Server security · Checked October 12, 2026

Add bots and apps safely

Who can add apps, what to check before you do, and how to review integrations and webhooks.

Open in Kipp’s docs

1. 1. Know who can add apps

   Anyone with Manage Server can add an app to your server. Keep that permission to a few trusted people.

2. 2. Read the permissions before you authorise

   The invite screen lists what an app asks for. Discord’s own developer guidance says asking for too many permissions reduces trust. Be wary of any bot that asks for Administrator when it doesn’t need it, and untick what it doesn’t need. Kipp asks for specific permissions, never Administrator.

3. 3. Never add a “free Nitro” bot

   Discord has never made a bot that hands out free products. Bots that offer them are scams; report them and never add them.

4. 4. Review your integrations

   Server Settings › Integrations shows every app and webhook, when it was added and by whom, and what each app asked for. Remove anything you don’t use, change a bot’s permissions by editing its role, and limit commands per role or channel.

5. 5. Keep webhooks under control

   Webhooks post into your channels as anyone they like. Delete unused ones in Integrations. Kipp’s Webhook guard watches for webhooks made by anyone who isn’t trusted.

   Dashboard: Protection › Modules · Kipp guide