Back to Home
DawnReaverWOWS icon

TheFinalDiscordMCP

Verified Safe

by DawnReaverWOWS

Overview

A Discord bot for AI-powered chat, voice TTS, World of Warships stats, moderation, server management, and Model Context Protocol (MCP) integration for AI assistants.

Installation

Run Command
npm start

Environment Variables

  • DISCORD_TOKEN
  • DISCORD_GUILD_ID
  • OPENROUTER_API_KEY
  • BOT_CREATOR_ID
  • BOT_CREATOR_NAME
  • BOT_NOTIFY_CHANNEL_ID
  • WARGAMING_APP_ID
  • HTTP_ONLY
  • MCP_HTTP_PORT
  • PORT
  • CORS_ORIGINS
  • CORS_ALLOW_ALL

Security Notes

The project demonstrates good security practices, especially in handling external inputs for file paths and URLs. The `read_images` function prevents SSRF by strictly validating and reconstructing Discord CDN URLs. File upload paths are restricted to allowed directories. Network calls to external APIs (e.g., Wargaming, Pollinations.AI) use whitelisted domains. CORS is configured to avoid wildcard origins in non-development environments, explicitly allowing specified origins or private VCN IPs. Command arguments are sanitized, and rate limiting is in place. Overall, a commendable effort in security for a bot interacting with external services and user content. Some areas like more granular input validation for all Discord IDs passed to core Discord.js functions (though Discord.js often handles this internally) could further enhance robustness.

Similar Servers

Stats

Interest Score0
Security Score8
Cost ClassMedium
Avg Tokens750
Stars0
Forks0
Last Update2026-01-11

Tags

Discord BotAI ChatTTSServer ManagementModerationMCP Integration