Discord (iflow-mcp) MCP Server
@iflow-mcp/discord-mcp
npm
v0.0.3
Published by @iflow-mcp — no publish provenance, so origin is unverified, but the source is public: the repository link below is self-declared yet readable, so you can inspect the code before adopting it.
Model Context Protocol (MCP) server for Discord API integration
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 7 = 93. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −6 | capability blast radius (high) — client exposure if the model is manipulated |
| −1 | publisher verification (public source) — no provenance, but the source is public and inspectable |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
critical Completed toxic-flow trifecta across toolsMTC-FLOW-002
This server (without client built-ins) exposes a complete data-exfiltration chain: read_messages → read_private_messages → create_webhook. Untrusted input is ingested, private data is read, and it can be sent to an external sink via the agent composing the tools (→). Static analysis proves the primitive exists, not that a specific run will occur.
Fix: Remove one leg of the trifecta: isolate untrusted-input tools from secret-reading tools and from egress tools, or require human approval between them.
Location: flow read_messages → read_private_messages → create_webhook
Tools 93
Each tool and what it can reach — statically extracted from the published source.
read_private_messagesingests untrusted inputreads sensitive datacreate_webhooknetwork egresscrosspost_messagenetwork egressdelete_webhooknetwork egressread_messagesingests untrusted inputsend_messagenetwork egresssend_webhook_messagenetwork egressupload_filenetwork egressadd_reactionno sensitive capabilityadd_role_to_memberno sensitive capability
Show 83 more tools ↓
bulk_delete_messagesno sensitive capabilitybulk_set_privacyno sensitive capabilitycomprehensive_channel_managementno sensitive capabilitycreate_announcement_channelno sensitive capabilitycreate_automod_ruleno sensitive capabilitycreate_categoryno sensitive capabilitycreate_emojino sensitive capabilitycreate_eventno sensitive capabilitycreate_forum_channelno sensitive capabilitycreate_inviteno sensitive capabilitycreate_roleno sensitive capabilitycreate_stage_channelno sensitive capabilitycreate_stickerno sensitive capabilitycreate_text_channelno sensitive capabilitycreate_voice_channelno sensitive capabilitydelete_automod_ruleno sensitive capabilitydelete_categoryno sensitive capabilitydelete_channelno sensitive capabilitydelete_emojino sensitive capabilitydelete_eventno sensitive capabilitydelete_inviteno sensitive capabilitydelete_messageno sensitive capabilitydelete_private_messageno sensitive capabilitydelete_roleno sensitive capabilitydelete_stickerno sensitive capabilitydiscord_manageno sensitive capabilityedit_automod_ruleno sensitive capabilityedit_channel_advancedno sensitive capabilityedit_eventno sensitive capabilityedit_memberno sensitive capabilityedit_messageno sensitive capabilityedit_private_messageno sensitive capabilityedit_roleno sensitive capabilityedit_serverno sensitive capabilityedit_welcome_screenno sensitive capabilityexport_chat_logno sensitive capabilityfind_categoryno sensitive capabilityfind_channelno sensitive capabilityget_automod_rulesno sensitive capabilityget_channel_structureno sensitive capabilityget_emojisno sensitive capabilityget_eventsno sensitive capabilityget_invitesno sensitive capabilityget_member_infono sensitive capabilityget_membersno sensitive capabilityget_message_attachmentsno sensitive capabilityget_message_historyno sensitive capabilityget_pinned_messagesno sensitive capabilityget_rolesno sensitive capabilityget_server_infono sensitive capabilityget_server_statsno sensitive capabilityget_server_widgetno sensitive capabilityget_stickersno sensitive capabilityget_user_id_by_nameno sensitive capabilityget_voice_connectionsno sensitive capabilityget_welcome_screenno sensitive capabilityjoin_voice_channelno sensitive capabilityleave_voice_channelno sensitive capabilitylist_channelsno sensitive capabilitylist_channels_in_categoryno sensitive capabilitylist_webhooksno sensitive capabilitymove_channel_to_categoryno sensitive capabilityorganize_channelsno sensitive capabilitypin_messageno sensitive capabilityplay_audiono sensitive capabilityread_imagesno sensitive capabilityremove_reactionno sensitive capabilityremove_role_from_memberno sensitive capabilitysearch_membersno sensitive capabilitysend_buttonno sensitive capabilitysend_embedno sensitive capabilitysend_modalno sensitive capabilitysend_private_messageno sensitive capabilitysend_select_menuno sensitive capabilityset_category_positionno sensitive capabilityset_category_privateno sensitive capabilityset_channel_positionno sensitive capabilityset_channel_positionsno sensitive capabilityset_channel_privateno sensitive capabilityset_role_positionsno sensitive capabilityset_volumeno sensitive capabilitystop_audiono sensitive capabilityunpin_messageno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (93 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 1
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v0.0.3 latest |
A 93/100 | 1 | 1.13.0 | 2026-09-07 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan @iflow-mcp/discord-mcp --onlineOther implementations of Discord 24
Independent packages implementing the same tool, scanned with the same engine. Compare all 25 side by side →
A lightweight, multi-guild Discord MCP server with 95+ tools
Model Context Protocol (MCP) server for Discord integration, allowing Claude and other MCP clients to interact with Discord
Discord integration for Model Context Protocol
Model Context Protocol (MCP) server for Discord integration, allowing Claude and other MCP clients to interact with Discord
The most complete open-source MCP server for Discord — 80+ tools, dual-mode: integrated (plugin) or standalone, with host-extensible tool registry
Discord MCP server: route-generated tools + Gateway events for Model Context Protocol clients.
More in Communication & Collaboration
One key, 100+ models — chat with any LLM and generate video, images, speech. Free trial at 370.ai.
Retired compatibility stub for the AgentCanary MCP server. Daily briefs continue on X and Telegram.
A Backstage plugin that provides a chat interface for interacting with the MCP Servers.
Signal-first Bitcoin intelligence: sovereign, hiring & hashrate signals over MCP.
WhatsApp® reminders and rescheduling for Calendly. Public read-only MCP endpoint.
Open Source Generic MCP Client for testing & evaluating mcp servers and agents