Minecraft Snapshot 25w37a Adds TLS for Server Hosts

Mojang released Java Edition test build minecraft snapshot 25w37a on 9 September 2025, overhauling dedicated server controls alongside gameplay and rendering tweaks. The snapshot focuses heavily on tightening security around the remote administration API while introducing entity pathfinding and flight adjustments across vanilla environments.

Server Management Protocol and Server Properties

Administrators managing remote processes will find immediate structural requirements in this release.

Authentication and Token Security

Remote clients interacting with the Minecraft Server Management Protocol API must now supply authentication. Inbound requests need an Authorization bearer token header matching a designated server secret. This key is controlled via management-server-secret= in server.properties and requires exactly 40 alphanumeric characters using A-Z, a-z, and 0-9. Leaving this setting blank causes the server to generate one automatically. Unauthenticated or invalid calls fail immediately with a 401 Unauthorized status.

Mandatory TLS Configuration

Transport Layer Security is now active by default through the management-server-tls-enabled property. Enabling TLS requires an explicit PKCS12 keystore path defined under management-server-tls-keystore=path/to/keystore.p12. If TLS remains true while the keystore path is left empty, a dedicated server will refuse to boot.

Hosts must provide the keystore password through one of three avenues, evaluated in explicit priority order:

1. The MINECRAFT_MANAGEMENT_TLS_KEYSTORE_PASSWORD environment variable.
2. The -Dmanagement.tls.keystore.password= JVM argument.
3. The management-server-tls-keystore-password= entry in server.properties.

Additionally, the default port setting management-server-port changed from 25585 to 0. A zero value instructs the management server to bind to an arbitrary available port at startup.

Technical Formats and Rendering Requirements

System requirements and internal pack formats both step forward in this snapshot.

OpenGL 3.3 and Shader Revisions

Running the client now requires OpenGL 3.3 rather than OpenGL 3.2. Mojang stated that while the formal baseline shifted, posted minimum specifications had already called for OpenGL 4.0 since 2017. Shaders across the board moved their version definition from 150 to 330. In tandem, core/entity.vsh and core/entity.fsh gain the PER_FACE_LIGHTING flag to compute cardinal lighting individually for front and rear polygon faces.

Pack Versions and Debug Flags

Data packs update to version 87.0, renaming the command block rule enableCommandBlocks to commandBlocksEnabled. Resource packs bump to version 69.0, which shifts the villager container UI result slot upward by one pixel. For diagnostic work, internal debug mechanisms previously stripped during compilation are exposed behind JVM flags. Operators can toggle features using -DMC_DEBUG_ENABLED=true alongside specific targets like -DMC_DEBUG_BRAIN=true, or inspect possibilities via -DMC_DEBUG_PRINT_PROPERTIES.

Gameplay Adjustments and World Rules

Multiple world rules and mob behaviours received balance updates.

Mob Armour and Golem Pathfinding

Equipment rolls for newly spawned mobs now incorporate Copper alongside Leather and Gold, and the probability of upgrading to an elevated tier rose from 9.5% to 10.87%. Copper Golems had their collision width adjusted to 0.49 blocks to traverse tight gaps, and they now possess the ability to open doors.

Game Rules and Flight

A new rule, spawnerBlocksEnabled, defaults to true and provides master control over mob cage activity. The flight logic when switching from Spectator to Creative mode was also reworked: flight persists unless the player hovers within one block of a solid, collidable surface.

What This Breaks or Requires for Server Owners

Anyone deploying this snapshot on a Minecraft server list host must update their configuration prior to launch. Because management-server-tls-enabled defaults to true, any existing automated boot script lacking a PKCS12 keystore file will abort instantly. Administrators not using remote tooling must explicitly set management-server-tls-enabled=false or construct a valid keystore before launching. Furthermore, fixed external scripts relying on port 25585 must be updated, as the protocol now defaults to dynamic port allocation.

Custom data packs relying on command blocks will break if they invoke the old rule naming convention, requiring a migration to commandBlocksEnabled. Spawner toggles can now be isolated cleanly without relying entirely on peaceful difficulty switches, similar to how gameplay adjustments were handled when Minecraft Snapshot 25w41a Adds Mounts and Spears. If you maintain modded or custom server stacks, remember that earlier milestones such as when Minecraft 26.2 Snapshot 8 Alters Graphics Defaults show how quickly backend technical requirements evolve.

What Players Will Notice on the Server

Players running hardware that does not support OpenGL 3.3 can no longer start the snapshot client. Inside the world, visual lighting on hollow models—including worn armour, player skin outer sleeves, wings, and ribs—will now cast ambient shadows from their actual surface direction rather than the inverse.

Creative builders switching out of Spectator mode in mid-air will remain aloft instead of plunging downward, provided they are not hovering directly over the ground. Searching through pack selection screens is also faster thanks to dedicated search bars added to both resource pack and data pack menus.