Every Palworld admin command that actually exists — authentication, moderation, teleport, server lifecycle, and live settings — plus full RCON and REST API setup. Written for people who'd rather skim than scroll, and checked against the current build so you're not pasting commands that quietly got removed two patches ago.
/AdminPassword YourAdminPassword to authenticate. The password is whatever you set as AdminPassword= in your PalWorldSettings.ini./ will run. Type the command, hit Enter, done. You only need to authenticate once per session./Save works; /save does not. Match the capitalization exactly as shown below, or the command silently does nothing. Admin rights last until you disconnect — reconnect and you'll need to re-authenticate.
The one command that unlocks everything else. Without authenticating, none of the other commands work.
PalWorldSettings.ini — set AdminPassword=YourValue there before launching. Lost when you disconnect; re-run to re-authenticate.\) to exit spectating.Get a quick read on who's online and what server you're on. Both return text in chat — no UI.
Kick, ban, and unban. All of these take a SteamID — pull it from /ShowPlayers output. Bans persist to Pal/Saved/SaveGames/banlist.txt on the server — and there's no in-game command to view the list; open that file directly to inspect it.
banlist.txt. The player can't rejoin until you run /UnBanPlayer.banlist.txt and re-allows joining. You no longer have to hand-edit the ban file to reverse a ban.Two teleport commands, both targeting a player by SteamID. Useful for rescuing someone stuck in geometry or going to investigate a report. Note: you must be a logged-in player in-game to use these — they don't work from a headless console or steamCMD.
Save the world, broadcast to everyone, and bring the server down — gracefully or hard. The graceful options are almost always the right call on a populated server.
/Shutdown 60 Restart_in_60s. Gives players time to get safe and log out clean./Shutdown hangs or you've got a stuck server. Run /Save first./Broadcast or /Shutdown message can get cut off at the first space on some clients and over RCON — use underscores (Restart_in_60s) or wrap the text in quotes depending on your client. And /DoExit never saves first, so pair it with /Save or you lose everything since the last autosave.
A number of guides document a /ChangeSettings family for renaming the server or rotating the password without a restart. It doesn't exist. It's not in the official command list at v0.7.3, no host's knowledgebase documents it, and we found no build of the game that ever shipped it — paste it and it silently does nothing.
PalWorldSettings.ini and restarting the server — settings only load on boot. The REST API's GET /v1/api/settings can read the effective settings, but nothing in vanilla writes them live. We'd rather tell you that than leave you wondering why a phantom command did nothing.
RCON is a TCP-socket version of the chat console — it lets external tools and scripts send commands without anyone being in-game. Configure it once in PalWorldSettings.ini:
RCONEnabled=True RCONPort=25575 AdminPassword=YourAdminPassword
Then connect with any Source RCON client — mcrcon, RCON.io, BattleMetrics, etc. The RCON password is your AdminPassword. Over RCON, drop the leading slash — send ShowPlayers, not /ShowPlayers. Example with mcrcon:
# list online players mcrcon -H your.server.ip -P 25575 -p YourAdminPassword "ShowPlayers" # force a save mcrcon -H your.server.ip -P 25575 -p YourAdminPassword "Save" # graceful restart with a message mcrcon -H your.server.ip -P 25575 -p YourAdminPassword "Shutdown 30 \"Hot patch incoming\""
25575 to trusted IPs only — don't expose it to the open internet, and use a strong AdminPassword since it doubles as your RCON credential. One more quirk: RCON mangles multi-byte player names (Japanese, Korean, emoji) — characters after them can go missing in output.
Palworld also exposes an HTTP REST API for automation — useful for dashboards, monitoring (Grafana/Prometheus), and Discord bots. Enable it in PalWorldSettings.ini:
RESTAPIEnabled=True RESTAPIPort=8212
Authenticate with HTTP Basic auth — username admin, password = your AdminPassword.
| Endpoint | Method | Purpose |
|---|---|---|
| /v1/api/info | GET | Server name, version, world ID. |
| /v1/api/players | GET | JSON list of online players — name, SteamID, ping, location. |
| /v1/api/settings | GET | Effective server settings. |
| /v1/api/metrics | GET | FPS, CPU, memory, uptime — for monitoring dashboards. |
| /v1/api/announce | POST | Broadcast a message. Body: {"message":"text"} |
| /v1/api/kick | POST | Kick a player. Body: {"userid":"steam_xxx","message":"reason"} |
| /v1/api/ban | POST | Ban a player. Body: {"userid":"steam_xxx","message":"reason"} |
| /v1/api/unban | POST | Unban a player. Body: {"userid":"steam_xxx"} |
| /v1/api/save | POST | Trigger a world save. |
| /v1/api/shutdown | POST | Graceful shutdown. Body: {"waittime":30,"message":"text"} |
| /v1/api/stop | POST | Hard stop — equivalent to /DoExit. |
8212 with your admin password owns the server. Firewall it to trusted IPs, and never expose port 8212 to the public internet.
/GiveItem, /SpawnPals, /God, coordinate-based /Teleport, /ResetMap — and, yes, /ChangeSettings and /BanList — as built-in. But as of v0.7.3, none of them exist: item-giving, Pal-spawning, and god mode are not officially supported by the dedicated server. If a command isn't in the sections above, it doesn't exist in the base game.!give, !spawn, !exp and similar. Those require installing the mod on the server first, and they're community tools, not Pocketpair-official. To wipe a world, there's no /ResetMap — you stop the server and delete the save folder. We'd rather tell you that than have you paste a command that silently does nothing.
The same clean, verified reference, for every game that has a dedicated server. Most of these are live now.
/AdminPassword YourAdminPassword to authenticate. Once authenticated, any command starting with / will execute. Note that commands are case-sensitive — /Save works, /save does not.
AdminPassword value in your server's PalWorldSettings.ini. Then in-game, press Enter and type /AdminPassword your_password to gain admin privileges for that session. Admin rights last until you disconnect — reconnect and you'll need to re-authenticate.
/KickPlayer SteamID removes a player from the server. Get the SteamID by running /ShowPlayers first — it lists everyone online with their Name, PlayerUID, and SteamID. In-game, you can copy a player's SteamID to clipboard by double right-clicking them in the player list.
/GiveItem. Item-giving, Pal spawning, and god mode aren't officially supported by the dedicated server as of the current patch. They require a server-side mod like AdminEngine or PalDefender, which add custom !give-style commands. Any guide listing /GiveItem as built-in is out of date.
RCONEnabled=True and RCONPort=25575 in PalWorldSettings.ini, then connect with any Source RCON client such as mcrcon. Over RCON you drop the leading slash — send Save rather than /Save. The RCON password is your AdminPassword. Firewall the port to trusted IPs.
/ChangeSettings command for this — it doesn't exist (not in the official command list, and it silently does nothing if you paste it). Server name, description, password, and all balance settings require editing PalWorldSettings.ini and restarting; settings only load on boot. The REST API can read live settings via GET /v1/api/settings, but nothing writes them live.
/Shutdown Seconds MessageText initiates a timed shutdown with a warning broadcast — the right command for planned restarts. /DoExit terminates the server instantly with no warning and no save, so run /Save first if you use it.
/ResetMap command in the base game. To wipe, stop the server and delete the save folder (back it up first if there's any chance you'll want it). The server generates a fresh world on next launch.
PalWorldSettings.ini admin password to authenticate against. For solo play, you'd need third-party trainer software.