Links & invites

Block URLs, Discord invites, and link shorteners — or whitelist only the domains you trust.

When you'd use it

• Stop members posting random URLs (allow-only mode)
• Block known scam-host domains (deny mode)
• Stop drive-by discord.gg/badserver self-promo
• Catch shortened URLs (bit.ly, t.co, etc.) that obscure their real destination

Settings

Setting	What it does
Block Discord invites	Matches discord.gg/xyz and discord.com/invite/xyz regardless of the domains list.
Block link shorteners	A built-in list of common shorteners (bit.ly, tinyurl, t.co, goo.gl, ow.ly, buff.ly, is.gd, shorturl.at). Triggers independently of your custom list.
Mode	deny — list contains domains to BLOCK. allow_only — list contains the ONLY domains that may be posted.
Domains	One per row. Up to 500. Use bare hostnames (example.com, discord.com).

Tips

• Start in deny mode. Allow-only mode is strict and tends to surprise members; only flip it on for high-security servers.
• Specifying example.com covers www.example.com but not subdomains. Add news.example.com separately if you want to allow that one too.
• The shortener list is built-in; you can't customize which shorteners count. If you need granular control, leave Block shorteners off and add specific domains to your deny list.
• Discord invites have their own toggle — you don't need to add discord.gg to your domain list. The dedicated check is faster and catches every invite-link format.

Common patterns

Use case	Setup
Stop self-promo	Block Discord invites ON + actions: delete + warn
High-trust server	Allow-only mode + domain list: github.com, your-company.com, docs.your-company.com
Anti-scam	Deny mode + add common phishing hosts as you find them
Just kill spam	Block shorteners ON + actions: delete

Limits

• 500 domains per rule
• 6 actions per rule

Behaviour

• Detected URL = anything starting with http:// or https://.
• The hostname is checked against your list both as-is and as the base domain (last two segments). So bad.example.com matches an entry for example.com.
• Discord invite check uses a separate regex; bypasses the domain list entirely.
• A single message containing multiple URLs records one hit per URL (so spammers who post 5 scam links get 5 entries in the audit log).

Related pages

• Automod overview
• Security → Anti-Scam — image-based scam detection for screenshots
• Cases & warnings — what warn actions produce