Gait

Gait detects bot and automated accounts on Discord by behavior — never by message content.

Most anti-bot tools rely on keyword filters or CAPTCHA gates. Gait takes a different approach: it scores every member 0.00–1.00 based on how they act, then alerts your mod channel when a score crosses your threshold. Message text is never read or stored.

How it works

Each account gets a trust score from five behavioral dimensions:

• Temporal (30%) — burst regularity, reply-latency consistency, typing-ratio variance. Bots run on clocks; humans don't.
• Content (22%) — message-length variance and edit rate. Length only — the text itself is discarded after measurement.
• Reaction (18%) — reaction-timing consistency and emoji variety. Scripted accounts react on schedules with narrow emoji sets.
• Lifecycle (18%) — account age at join, username entropy, avatar presence.
• Social (12%) — presence rhythm: online/idle/offline cadence and client-type patterns.

A minimum of 25 data points is required before any account is scored, so brand-new members aren't auto-flagged — and accounts with too little behavioral evidence are never classified as bots.

What gets sent off your server

• Anonymized user IDs (HMAC-SHA-256, two-stage salted — irreversible)
• Event type (message_create, guild_join, etc.), message length, edit flag
• Account age, avatar presence, username entropy

What never leaves your server

• Message content
• Raw Discord user IDs
• DMs, voice audio, usernames, emails, IPs

Setup (2 steps, ~5 min)

1. Click Add to Discord and authorize Gait for your server.
2. Run /gait setchannel #your-mod-channel — Gait posts a test alert to confirm.

That's it. No dashboard, no API keys, no account.

Slash commands

• /gait setchannel — set the alert channel
• /gait settings threshold:0.35 — adjust the alert threshold (default 0.45)
• /gait mode auto — auto-kick confirmed bots instead of alerting only
• /gait status @user — check the current trust score for any member
• /gait whitelist @user — permanently mark an account as human
• /gait suspects — list the top suspect accounts
• /gait my-data — let a member request their own data (GDPR)
• /gait forget-me — let a member request deletion (GDPR)

Permissions Gait asks for

• Server Members (privileged) — to receive join/leave events for account-age and join-velocity signals
• Message Content (privileged) — to measure message length only; text is discarded after measurement
• Presence (privileged) — to observe online→idle→offline transitions for clockwork-presence detection
• Send Messages + Embed Links — to post alerts in your configured channel
• View Channels — to observe events in channels visible to the bot's role

Feedback loop

Every alert ships with one-tap Confirm bot / False positive / Restrict / Whitelist buttons. Admin clicks become training labels — Gait gets sharper with use, across every server running it.

---

Privacy policy: https://usegait.dev/privacy
Terms of service: https://usegait.dev/terms
Website: https://usegait.dev