the server version may expose a different command set.

RCON command syntax and useful examples

RCON console commands do not begin with / or #. The documented example is:

teleportall talonspoint

That command teleports all players to Talons Point. Entering /teleportall talonspoint or #teleportall talonspoint through RCON adds characters the RCON command parser does not require and can cause the command to fail.

Rank #4

Japanime Games Attack on Titan: Last Stand Board Game | from The Creator of 7 Wonders Duel | Become a Titan or Team up to Take It Down | 2-5 Players | 30 Min | Ages 14 +

• Strong Table Presence - with a vertical boardgame that allows players to “climb” the Titan to victory
• Strong License - the game is based on the famous Japanese anime seires Attack on Titan and 30k+ copies were already sold.
• Designed by 2 Titans - This is a game by Antoine Bauza (7 wonders) and Ludovic Maublanc, 2 Titans when it comes to game design.
• Replayability - 4 different Titan roles and 8 dierent Heroes for a dierent feel in every play.
• Game runtime is 30 minutes with 3-5 players

$29.99

Buy on Amazon

Use help on the running server for the authoritative list, because available commands and permissions can change with server versions. Treat command names and arguments as case-sensitive unless the server’s help output demonstrates otherwise, and test disruptive commands on a private instance before using them on a populated server.

RCON commands versus in-game chat commands

The command reference documents a separate chat syntax. These examples are entered by a player or moderator in the game’s chat interface and therefore retain the slash:

Do not assume that every chat command can be sent through RCON, or that an RCON console connection automatically grants every administrative permission. Consult the current Alderon Games Community Server Wiki command reference and your server’s permission configuration for the complete, version-specific list.

Handling long RCON responses

On revisions that support paged responses, output longer than 4,000 characters is split into pages. A response prefix identifies the page key and position, such as [Page(Key 1) 1/5]. To request another page, send a page request using the key and index, for example:

page:1-3

Pages remain available for the configured PageTimeout—five seconds in the documented example. A client that needs the complete response should request every page before the timeout expires and concatenate the page bodies in order. Interactive clients may hide this detail, while scripts must handle the prefix, page count, timeout, and missing-page errors explicitly.

Best Value

Cryptozoic Entertainment DC Deck-Building Game: Teen Titans Go!

• New edition of beloved game: now officially part of the DC Deck-Building Game series and featuring updated rules!
• Features art from the Teen Titans Go! animated series.
• Duel your friends as Robin, Starfire, Cyborg, Beast Boy, and Raven!
• Introdudes “Sidekicks,” which allow you to play with more than one Hero!
• Weakness and Event cards cause all sorts of hijinks and interesting dilemmas.

Buy on Amazon

Security hardening for an exposed server

RCON is an administrative control plane, not a player-facing feature. A stolen password can be used to alter the server or disrupt every connected player, so avoid exposing it broadly.

• Use a password substantially longer than the eight-character minimum, generated uniquely for this server.
• Restrict access with repeated IPAllowList entries and a firewall that permits only those sources.
• Bind IP to a management interface instead of 0.0.0.0 when your network design allows it.
• Rotate the password when an administrator leaves, a credential is shared accidentally, or logs show suspicious attempts.
• Monitor authentication and RCON logs when logging is enabled and retain enough history to investigate failed attempts.
• Share access with as few administrators as practical; do not place the password in public scripts or chat.
• For an internet-facing server, consider the harder documented limits MaxConnectionsPerIP=1 and MaxLoginAttempts=1, after confirming that your client and operational workflow can tolerate them.

Changing MaxFailedAttempts is not the same as setting MaxLoginAttempts. Use the key supported by the server version and verify the effective value in logs; do not assume an unrecognized key has taken effect.

Automating administration with the REST API

For scheduled jobs, dashboards, moderation bots, and infrastructure tooling, Alderon’s REST API provides an HTTP/JSON alternative to the interactive Source RCON protocol. Its base URL is:

http://<host>:<port>/v1/api

Requests authenticate with a bearer API key:

Authorization: Bearer <ApiKey>

The API uses endpoint permissions rather than relying only on a connection-level RCON password. Two useful endpoints are:

• GET /commands enumerates available RCON and console commands.
• POST /rcon executes a command.

Generic RCON execution through the API requires bAllowGenericCommand=true. Enable that capability only when the API key and its network path are appropriately restricted. Give automation the narrowest endpoint permissions it needs, keep API keys out of source control, and revoke or rotate them when ownership changes.

Source RCON or REST API?

Choose Source RCON when you need a straightforward console connection and the command-line client already fits your workflow. Choose the REST API when authentication scopes, HTTP tooling, and repeatable machine-to-machine operations matter more than interactive console behavior. They are alternatives, not mutually exclusive: many operators keep RCON for break-glass access and use the API for routine automation.

Quick Recap

Bestseller No. 1

Shadow of the Tomb Raider - Path of the Apocalypse

$16.80

Bestseller No. 2

UniVersus Attack on Titan: Battle for Humanity - Clash Deck Levi - Ready to Play Character Deck, Deck-Building Collectible Card Game, AOT Licensed

PLAYMAT: Decks also contain a learn to play guide and a paper playmat.

$15.99

Bestseller No. 3

Cryptozoic Entertainment Teen Titans Go DBG Board Game

Take on the role of a teen Titan, and recruit others Titans to help you!; Two-player format perfect for new players!

$29.99

Bestseller No. 4

Japanime Games Attack on Titan: Last Stand Board Game | from The Creator of 7 Wonders Duel | Become a Titan or Team up to Take It Down | 2-5 Players | 30 Min | Ages 14 +

Game runtime is 30 minutes with 3-5 players

$29.99

Bestseller No. 5

Cryptozoic Entertainment DC Deck-Building Game: Teen Titans Go!

Features art from the Teen Titans Go! animated series.; Duel your friends as Robin, Starfire, Cyborg, Beast Boy, and Raven!

Troubleshooting checklist

RCON refuses every connection

• Confirm the server was stopped before editing and restarted afterward.
• Check that bEnabled=true appears under exactly [SourceRCON].
• Verify the password has at least eight characters and none of the forbidden characters.
• Calculate the port from the actual game port when Port=0; do not assume 7779 unless the game port is 7777.
• Check that the firewall forwards the configured RCON port and that no other process is using it.
• Review IPAllowList and IP; a correct password still fails when the source address is not allowed or the listener is bound to another interface.

Authentication works but commands fail

• Run help and use the command spelling exposed by that server version.
• Remove the leading slash or hash from RCON input.
• Check command permissions; in-game administrative commands are not automatically granted to every RCON connection.
• Confirm that you are not sending an in-game chat-only command through the console.

The result is incomplete

• Look for a page marker such as [Page(Key 1) 1/5].
• Request subsequent pages with the matching page:Key-Index format, such as page:1-3.
• Increase PageTimeout only if your client genuinely needs more time, and remember that the setting is measured in seconds.

A remote client works locally but not over the internet

• Use the externally reachable address and, when applicable, -ExternalRconPort.
• Open only the configured RCON port in the firewall and restrict it to administrator addresses.
• Check that the provider or router is not forwarding the game port while leaving the RCON port closed.
• Test through the same VPN or public route administrators will use; local loopback success proves only that the server listener is running.

Quick reference

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.