Tool
Is this bot asking for too much?
Paste a bot's invite link or permission number. You'll see every permission it requests, how risky each one is, and what it could do if the bot were compromised.
Everything runs in your browser. Nothing you paste is sent anywhere.
Verdict
Broad
Several powerful permissions. Normal for moderation or setup bots, but make sure every one is used.
1099511721094
0x10000016C86
Critical risk
0
High risk
3
Medium risk
2
Low risk
4
Findings
Only pinning?
If Manage Messages is only used to pin, request Pin Messages instead.
3 permissions affected by server 2FA
In servers that require 2FA for moderation, the bot owner's account needs 2FA enabled for Kick Members, Ban Members, Manage Messages to work.
This looks like a moderation bot. Its sensitive permissions match what that kind of bot needs.
Compare with the example9 permissions requested
Lets the bot remove members from the server. They can rejoin with a new invite. Only members whose highest role is below the bot's highest role can be kicked.
If the token leaks: A leaked token can be used to kick every member below the bot's role in seconds.
Lets the bot ban members and delete their recent messages. Bans persist until manually removed. Role hierarchy still applies.
If the token leaks: A leaked token can mass-ban the community, and bans must be undone one by one.
Lets the bot time out members below its highest role. Timed-out members lose all permissions except View Channels and Read Message History.
If the token leaks: A leaked token can time out every member below the bot's role for up to 28 days.
Lets the bot read the server audit log to see who did what. Used by logging and anti-nuke bots.
Lets the bot delete other people's messages and remove their reactions. Used by moderation and auto-mod bots.
Lets the bot see channels. Almost every bot needs this, and server owners can still hide specific channels with overwrites.
Lets the bot post messages. Note that replying to slash commands does not need this permission.
Lets links the bot posts show a preview, and is required for bots that send rich embeds.
Lets the bot fetch messages sent before it was looking. Needed to edit or react to older messages.