Critical-risk tools in Discord
21 of the 139 tools in Discord are classified as critical risk. This page profiles those tools specifically, with recommended policy actions and the attack patterns that target them.
Every operation listed below is an action PolicyLayer recommends controlling at the transport layer. Open any tool to see the full profile, risk score, and YAML policy snippet.
Tools at critical risk
-
bulk_delete_messagesDestructiveDelete multiple messages from a channel at once (2-100 messages). Only works on messages less than 14 days old.
-
delete_automod_ruleDestructiveDelete an auto-moderation rule from the Discord server.
-
delete_channelDestructiveDelete a channel from the Discord server. Channel name is fuzzy-matched.
-
delete_commandDestructiveDelete an application (slash) command.
-
delete_emojiDestructiveRemove a custom emoji from the server by name or ID.
-
delete_eventDestructiveDelete a scheduled event from the Discord server.
-
delete_forum_tagDestructiveRemove a tag from a forum channel.
-
delete_integrationDestructiveRemove an integration from the server by its ID.
-
delete_inviteDestructiveRevoke an active invite link by its invite code.
-
delete_messageDestructiveDelete a message from a channel by its message ID.
-
delete_roleDestructiveDelete a role from the Discord server. Role name is fuzzy-matched.
-
delete_stickerDestructiveRemove a custom sticker from the server by name or ID.
-
delete_templateDestructiveDelete a server template from the Discord server.
-
delete_threadDestructiveDelete a thread by name or ID.
-
delete_webhookDestructiveDelete a webhook by its ID.
-
prune_membersDestructiveRemove inactive members who have not logged in within the specified number of days. Returns the number of members pruned.
-
purge_user_messagesDestructiveDelete all recent messages from a specific user in a channel. Scans recent messages and bulk-deletes those authored by the target member. Only messages less than 14 days old can...
-
ban_memberDestructiveBan a member from the Discord server. They cannot rejoin until unbanned. Member name is fuzzy-matched.
-
bulk_banDestructiveBan multiple members from the server at once. Member names are fuzzy-matched. Tracks successes and failures individually.
-
end_stageDestructiveEnd an active stage instance on a stage channel.
-
kick_memberDestructiveKick a member from the Discord server. They can rejoin with a new invite. Member name is fuzzy-matched.
Attacks that target this class
Critical-risk tools in any server share these documented attack patterns. Each links to the full case and the defensive policy.