Commands

Every slash command, what each one is for, and which two you should know before an incident rather than during one.

Everything Wardnox can be told to do from inside Discord.

Most configuration lives in the dashboard, because a permissions matrix and a regular expression are not things anybody wants to type into a chat box. What is here is what you need during an incident, when alt-tabbing to a browser is the wrong answer.

/commands lists all of this in Discord itself, shown only to you.

During an incident

These are the ones worth knowing before you need them.

CommandWhat it does
/security lockdown [reason]Emergency hardening, all at once: links restricted to your allowlist, invites off, strict spam limits. Your configuration is snapshotted first.
/security unlockLifts lockdown and restores the configuration from that snapshot.
/security emergency-stopStops all enforcement immediately. Scanning and logging carry on, so you keep the record of what was happening while you work out what went wrong.
/security resumeClears the emergency stop.

Lockdown and emergency stop are opposites and it is worth being clear which you want. Lockdown makes Wardnox do more. Emergency stop makes it do nothing, while still watching.

Everyday moderation

CommandWhat it does
/security statusProtection status, mode, permissions and intent health. The first thing to run when something seems wrong.
/security scan <text>Runs your real rules against text you paste, using your own account as the author.
/security violations <user>What a member has been flagged for.
/security statsWhat the engine has been doing in this server.
/security trust-user <user> [note]Exempts somebody from scanning. The note is for the version of you that reads it in six months.
/security untrust-user <user>Removes them again.
/security allow-domain <domain>Adds a domain to the allowlist without leaving Discord.
/security block-domain <domain>Adds one to the blocklist.

There is also a Security Scan entry on the right-click menu of any message. Use it on something that was not acted on when you expected it to be: it shows the full reasoning for that specific message, which is usually faster than working backwards from the log.

Turning it on and off

CommandWhat it does
/security enableTurns scanning on for the server.
/security disableTurns it off entirely. Nothing is scanned.
/security monitorDetect and log, never delete or punish. Where every server starts.
/security enforceCarry out the actions you configured.

Verification

CommandWhat it does
/security post-verificationPosts the verification prompt into the channel you configured.

Worth knowing because the prompt is a message, and messages get deleted. If your gate stops working, check the message is still there before checking anything else.

Levelling

Members use the first two. The rest are for staff.

CommandWhat it does
/rank [member]A rendered rank card. Defaults to you.
/leaderboard [page]The top members in this server.
/levels give <member> <amount>Adds XP.
/levels set <member> <xp>Sets XP to an exact figure.
/levels reset <member>Removes somebody from the leaderboard entirely.
/levels reward <level> <role>Grants a role when a member reaches a level.
/levels unreward <level>Stops granting it.
/levels rewardsLists the role rewards for this server.

A role reward can fail in a way Discord never reports: if Wardnox sits below the role in your server's role list, the grant silently never happens. /security status is where that shows up.

Invites

CommandWhat it does
/invites [member]How many members somebody has brought, and how many stayed.

Who can run what

The moderation and configuration commands are restricted to members with the matching Discord permission. That restriction is a convenience rather than the control: every command re-checks permissions when it runs, so hiding a command is never the only thing standing between somebody and using it.