The Dashboard

The dashboard is where everything is configured. It reads your Discord account's server list, so you only ever see servers you can actually manage.

Signing in

Sign-in is Discord OAuth. Graffiti never sees your password, and the only things it stores about you are your user ID, username, avatar URL and account tier. Signing out revokes the session.

Choosing a server

After signing in you land on the server picker. Servers where you hold Administrator or Manage Server are listed; anything else is filtered out. Each card either invites the bot or opens that server's settings.

The settings page

Settings are grouped into tabs down the left, one per area:

  • General Settings — command prefix, punishment DMs, mod log channel.
  • Image Protection — perceptual-hash scanning and its threshold.
  • Link Protection — six independent link filters.
  • Anti-Bot / Raid — cross-channel spam detection.
  • Roles — auto-roles on join.
  • Engagement — welcome messages and welcome DMs.
  • Voice — Join-to-Create rooms and their defaults.
  • Activity — message and voice tracking, and channels to ignore.
  • Fun — counting and Hall of Fame.
  • Tickets — ticket types and the panel you publish.

Pickers use your real server

Channel, category, role and member fields are populated from the server itself. You never have to paste an ID, and a deleted channel simply stops appearing.

Saving

Saving writes straight through to the running bot's shared settings cache, so a change takes effect on the next message. There is no restart, no sync command and no delay.

Values are validated on the server as well as in the browser. A setting your account is not entitled to change is ignored rather than trusted.

Custom bot

Premium servers can run Graffiti under their own name and avatar. Open a server's settings and choose Custom bot: you create an application in Discord's Developer Portal, paste its token, and invite it. The page notices when it arrives — there is nothing to confirm.

The bot belongs to the server, not to your account, so every admin of that server can see its status and read its log. Removing it hands the server back to the main Graffiti bot with every setting intact.