Critical-risk tools in Discord
26 of the 126 tools in Discord are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
discord_ban_memberDestructiveBan a member from a guild (requires confirm=true)
-
discord_begin_guild_pruneDestructiveBegin guild prune (requires confirm=true)
-
discord_bulk_ban_membersDestructiveBulk ban members in a guild (requires confirm=true)
-
discord_clear_emoji_reactionsDestructiveClear all reactions for a specific emoji from a message
-
discord_clear_reactionsDestructiveClear all reactions from a message
-
discord_delete_application_emojiDestructiveDelete an application emoji (requires confirm=true)
-
discord_delete_automod_ruleDestructiveDelete an auto moderation rule (requires confirm=true)
-
discord_delete_channelDestructiveDelete a channel (requires confirm=true)
-
discord_delete_channel_permission_overwriteDestructiveDelete a channel permission overwrite (requires confirm=true)
-
discord_delete_guild_emojiDestructiveDelete a guild emoji (requires confirm=true)
-
discord_delete_guild_soundboard_soundDestructiveDelete a guild soundboard sound (requires confirm=true)
-
discord_delete_guild_stickerDestructiveDelete a guild sticker (requires confirm=true)
-
discord_delete_guild_templateDestructiveDelete a guild template (requires confirm=true)
-
discord_delete_inviteDestructiveDelete an invite (requires confirm=true)
-
discord_delete_messageDestructiveDelete a message (requires confirm=true)
-
discord_delete_roleDestructiveDelete a role (requires confirm=true)
-
discord_delete_scheduled_eventDestructiveDelete a scheduled event (requires confirm=true)
-
discord_delete_stage_instanceDestructiveDelete a stage instance (requires confirm=true)
-
discord_delete_threadDestructiveDelete a thread (requires confirm=true)
-
discord_delete_webhookDestructiveDelete a webhook (requires confirm=true)
-
discord_delete_webhook_message_by_tokenDestructiveDelete a webhook message by token (requires confirm=true)
-
discord_kick_memberDestructiveKick a member from a guild (requires confirm=true)
-
discord_purge_messagesDestructiveBulk delete up to 100 messages (requires confirm=true)
-
discord_remove_own_reactionDestructiveRemove the bot reaction from a message
-
discord_remove_thread_memberDestructiveRemove a member from a thread (requires confirm=true)
-
discord_remove_user_reactionDestructiveRemove a specific user reaction from a message
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.