What Hunny does

Hunny catches compromised, token-stolen accounts before they finish spamming your server. You designate one trap channel (the honeypot) with a pinned warning notice. Real members read the warning and stay out. Hijacked accounts blasting every channel hit the trap first, and the moment they post there they are banned and their messages from the last 7 days are purged from every channel in one stroke.

Setup in three steps

1. Run /setup and pick the trap channel. Optionally add a log channel to get activation and ban notices where your staff can see them.
2. The bot replies privately with a live permission checklist and re-checks for you while you fix anything missing.
3. Pin an existing warning message in the trap channel, or post a new one and the bot pins it. The honeypot is now active.

Who never gets banned

• The server owner and anyone with the Administrator permission
• Bots
• The pinned warning notice itself

If a target outranks the bot's role, the ban is skipped and logged instead of failing silently.

What it doesn't do

No message content stored, no analytics, no web dashboard, no extra commands, no inbound network connections. It requests only the six permissions it actually uses.

Transparency

The bot is open source, and the hosted instance runs exactly the published code:

• Source: https://github.com/hardtokidnap/HUNNY
• Terms of Service: https://github.com/hardtokidnap/HUNNY/blob/main/documentation/TERMS%20OF%20SERVICE.txt
• Privacy Policy: https://github.com/hardtokidnap/HUNNY/blob/main/documentation/PRIVACY%20POLICY.txt

Prefer to run it yourself? The repo has step-by-step self-hosting guides for Docker, Raspberry Pi/systemd, Heroku, and plain Node.