Protection
Exempt bots
In short
A ticket bot makes and deletes channels all day, which looks like an attack. Add it as an exempt bot on the Anti-Nuke page and tick only what it needs. Only the server owner can do this, and an exempt bot is still stopped after 60 actions in 10 minutes.
Why you need this
Anti-Nuke counts damaging actions and stops anyone who does too many. It can't tell a ticket bot closing 5 tickets from an attacker deleting 5 channels. Without an exemption, a busy ticket bot gets kicked.
An exemption tells Bastion that one named bot may do one named thing. Nothing else about that bot changes.
Add an exempt bot
Open Anti-Nuke
On the dashboard, open Anti-Nuke and scroll to Exempt bots. Only the server owner can change this section.
Add the bot
If Bastion says "We found Ticket Tool", press Yes, allow it. For any other bot, right-click it in Discord, choose Copy User ID, paste the ID and press Add bot.
Tick what it needs
Tick only the actions the bot really does. For a ticket bot that's Create channels and Delete channels.
Limit it to a category
Pick your ticket category under Only inside these categories. The bot is then only let off for channels inside it.
Set the ceiling
Leave it at 20 unless your ticket bot is busier than that. See the ceiling below.
Save
Press Save exempt bots. Bastion checks the ID is a real bot in your server before it saves.
What can be exempt
- Create channels
- Delete channels
- Create roles
- Delete roles
- Create webhooks
- Delete webhooks
What can never be exempt
- Bans and kicks.
- Removing lots of members at once with a prune.
- Giving out dangerous permissions, including a new role that starts with them.
- Changing your custom invite link.
- People. Only bot accounts can be on the list. To stop Bastion limiting a person, add them as a trusted person.
Only channels the bot made
A bot that may delete channels is only let off for channels it created itself in the last 90 days. If it deletes a channel somebody else made, that counts against your normal limits like anyone's would. A stolen ticket bot can close its own tickets, and can't empty your server.
The category rule looks at where a channel was when it was created, not where it is now, so dragging a channel into your ticket category doesn't make it fair game.
The ceiling
Every exempt action is still counted. If an exempt bot makes more than 20 things, or deletes more than 20, in 10 minutes, Bastion stops treating it as exempt, applies your normal limits and posts an alert in your security log.
A real ticket bot rarely gets near that. A hijacked one trying to delete your server does. The owner can set the ceiling anywhere from 5 to 60 under Exempt bots on the Anti-Nuke page. Bastion tells your security log if it is raised.
Bots Bastion knows
Bastion keeps a short list of well-known bots and what each one needs. When one is in your server, the setup wizard and the Anti-Nuke page ask whether to allow it. Nothing is added until you press yes.
| Bot | What the one press allows |
|---|---|
| Ticket Tool | Create and delete channels |
| Tickets | Create and delete channels |
Why can't a trusted person change exempt bots?
An exemption is a hole in Anti-Nuke. Only the owner decides where the holes are.
My ticket bot was kicked before I added it.
Invite it again, then add the exemption before you reopen tickets.
Does changing the security level remove my exempt bots?
No. Exempt bots are kept apart from the level, so they stay exactly as you set them.
Can I exempt a bot from everything?
No. There is no blanket exemption, on purpose. If a bot's token is stolen, whoever has it gets every power the bot had.
Last updated