Link Filter

Block unapproved domains and prevent malicious links in your Discord server.

SecurityBot’s Link Filter automatically removes any message containing a link to a domain that hasn’t been explicitly approved. This helps prevent users from sharing phishing sites, scam promotions, or links to untrusted content.


How to Manage Allowed Domains

Enable or disable domain filtering

You can toggle the filter using:

/settings block_links
  • When enabled, any link not on your allowlist will be automatically deleted.

  • When disabled, users can post links freely, unless blocked by another filter.

This command also shows:

  • Whether link filtering is currently active

  • The total number of domains currently allowed (your domain whitelist size)

  • An option to Allow Default Links, which automatically whitelists common trusted domains used across the ecosystem (e.g., X, CardanoScan and other common DAPP's and tools)

Use the "Allow Default Links" button if you want to quickly pre-approve frequently used safe domains.

Allow a trusted domain

To let users post links to a specific domain:

/allow_domain [domain]

Example:

/allow_domain securitybot.info

This allows any URL from that domain, such as:

  • https://securitybot.info/checkout

  • https://securitybot.info/search

This command adds the domain to your allowlist. Once approved, users can share links that include this domain without being flagged or removed.

Subdomains are not included. For example, allowing securitybot.info will not allow docs.securitybot.info. You must allow each subdomain explicitly if needed.


Remove a domain from the allowlist

If you no longer trust a domain or it’s no longer relevant:

/remove_domain [domain]

Example:

/remove_domain securitybot.info

Any future links to this domain will be blocked if the filter is active.


View all allowed domains

To check what domains are currently permitted:

/view_all [Allowed Domains]

Select "Allowed Domains" from the list to see a full embed of all domains in your allowlist.


Best Practices

  • Only allow domains you trust and expect your members to use

  • Add any project-related services (e.g., ipfs.io, jpg.store, yourproject.xyz)

  • Use /view_all [Allowed Domains] regularly to audit your allowlist

  • Combine with a logging channel to track flagged attempts

Only admins or users with Discord’s Administrator permission can manage domain filtering.


Next up: Learn how to restrict Discord invites with Discord Invite Filter.

Last updated