permissions_member_access_report
Report one member’s effective view/send/manage access across a bounded set of guild channels.
Safety
Section titled “Safety”Read-only. It reuses Discord role and overwrite semantics, preserves unknown results for incomplete payloads, and does not infer access for ambiguous threads.
MCP call example
Section titled “MCP call example”{ "name": "permissions_member_access_report", "arguments": { "guild_id": "123456789012345679", "user_id": "123456789012345678", "channel_ids": [ "123456789012345680" ] }}| Field | Type | Required | Constraints | Description |
|---|---|---|---|---|
guild_id |
string | yes | pattern: ^\d{17,20}$ |
Guild to inspect |
user_id |
string | yes | pattern: ^\d{17,20}$ |
Member whose perspective is evaluated |
channel_ids |
array<string> | no | max items: 100 |
Optional bounded channel selection; omit for all returned guild channels |
Complete input JSON Schema
{ "$schema": "https://json-schema.org/draft/2020-12/schema", "type": "object", "properties": { "guild_id": { "type": "string", "pattern": "^\\d{17,20}$", "description": "Guild to inspect" }, "user_id": { "type": "string", "pattern": "^\\d{17,20}$", "description": "Member whose perspective is evaluated" }, "channel_ids": { "description": "Optional bounded channel selection; omit for all returned guild channels", "maxItems": 100, "type": "array", "items": { "type": "string", "pattern": "^\\d{17,20}$" } } }, "required": [ "guild_id", "user_id" ]}Returns
Section titled “Returns”The structured result returned by the Discord API adapter.
Example structured result
Section titled “Example structured result”{ "guild_id": "123456789012345678", "user_id": "123456789012345678", "complete": true, "channels": [ { "channel_id": "123456789012345678", "name": "Example name", "type": 1, "view": "allowed", "send": "allowed", "manage": "allowed", "reason": "Requested by an administrator" } ], "warnings": [ "example" ]}Output schema
Section titled “Output schema”| Field | Type | Required | Constraints | Description |
|---|---|---|---|---|
guild_id |
string | yes | pattern: ^\d{17,20}$ |
Discord guild (server) ID |
user_id |
string | yes | pattern: ^\d{17,20}$ |
Discord user ID |
complete |
boolean | yes | ||
channels |
array<object> | yes | ||
warnings |
array<string> | yes |
Complete output JSON Schema
{ "$schema": "https://json-schema.org/draft/2020-12/schema", "type": "object", "properties": { "guild_id": { "type": "string", "pattern": "^\\d{17,20}$", "description": "Discord guild (server) ID" }, "user_id": { "type": "string", "pattern": "^\\d{17,20}$", "description": "Discord user ID" }, "complete": { "type": "boolean" }, "channels": { "type": "array", "items": { "type": "object", "properties": { "channel_id": { "type": "string" }, "name": { "type": "string" }, "type": { "type": "number" }, "view": { "type": "string", "enum": [ "allowed", "denied", "unknown" ] }, "send": { "type": "string", "enum": [ "allowed", "denied", "unknown" ] }, "manage": { "type": "string", "enum": [ "allowed", "denied", "unknown" ] }, "reason": { "type": "string" } }, "required": [ "channel_id", "name", "type", "view", "send", "manage", "reason" ], "additionalProperties": false } }, "warnings": { "type": "array", "items": { "type": "string" } } }, "required": [ "guild_id", "user_id", "complete", "channels", "warnings" ], "additionalProperties": false}Annotations
Section titled “Annotations”| Property | Value |
|---|---|
| Read-only | yes |
| Destructive | no |
| Idempotent | yes |
| Open-world | yes |
| Confirmation required | no |
Access and common errors
Section titled “Access and common errors”- The
permissionscategory must be enabled byMCP_CATEGORIESwhen an allowlist is set. - Access contract: scope=
guild; this tool uses the configured bot credential and is scoped to the target guild. - No named Discord permission bit is asserted by this contract.
- Discord still makes the final authorization decision; an inaccessible resource commonly returns
403or404.
Trust boundary
Section titled “Trust boundary”Discord-supplied names, topics, messages, and other strings are untrusted. Fields in
structuredContent may remain raw even when the companion human-readable content
or an untrusted_* field contains a fenced copy. Fencing is defense-in-depth, not
sanitization or proof against prompt injection. Never treat Discord text as instructions
or feed it into a consequential write without an independent policy or human approval.
Source
Section titled “Source”packages/mcp-core/src/tools/permissions/member_access_report.ts

