Documentation

The full reference. For step-by-step setup, start with Learn.

Permissions

Administrator covers everything. If you grant permissions one by one, these are required:

Permission	Used for
View Audit Log	Seeing who deleted, banned or kicked
Manage Roles	Stripping roles, quarantine, rebuilding roles
Manage Channels	Rebuilding channels, /autoconfig
Manage Webhooks	Replaying messages into rebuilt channels
Moderate Members	Timing out phishing senders and bot swarms
Kick Members, Ban Members	Kick and ban buttons, global blacklist
Manage Messages	Removing phishing links and swarm spam

Discord only lets a bot change roles below its own. Keep the Mark Defender role at the top.

Detection limits

Rule	Value
Scoring window	10 s, resets when idle
Points: channel delete, role delete	+2 each
Points: ban, kick	+1 each
Trip threshold	8 default, 2 to 20
Join surge	more than 10 joins in 5 s
Bot swarm (Premium)	3+ bots, same text, 15 s
Message replay	10 free, 50 Premium
Verification link lifetime	15 min
Hacked-account guard	same image set in 2+ channels in 60 s, or 3+ images with no text from a member who joined in the last 3 days, or scam text and links. 1 h timeout
Mass mentions	6 users or roles in one message by default, 10 min timeout
Webhook created	+1; attack webhooks deleted on containment
Webhook spam	webhook younger than 24 h, 6 messages in 5 s
Raid-name wave (Premium)	4 near-identical names in 60 s
Verification barrier	New accounts with a low credibility score: young account, no avatar, random-looking name

Never scored: the server owner, Mark Defender itself, and whitelist tiers 0 and 1.

/autoconfig

Creates #logs-defender (private), #verification, and the Unverified role, posts the Verify button, and hides every other channel from Unverified. Existing channels or roles with those names are reused.

Option	Required	Values
language	yes	English, Francais, Espanol, Chinese, Russian, Arabic

/security

configure

Option	Required	Values
mode	yes	Standard, Event / Giveaway
language	yes	6 languages
slang_mode	yes	true for casual tone
invite_code	no	Promo invite code for Event mode

set-roles

Option	Required	Values
quarantine_role	no	Role given to raiders and stripped operators
verified_role	no	Role given after Turnstile verification
log_channel	no	Where alert cards are posted

whitelist-bot

bot_id: approves a bot so it is not quarantined on join.

lockdown

active: true quarantines every new join until set to false.

branding PREMIUM

Option	Values
name	1 to 32 characters
avatar	PNG, JPEG, GIF or WEBP upload, under 8 MB
color	Hex like #5B8DEF; adds a colored stripe to cards
reset	true restores the defaults

/premium

Subcommand	What it does
pricing	Plans, prices in USD and IDR, how to buy
status	Active licenses on this server and expiry
keys	Every license on your Discord account
activate license_key	Starts an unused key on this server
move license_key	Moves your active license to this server

/verify

Replies with a private link to the Cloudflare Turnstile check. The link is signed to you and this server, and expires after 15 minutes. Passing removes the Unverified and quarantine roles and grants the verified role if one is set.

/backup PREMIUM

Saves roles (name, color, permissions), categories, channels and their role permissions. Messages, members, emoji and bots are not included. Up to 10 backups per account.

Subcommand	What it does
create	Backs up this server (Premium server required)
list	Your backups and their codes
restore code confirm	Server owner only. Creates whatever is missing; never deletes existing roles or channels
delete code	Removes a backup

Protection settings

Dashboard, your server, Protection. Server owners, members with Manage Messages, and whitelist tiers 0 and 1 are never caught by message guards.

Setting	Default	Effect
Hacked-account guard	On	Removes scam promos and screenshot dumps everywhere the account posted, times out 1 h, DMs the user to secure their account
Webhook protection	On	Deletes attack webhooks and new spam webhooks
Mass-mention limit	6	0 turns it off
Account-age gate	Off	Quarantine or kick accounts younger than the set number of days
Raid names PREMIUM	Off	Ban on join by pattern (raid-*), or ban a wave of lookalike names

Alert buttons

Buttons on alert cards work only for the server owner and members with Administrator.

Button	Effect
Execute Permanent Ban	Bans the contained operator
Allow the bot	Whitelists the bot and restores its original permissions
Kick the bot	Removes it; it can be invited again
Ban the bot	Removes it and blocks re-invites
Verify	Lets a member through the verification barrier

Dashboard

Tab	Contents
Overview	Threshold, snapshot counts, latency, live feed (Premium), emergency lockdown
Anti-nuke	Trip threshold slider and point weights
Protection	Hacked-account guard, webhooks, mentions, account age, raid names
Whitelist	Add or revoke trusted users, roles and bots
Posture	Mode, promo invite code, language, tone
Verification	Turnstile on or off, verified and quarantine role IDs
Branding	Name, avatar and stripe color with live preview (Premium)
Incidents	Last 100 logged incidents
Audit log	Who changed what, from where, last 200 entries
Access	Temporary access links and dashboard roles

The Premium page lists your licenses and lets you activate or move them.

Dashboard access

Who	How	Can change access
Owner, Administrator, Manage Server	Automatic	Yes
Dashboard roles	Access tab, takes effect at their next login	No
Temporary link	Access tab, 30 min to 6 h, one link per server, binds to the first person who opens it	No

Every change, whoever made it, is listed in the Audit log tab with its source: dashboard, slash command, or temporary link.

Licensing rules

Plans: Monthly (30 days) and Yearly (365 days), per server.
A key belongs to the Discord account it was issued to. Only that account can activate or move it.
The period starts at activation. A second key on the same server extends it.
Self-service moves: once every 30 days. The old server returns to Standard Core and its branding is reset.
Licenses do not renew automatically. Refunds follow the Refund Policy.

Bot messages

Message	Meaning
[DENIED] Administrator permission required.	Only admins or the owner can press that button
This key belongs to another Discord account.	Log in with the account that bought it
Licenses can move once every 30 days.	Wait until the date shown, or ask support
Verification link invalid or expired.	Run /verify again for a new link
[ERROR] Tactical subsystem error encountered.	Something failed on our side; we are notified automatically