Uncontrolled API access
Direct bot tokens allow external scripts to modify permissions, delete channels, or mismanage members without oversight.
Connect ChatGPT, Claude, Cursor, and MCP-compatible AI assistants to your Discord server. Qreate provides discovery, structured planning, stored proposals, and human approval controls.
External AI tools excel at drafting and reasoning. Qreate acts as the boundary that protects your server: verifying permissions, generating stored plans, and executing only what you approve.
Granting AI models unrestricted bot tokens exposes communities to prompt injection and irreversible errors.
Direct bot tokens allow external scripts to modify permissions, delete channels, or mismanage members without oversight.
Malicious user messages in an AI chat could hijack bot commands if execution is not isolated.
External clients do not understand role hierarchies or conflicting module configurations without server-side validation.
Qreate exposes dedicated MCP tools for reading server context, discovering modules, creating reviewable plans, previewing messages, and applying approved proposals.
Tokens require the qreate.apply scope for writes. Without it, clients can only read context and save inactive drafts.
Supports create, update, configure, message, and recipe changes. Deletions, member moderation, and authority changes are withheld.
Every proposal is hashed and stored server-side. Approvals bind to the plan ID and version, preventing tampering.
Qreate checks permissions on every request. Connected AI clients cannot widen their scope, delete channels or roles, ban members, or alter Q authority levels.
Tools available to compatible clients across planning, discovery, and publishing.
The official endpoint is https://mcp.qreate.gg/mcp. It supports OAuth 2.1 with PKCE and dynamic client registration.
Qreate withholds three change kinds: remove (deletions), member (moderation actions on users), and authority (changing permissions or authority modes).
No. Planning over MCP never executes automatically. Applying a proposal requires explicit user approval bound to the stored plan ID.
No. The MCP server acts as an adapter, forwarding the user's token to Qreate's API where standard guild administration permissions are verified.
Studio access is open free until 22 October 2026 with no credit card required. A permanent free plan remains available. Paid plans will be announced separately.