Role
@Admin
Risky permission
ADMINISTRATOR
Why it matters: Grants every permission, including dangerous server-wide controls. Anyone with this role can do anything.
Discord security · permission auditing
roly.space
Scan Discord roles for risky permissions.
roly flags dangerous perms, explains why they matter, and helps server owners clean up role access.
Know which Discord roles are too powerful before they become a problem.
roly · scan report/r/developerdiner · 42 roles · 1.2s
Read-only · No changes madeCritical
Role
@Moderator
Risky permission
KICK_MEMBERS · BAN_MEMBERS
Why it matters: Lets the role permanently remove members. Useful for mods, but verify only trusted users have it.
Role
@Helper
Risky permission
MANAGE_MESSAGES
Why it matters: Can delete or hide others' messages across channels. Often broader than helpers actually need.
Role
@VIP
Risky permission
MENTION_EVERYONE
Why it matters: Allows pinging @everyone. Low risk, but worth knowing who can mass-notify your server.
Showing 4 of 17 flagged findings across 8 roles.See full report →
- Fast scans
- Clear explanations
- Built for public servers
How it works
From invite to safer roles in minutes
No dashboards to learn. Just invite roly and read the report.
- Step 01
Invite roly
Add roly to your server in one click. No command-line setup, no configuration files.
- Step 02
Scan roles
roly reads every role's permissions and builds a complete risk profile in seconds.
- Step 03
Review risky perms
Open the report and see which roles have dangerous access — with plain-English reasons.
- Step 04
Fix issues
Trim admin grants, split moderator powers, and keep only the access each role needs.
Why it's useful
Built for the moment something goes wrong
Most permission problems are invisible until they're exploited. roly makes them visible.
Prevent accidental admin-level access
Catch roles that quietly inherit Administrator or full channel controls before a bad actor finds them.
Spot overpowered moderator roles
See exactly which moderator grants are risky — ban, kick, manage channels — and decide who really needs them.
Make audits easier for new owners
When a server changes hands, the audit is already done. Hand over a report, not a puzzle.
Privacy & safety
A security tool that respects your server
roly was designed on a trust-first principle: read what it needs, do nothing more, stay out of the way.
Only reads role permissions
roly inspects permission flags on roles. It never reads messages, members, or channel content.
No spam, no clutter
No broadcasts, no DMs, no auto-posts. roly only responds when you ask for a scan.
No complicated setup
No config files, no databases to host. Invite the bot, run one command, read the report.
FAQ
Quick answers
If your question isn't here, reach out on the support server.
What permissions does it need?
roly asks only for the permissions required to list roles and read their permission flags. It never asks for Administrator.
Does it change roles?
No. roly is read-only by design. It produces a report and leaves all changes to you.
Is it safe for large servers?
Yes. Scans run asynchronously, are rate-limit aware, and only touch role metadata — not members, messages, or channel content.
Run your first scan in under a minute.
Free, read-only, and built for any public server. No setup wizards, no spreadsheets.