@everyone and @here mentions. When triggered, the message is deleted immediately — and on servers with Malicious Link Detection enabled, the sender is also timed out for moderator review.
Free for all servers. Uses Discord’s built-in mention detection — no false positives from messages that simply contain the text “@everyone”.
How It Works
- A member sends a message containing
@everyoneor@herethat actually triggers a mass notification - Hashbot checks if the member is on the allowlist or has a manager role
- If they are not exempt:
- The message is deleted immediately
- If Malicious Link Detection is enabled (a Subscriber feature), the user is also timed out and the action is logged to your log channel
Hashbot uses Discord’s
mention_everyone flag on the message object — not string matching. This means messages like “don’t use @everyone” will NOT trigger the protection, because they don’t actually ping anyone.Who Is Exempt
These members can use@everyone and @here without being blocked:
- Server owner and users with Administrator permission
- Hashbot Managers (users with configured manager roles)
- Members on the Allowlist (users or roles)
- Bots
Enabling Anti-Everyone Protection
From the Dashboard
1
Open the Dashboard
Go to dashboard.hashbot.com and select your server.
2
Navigate to Settings
Click Settings in the sidebar under Hashbot.
3
Enable the toggle
Toggle on Anti-Everyone Protection.
From Discord
Commands
Frequently Asked Questions
Does this work if my server already has @everyone permissions disabled?
Does this work if my server already has @everyone permissions disabled?
If you’ve already disabled the
Mention @everyone, @here, and All Roles permission for regular members, those members can’t trigger mass mentions anyway — so this feature would have nothing to catch. It’s most useful as a safety net in case channel permissions are misconfigured, or for servers that intentionally allow the permission for certain roles.How long is the timeout?
How long is the timeout?
Timeouts apply on servers with Malicious Link Detection enabled (a Subscriber feature) and use the same duration configured there (default: 7 days). You can adjust it with
/settings malicious-link set-timeout. This gives moderators time to review the incident and decide on further action. On servers without Malicious Link Detection, the message is deleted but no timeout is applied.What if a legitimate moderator gets timed out?
What if a legitimate moderator gets timed out?
Make sure all moderators are either added to the Allowlist or have a Hashbot Manager role configured. Members with manager roles are exempt from anti-everyone protection.