Authentication & connections
Connect your Discord account.
Opened outside Discord, so web OAuth2 is used as a fallback. Tokens stay in an encrypted HTTP-only session.
Discord integration is not configured
Configure the project secrets to continue.
Checking configuration…Discord Activity (primary)
The Embedded App SDK authorizes you inside the Discord client and hands the server a one-time code. Nothing opens an external browser.
Web OAuth2 (fallback)
Used only when the app is intentionally opened outside Discord: authorization code exchange, CSRF state verification, and encrypted HTTP-only sessions.
Bot installation
Invite the bot to a server
Webhook creation and permission checks require the bot to be a member of the server.
Setup status
Activity credentials
DISCORD_CLIENT_ID and DISCORD_CLIENT_SECRET power the Embedded App SDK code exchange
Web OAuth fallback
DISCORD_REDIRECT_URI is only needed outside Discord
Bot credentials
DISCORD_BOT_TOKEN for channel, permission, and webhook operations
Secure session
SESSION_SECRET is managed by the app
Server-enforced security