Skip to main content

What the bot asks Discord for

The invite uses the bot and applications.commands scopes. Classic embeds are never used anywhere in the bot, so Embed Links is not required.
No privileged intents (Server Members or Message Content) are needed. Interaction payloads already carry the invoking member’s roles, and file uploads go through a modal’s file-upload component instead of waiting on a follow-up message — so the bot never needs to read message content or track membership changes.

Who can run what

Every check is enforced when the command or button actually runs, not just when a panel is drawn — reopening a stale admin panel does not bypass it.
Managers can always use the download panel regardless of the configured access mode, and are exempt from delivery rate limiting. See Configuration for how to set the admin role and access mode.