Discord Bot Setup Guide

What It Does

The SpillVR Discord Bot gives your server a /check slash command that searches a VRChat username or user ID against:

SpillVR Verified Nuisance List - The official list maintained by SpillVR admins
Community Blocklists - Any public nuisance lists your server subscribes to

Results appear as a Discord embed showing which lists the player was found on, the category, notes, and date added.

Your Server's Privacy

Many bots used by VR communities request broad permissions that let them silently harvest server data. The SpillVR bot is different. It cannot access any of the following:

No Message Access

Cannot read message history or see new messages in any channel. Zero access to anything your members type or post.

No Member List Access

Cannot see who is in your server. Has no access to your member list, roles, or presence information.

No Data Collection

Stores nothing about your server except your encrypted API key and list subscriptions. No logs, no analytics, and no tracking.

The bot only has permission to respond to slash commands and send messages. You can verify this yourself in Server Settings > Integrations after adding the bot.

Setup Guide

1 Add the Bot to Your Server

Click the button above or use this link to invite the bot. You need Manage Server permission in the Discord server.

The bot only requests permission to send messages and use slash commands. Unlike many VR community bots, it does not request the Message Content intent, the Server Members intent, or any other privileged access.

2 Get a SpillVR API Key

You need a SpillVR account with an API key. Sign in or create an account, then go to your API Key page to generate one.

API keys start with spvr_ and are 45 characters long. Keep yours private.

3 Configure the API Key

In your Discord server, run:

                                /set-api-key key:spvr_your_key_here
                            

This command is ephemeral (only you can see the response) and requires Administrator permission. The key is encrypted before storage.

4 Subscribe to Community Lists (Optional)

The bot always checks against the SpillVR Verified Nuisance List. To also check community-curated lists, subscribe by share code:

                                /add-list share_code:aBcD1234
                            

Find lists to subscribe to on the Community Blocklists page. Each list has an 8-character share code.

You can subscribe to multiple lists. Use /lists to see your subscriptions and /remove-list to unsubscribe.

5 Check a Player

You're all set. Use the check command with a VRChat display name or user ID:

                                /check username:SomePlayerName
                            

The bot responds with a red embed if matches are found, or a green embed if the player is clean.

Commands

Command	Permission	Description
`/check <username>`	Everyone	Search a player across all subscribed lists and the SpillVR Verified list
`/set-api-key <key>`	Administrator	Set the SpillVR API key for this server (ephemeral response)
`/add-list <share_code>`	Everyone	Subscribe to a community blocklist by share code
`/remove-list <share_code>`	Everyone	Unsubscribe from a community blocklist
`/lists`	Everyone	View all lists this server is subscribed to
`/set-channel <channel>`	Administrator	Set the alert channel for notifications

FAQ

Does the bot read my messages or see my members?

No. The bot does not have the Message Content privileged intent, so it cannot see any messages in any channel, old or new. It also does not have the Server Members privileged intent, so it cannot see who is in your server. It only receives the typed-in data when someone explicitly runs a slash command.

How is this different from other VR community bots?

Many bots used by VR communities request the Message Content and Server Members intents, which lets them silently read every message and enumerate every user in your server. The SpillVR bot requests neither. It cannot harvest data from your server because it simply does not have access to it.

Is my API key safe?

Yes. The key is encrypted at rest and never displayed after initial setup. Only server administrators can set or change it.

Does the bot cache player data?

No. Every /check command makes a live API call to SpillVR. No player data is stored locally by the bot.

Can I use the bot without subscribing to any community lists?

Yes. The bot always checks the SpillVR Verified Nuisance List even with no community lists subscribed.

What does the share code look like?

Share codes are 8 alphanumeric characters (e.g. aBcD1234). You can find them on each list's page or in the URL on the Community Blocklists page.

Ready to Get Started?

Add the bot to your server and start checking players in seconds.

Add to Discord Browse Community Lists