FAQ
Detection, privacy, premium, setup
If it's not here, ask in Discord.
It watches timing, not content. Real users don't type in two channels within 150ms or hop across five channels in a second – accounts that do get flagged for review, not instantly banned.
Detections below the first-strike threshold are logged silently. Review cards show the full reasoning trail so you can see why a user was flagged. Log or hybrid mode removes the chance of accidental punishment.
A canary is a hidden honeypot channel. If any account posts in it, Wiretrip records an instant detection with the base canary score plus the canary bonus. Legitimate members never touch a hidden, boring channel, so a hit is high signal.
Dismiss the incident from the dashboard and clear the user's strikes. If the user shouldn't be flagged at all, add them to an exempt role or the exempt list. Start in log mode until you trust the output.
No. Wiretrip never reads message content. It watches the timing and placement of typing and message events, and never requests the message-content intent.
No. Evidence is metadata only: which channels were hit, timing deltas, score breakdowns, and signals. No message text is stored.
Free covers core protection. Pro ($1.99/month) adds 365-day detection history, 90-day incident retention, CSV export, and priority support. Max ($3.99/month) adds unlimited retention, multi-server management, and early access.
Free: 30 days of detections, 7 days of incidents. Pro: 365 days of detections, 90 days of incidents. Max: unlimited. Pruning runs automatically every day.
Purchases go through Discord's built-in checkout and apply to the server immediately. Cancelling stops renewal at the end of the paid period.
The tier drops back to Free and the shorter retention window applies. Data older than the Free window is pruned on the next daily run. CSV exports stay yours.
Yes, unless they're exempt. Add your moderation team to an exempt role in setup. Detections on exempt members are logged but never enforced.
Yes. One installation protects every server it's invited to. Each server keeps its own configuration and incident history.
Join the support server. Pro and Max plans get priority support.
Glossary
Terms used throughout the dashboard and docs.
- Ghost typing
- A message sent without a preceding TYPING_START event. Often a sign of automation.
- Canary channel
- A hidden channel used as a tripwire. Real users don't know it exists – bots that touch it get flagged immediately.
- Correlation limit
- The timing window Wiretrip uses to group events into a single incident. Default: 150ms.
- Strike
- A recorded detection event against a user. Actions trigger once a threshold is crossed.
- Incident
- A grouped cluster of strike events for one user, with a score, timeline, and moderator review.