ZenithzCloud is the premium control plane for your community — AutoMod, moderation, tickets, leveling, economy, giveaways, gradient profile cards and more — backed by a bot that actually enforces the rules you set.
Everything you need
Anti-spam, anti-duplicate, anti-raid, badword & regex filters, whitelist/exempt rules, audit-logged responses.
Warn, timeout, kick, ban, softban, purge, cases & appeals with proper hierarchy and permission checks.
Categories, panels, transcripts, notes, priority and ratings — bot enforces the actual channel permissions.
Message XP, voice XP, rewards, multipliers and leaderboards with your server’s tuning.
Wallet/bank, daily/weekly rewards, shop items and spending inventory — all server-scoped.
Timed giveaways, requirements, rerolls and reaction-role panels in buttons or selects.
Personalized messages, images, DMs and auto-roles for every new member.
Messages, members, roles, channels, voice, invites — one pane for every auditable event.
Architecture
The API sits between the dashboard and the Discord gateway. Heavy work — image rendering, transcripts, bulk operations — happens on the bot side with honest fallbacks when the gateway is unreachable.
Express + Socket.IO. CSRF, rate limiting, OAuth2 with signed sessions and per-guild Discord permission checks.
Discord.js v14 with proper intents, partials, command registry, automod enforcement and schedulers.
Next.js App Router with real, audited API calls. Every control maps to a real action, not a toggle that goes nowhere.
Prisma models for guilds, tickets, cases, economy, leveling, profiles, transcripts, giveaways and more.
Security by default
OAuth scopes are limited to identify guilds. The dashboard never asks for privileged intents. Every guild-scoped API route verifies Manage Server on the server side. Bot tokens and client secrets stay in .env.
Signed cookies backed by the database. No localStorage tokens.
All mutating API calls require a valid double-submit token.
Every guild action checks Discord permissions on the API.
Every moderation and config change is recorded with actor and IP.
FAQ
Yes. ZenithzCloud is open-source and self-hosted. You provide your own Discord application credentials via .env — nothing is sent to any third-party server.
Yes. SQLite + embedded bot runs on 1 vCPU / 1 GB RAM. For heavier workloads, run the bot and API as separate processes and switch to PostgreSQL.
No. Discord does not expose nickname gradients. ZenithzCloud renders gradient PNG profile/rank cards and applies gradient role colors where supported by the server.
The dashboard still works for configuration, cases, logs and queries. Live Discord actions return a clear 503 until the gateway reconnects.