Everything Jeff Protector does,
from invite to lockdown.
A complete guide to setting up, configuring, and using Jeff — covering the dashboard, every slash command, and how the protection systems fit together.
Quick Start
Go from nothing to a protected server in five steps. Everything here can be done by the server owner in a few minutes.
Invite Jeff to your server
Use the Add to Discord button at the top of this page. You'll be asked to authorize Jeff and pick the server you want to protect. Administrator permission is requested so Jeff can lock channels, manage roles, and restore your server if something goes wrong.
Log in to the dashboard
Head to the dashboard and sign in with Discord. Jeff will list every server where you're a member — servers you own are unlocked for editing, since only the server owner can change protection settings.
Turn on the protection systems
From the dashboard, flip on Security and AutoMod, or run /setup in Discord for the same toggles without leaving your server.
Set your log channel
Pick a channel with /log-set or from the dashboard's Log Channel section. Every action Jeff takes — locks, kicks, reverted changes — is reported there.
Take a recovery snapshot
Enable Recovery and create your first backup. If your server is ever raided or nuked, this snapshot is what Jeff rebuilds from.
Owner-gated by design. Most protection settings — enabling Security/AutoMod, whitelisting, thresholds, recovery — can only be changed by the account that owns the server. This prevents a compromised moderator or admin account from disabling protection during an attack.
Roles & Permissions
Every command falls into one of three access tiers. Jeff checks this automatically — you'll never see a command you're not allowed to use succeed for someone else.
Server Owner
Anything that turns protection on/off, changes sensitivity, manages whitelists, or touches recovery. Reserved for the account that owns the Discord server.
Administrator
Channel locking, log channel setup, and the link-domain whitelist. Anyone with the Administrator permission on the server can use these.
Everyone
Utility commands like scanning a link or checking bot status don't touch protection settings, so any member can run them.
Security
The core anti-raid system. When enabled, Jeff watches for the kind of mass actions that happen during a server raid or a compromised-account attack, and steps in automatically.
Anti-Links
Removes links posted by members who aren't whitelisted, unless the domain is on your Link Whitelist.
Anti-Webhook Spam
Watches webhook activity for abusive or automated posting patterns and intervenes before it can flood your channels.
Anti-Channel Update
Flags rapid or unauthorized channel creation, deletion, and permission changes — a classic sign of a nuke in progress.
Anti-Webhook Update
Catches suspicious edits to existing webhooks, which are often used to hide malicious activity in plain sight.
Anti-Vanity Change
Protects your server's custom invite URL (vanity link) from being changed without authorization.
Anti-Mention Spam
Steps in when a message pings an excessive number of users or roles at once.
Anti-Emoji Spam
Controls floods of custom emoji or reaction spam that can be used to lag or harass a channel.
Sensitivity, not detection details. Exactly how many actions in how much time trip each module is intentionally not published — publishing exact numbers would just hand raiders a way to stay under the radar. Use the threshold level below to tune how trigger-happy Jeff is.
Sensitivity levels
Set with /threshold or from the dashboard. Higher levels react faster but carry a higher chance of catching legitimate bursts of activity (e.g. a mod cleaning up channels).
Low
Fewer false alarmsMedium
Default, balancedHigh
Reacts quicklyMax
Hair-triggerHoneypot
A trap channel for spam bots and careless raiders. Pick a channel that looks tempting (like an "announcements" or "nitro-giveaway"-style name) — anyone who posts in it gets caught automatically.
Choose a channel
Set it from the dashboard's Honeypot section, or with /honeypot set #channel. Only one honeypot channel is allowed per server. Jeff posts a warning embed there automatically.
Someone triggers it
Any real member who sends a message there is kicked automatically (as long as Jeff has permission and the member is below Jeff in the role hierarchy), and the message is deleted. A bot account triggering it just gets its message removed.
It shows up in your logs
Every honeypot trigger is reported to your log channel, along with a running count of kicks on the dashboard.
AutoMod
General-purpose protection that runs independently of the raid-focused Security system.
User-Installed Apps
Blocks unauthorized bot adds and user-installed Discord apps that haven't been explicitly whitelisted for your server.
Turn on the whole module with /automod enable, then fine-tune individual protections with /config automod or from this dashboard section.
Whitelist
Trusted users and bots that should skip certain automod checks — useful for co-owners, staff bots, or utility bots that legitimately create webhooks or invites.
User Whitelist
Add a member by ID so their actions (bot adds, webhook creation, etc.) don't get flagged by AutoMod or Security.
Bot Whitelist
Add a bot by ID so it can operate normally even while automod protections are active.
Manage both from the dashboard, or with /whitelist in Discord.
Link Whitelist
A list of domains that Anti-Links will never remove — up to 150 per server. Add your own website, YouTube, Twitter/X, or any domain your community regularly shares.
Only the base domain is matched (e.g. example.com covers all its subpages), and only HTTPS links qualify. Requires Anti-Links to be enabled and Administrator permission to manage. Use /linkwhitelist example.com for a one-line add, or the dashboard for the full list view.
Log Channel
Pick one channel to receive every security alert Jeff generates — locks, honeypot kicks, blocked webhooks, reverted nuke attempts, and more. Set it with /log-set #channel or from the dashboard. Requires Administrator permission.
Recovery
Jeff's undo button for a server that's been nuked or badly raided. A backup stores your roles, channels, categories, permissions, and server icon so everything can be rebuilt.
Create Backup
Takes the initial full snapshot of your server. Do this right after enabling Recovery, before anything goes wrong.
Load Backup
Fully restores your server from the saved snapshot. This rebuilds everything from scratch — results are sent to your DMs when it's done.
Save Backup
Refreshes your existing backup with the server's current state — do this periodically as your server evolves.
Delete Backup
Permanently removes the stored backup from disk. There's no undo for this one.
Loading a backup wipes the current server state and rebuilds from the snapshot — it isn't a merge. Only run Load Backup when you actually intend to roll back.
Enable with /recovery enable, then manage backups via /recovery-panel or the dashboard.
Verification
Human-verification gate for new members, configured entirely through the dashboard. Running /verification in Discord just shows your current status and links you there.
Verification Link
New members get a link to a hosted verification page before they're granted full server access.
CAPTCHA
An image challenge members solve to prove they're not a bot before receiving your verified role.
Verification sessions expire after a set time — members who don't finish in time are shown an expired-link page and can request a new one.
All Commands
The full slash command reference. Click any command to expand it. Run /help in Discord any time for the same list without leaving your server.
Credits & Support
Jeff Protector is built and maintained independently. Here's where to go for help, feedback, or to see what else the owner is building.
Builder and maintainer of Jeff Protector. This card pulls a live avatar and status via the Veyra presence API.
Need help?
Join the support server for setup help, bug reports, and feature requests — or use /feedback in any server Jeff is in (once every 24 hours) to message the developer directly.