Authentication and tenant access
Discord OAuth identifies the user. Protected server routes check access to the selected server. Standard administration requires Manage Server or Administrator permission; specific reporting and billing views can allow separately authorized access.
Support uploads
Support uploads use a private support-only object store. Files remain quarantined until type, size, checksum, and malware checks complete. Public asset URLs are not used for support attachments.
Billing boundary
Payment credentials and detailed service responses remain restricted. The browser receives only the fields needed for the supported billing workflow.