Elevated permissions for Discord staff. Only when needed.
umask is a free, source-available Discord security bot designed to reduce the risks associated with compromised staff accounts.
Rather than giving moderators powerful permissions permanently, umask allows them to authenticate when they need elevated access. The bot temporarily assigns a role chosen by the server owner, then removes it when their session ends.
How it works- Configure: Choose your permanent staff role, elevated-permissions role and allowed session lengths.
- Issue credentials: Give authorised staff members their own private authentication phrases.
- Authenticate: Staff sign in when they need elevated permissions, then sign out or let their sessions expire.
Everything happens directly within Discord, without external dashboards or separate accounts.
Designed to be minimally intrusive- Minimal permissions: Only Manage Roles and the correct role hierarchy are needed for role management. No Administrator permission required.
- Your roles, your control: umask never modifies your existing role permissions.
- Easy setup: Configure the bot using Discord’s built-in slash commands.
- Open source: The code is publicly available for anyone to inspect.
- Focused functionality: No unnecessary moderation tools or intrusive features.
umask aims to reduce the time powerful permissions are available to staff accounts. It is an additional security measure, not a guarantee against account compromise or misuse.
Get startedWebsite and installation: https://umask.app
Source code: https://github.com/forzasam/umaskbot
Support: support@umask.app
