Discord security and management
Clover watches what accounts do to your server, responds when several signals add up, and rolls roles, channels and permissions back to a snapshot you have checked first.
- Commands
- 1,060
- Categories
- 79
- Dashboard sections
- 15
- Reactions to reach a Hall
- 1
- Stage
- Early access. Not yet open for invites.
Threat scoring, panic and the Time Machine, working together
Four deletions in seven seconds.
No single action is treated as an attack. Scroll through one, using the real point values and default thresholds.
- An account deletes #announcements+22
- The same account deletes #rules+22
- Then #staff+22
- Then the Moderator role+22
- A trusted operator runs /panic activateLock
- Staff run /security rollback previewRead
- Staff run /security rollback applyDone
Threat score
88/100
Recovered
Structure is back, with new IDs. Deleted messages are gone: Discord does not keep them.
Illustration, not a real server.
Nuke Time Machine
Read the rollback before it runs.
Roles, channels and permissions are saved automatically every six hours, and whenever you ask. When something goes wrong, compare the server with any snapshot, see each step a rollback would take, then apply it.
It puts back what was taken and never deletes anything. Recreated channels and roles get new IDs, and deleted messages cannot be recovered by anyone. Clover says so instead of pretending otherwise.
How recovery worksPreview, compared with snapshot #4
- Recreate channel announcements
- Recreate channel rules
- Recreate channel staff
- Recreate role Moderator
- Restore channel general (overwrites)
Added since the snapshot: reported, never removed.
Illustration, not a real server.
Panic mode
One command, and the doors shut.
Panic locks every channel, stops new invites and alerts staff. A PIN stored as a salted hash and a list of trusted operators mean someone can act when the owner is asleep, and repeated wrong guesses lock the controls.
Ending it restores each channel exactly as it was. Recovery mode pauses automatic responses, so the bot does not fight your repairs.
- #generalOpen
- #announcementsOpen
- #supportOpen
- #off-topicOpen
- #voice-chatOpen
- New invitesAllowed
Server networks
Run several servers as one, without taking over any of them.
Link the servers you run and share role, channel and setting templates from a hub. Preview a sync, find where a server has drifted, and read the history afterwards.
Each server decides what it accepts. Anything touching roles or permissions waits for that server's own administrators.
Illustration, not a real server.
Approvals and handover
A second person for anything you choose.
Set a rule for one command or a whole category. Even administrators then have to propose it. The server owner is exempt.
- Rule
mod.banNeeds two approvals, from a role you pick.
- Proposal
approval.createA moderator proposes the ban. It expires if nobody decides.
- Vote
approval.approveVoters need the permission the command needs, and nobody can approve their own.
- Result
mod.banIt runs once, with the full record kept. Every shift gets a summary of what is still waiting.
Hall of Fame and Hall of Shame
One reaction is enough.
Anyone reacts with a star and the message goes to the Hall of Fame. Anyone reacts with a poop and it goes to the Hall of Shame. There is no threshold to reach.
Each message gets one post per Hall, its counter updates as reactions come and go, and a stored copy survives the original being deleted.
example_user
The backup restored on the first try. Nobody panic, but everybody clap.
Nothing posted yet. React to the message above, as anyone in the server could.
Illustration of a Hall post. Works in your browser only.
Tickets
Support with a clock on it.
Private channels with categories, priorities and transcripts. SLA timers only run during your support hours, and missed targets alert the role you choose.
Illustration of SLA timers.
Cloud storage
Files that keep their history.
Private storage for each server and each person, with versions, restore points, integrity checks and expiring share links. Trash holds deleted items for 30 days.
- v3rules.txtCurrent
- v2rules.txtKept
- v1rules.txtKept
5 GB per server1 GB per person
The dashboard
Everything above, with the same checks as Discord.
Sign in with Discord. Every action runs the same command path as the bot, with the same permissions, approval rules and logs. A server ID from your browser is never trusted: access is re-checked with Discord on each request.
Security
- Open incidents
- 2
- Waiting for approval
- 1
- Snapshots
- 28
HighWebhook flood in #generalOpen
MediumStaff-like name joinedOpen
LowBot added by an administratorResolved
A sketch with sample content. The real dashboard shows only your server's data.
Early access
Still being built, and honest about it.
Clover is not open for invites yet. The status page shows what is running right now, and the changelog shows what has shipped and what has not.