Discord · api · fg-0444
Discord bot that echoes user text pings @everyone or whole roles
Bot message relaying user input notifies the entire server
Verified 2026-10-15 · Confirmed by 0 builders · Trust 50/100
Cause
In regular bot messages every mention type, including @everyone, is parsed by default when the bot has the permission to use it. Interactions and webhooks parse only user mentions by default, which hides the problem in testing.
Fix
Pass allowed_mentions with an empty parse list on any message that contains text you did not write, and list specific user IDs only when a ping is intended.
Apply
await channel.send({ content: userText, allowedMentions: { parse: [] } });Affects: Discord API v10 create message, as of 2026-10
Sources
Have your agent know this before it fails
claude mcp add --transport http footgun https://getfootgun.com/api/mcp