Website Review
What is Discord Userdoccers?
Discord Userdoccers is an unofficial, community-written reference for the user side of Discord's API — the parts the official client and developer portal use, rather than the bot-facing endpoints covered by Discord's own docs. It documents how non-bot accounts work with Discord, mainly through user and bearer authentication tokens, and it also includes resource pages such as billing, payments, subscriptions and premium referrals.
Its practical value is for developers who want to understand or build against client-style behavior: inspecting how the official app talks to Discord, prototyping features that mirror normal user actions, or filling gaps the official documentation doesn't address. The trade-off is reliability. The project states that much of its content comes from reverse engineering and educated guesses, so details can be inaccurate or change without notice, and it is not affiliated with or endorsed by Discord. It also warns that automating user accounts violates the platform Terms of Service, so unsafe use risks a ban. For anything bot-related — interactions, slash commands, endpoints with stability guarantees — Discord's official documentation is the better choice.
A sensible next step: if your project depends on user-token behavior, treat Userdoccers as a research aid and verify critical assumptions against observed client traffic before shipping. If you're building a bot, start with the official docs instead.
Is using the Discord user API against the Terms of Service and can it get my account banned?
Yes — self-botting (automating a normal user account) violates Discord's Terms of Service, and the site itself warns that "doing so unsafely might get you banned." The documentation is explicitly unofficial and community-driven, so treat it as reference material, not a safe harbor.
What the site actually says and does
According to the page, Discord Userdoccers is not affiliated with or endorsed by Discord. It documents the user side of the API as used by the official client, with user and bearer tokens, and it admits much of the content comes from reverse engineering and educated guesses — meaning inaccuracies are possible. It also states plainly that automating user accounts is against the platform Terms of Service.
How to think about the risk
- Bots are the sanctioned path. If you want a
!userinfocommand or similar, the official bot API exists for that. The site itself points people seeking stability and official support toward Discord's own documentation. - User-token automation is the risky path. The account doing the automation is the one at risk. Ban risk is not a fixed number; it depends on behavior, detection and enforcement at the time.
- "Unsafe" is doing a lot of work in that warning. Aggressive request rates, unusual patterns or obvious automation are the kinds of things that draw attention. But even careful use is still a Terms of Service violation, not a loophole.
A concrete scenario
Say you want to build a tool that reads your own direct messages or reacts to messages as you. That requires a user token. The honest assessment: you are accepting a real chance of losing the account, and the documentation you are relying on may be wrong about endpoints anyway. If the goal can be met with a bot, rewrite it as a bot.
Decision criterion
Ask one question: can this be built as a bot or an OAuth2 integration? If yes, do that and skip the risk entirely. If no, understand you are choosing a ToS violation with account-loss exposure, and keep any experimentation on an account you can afford to lose.
How does this unofficial user API documentation differ from Discord's official bot API documentation?
It documents the user side of Discord's API — the endpoints the official client uses with user and bearer tokens — rather than the bot-facing API. Its own scope section says it covers "the API as it is used by non-bot users," and that bot endpoints may appear but how bots interact with the API is not the focus. It also states plainly that it is not affiliated with or endorsed by Discord.
The practical differences:
| This documentation (docs.discord.food) | Discord's official docs | |
|---|---|---|
| Primary audience | Developers working with user accounts and client behaviour | Bot developers and OAuth2 integration builders |
| Authentication focus | User and bearer tokens | Bot tokens, application-owned auth |
| Stability expectation | Reverse-engineered, may contain inaccuracies | Documented, versioned and officially supported |
| Support channel | Community contributions via GitHub | Official issue tracker |
| Terms of Service | Automating user accounts is against the platform ToS | Bot use is the sanctioned path |
The biggest trade-off is risk, not features. The page warns that automating user accounts violates the platform Terms of Service and that doing so unsafely might get you banned. It also admits much of the content comes from reverse engineering and educated guesses, so endpoints can be wrong or change without notice. Official bot documentation doesn't carry either problem.
Choose based on what you're building. If you're shipping a bot or an OAuth2 integration, use Discord's official documentation — the page itself points you there when you want interactions and "a semblance of a guarantee that your API endpoint won't break." Use this site when you specifically need to understand how the official client behaves, for example to build a client-side tool for your own account, to research a feature before it's officially documented, or to interpret traffic you're already seeing. Treat every endpoint here as a hypothesis to verify against live behaviour, not a contract.
A concrete scenario: you're building a small personal tool that reads your own message history and want to know which fields the client sends. This documentation is the right starting point; a bot token and the official gateway would be the safer route if the tool later needs to serve other people.
If you do rely on it, keep the blast radius small: test with a throwaway account, avoid patterns that look like bulk automation, and check the changelog and GitHub issues before assuming a documented shape still holds. If you hit something that looks like a bug in a bot-accessible part of the API, the page directs you to the official documentation issue tracker instead.
What authentication methods like user tokens or bearer tokens are used for accessing the Discord user API?
The Discord user API described here is accessed with user and bearer authentication tokens — the credentials the official Discord client itself uses on behalf of a logged-in person. That is the dividing line: this documentation covers the non-bot side of the API, where requests are made as a user rather than as an application.
H3 What the two terms mean in practice
- User token: identifies a specific human account. Requests carry that account's identity, permissions and rate limits, so anything you do appears as that person.
- Bearer token: the general authorization scheme for presenting a token in a request header. In this context it typically wraps a user or OAuth2-derived token rather than a bot token.
- Bot tokens: deliberately out of scope. Bot endpoints may appear in the reference, but how bots authenticate and behave is not the subject here.
H3 The trade-off you are actually accepting
| User/bearer token access | Bot token access | |
|---|---|---|
| Identity | Acts as a real account | Acts as an application |
| Stability | Reverse-engineered, can change without notice | Officially supported, versioned |
| Risk | Automating user accounts violates the platform Terms of Service and can get the account banned | Intended for automation |
| Documentation | Community-maintained, partly inferred | Official |
The practical consequence: if you want a reasonable guarantee that an endpoint will not break, and you want to stay within the rules, this is the wrong toolkit. If you are studying how the official client works, or building something for your own account and accept the risk, it is the only place that documents it.
A concrete scenario: someone building a personal !userinfo-style command or an OAuth2 integration that reads their own profile data might reach for these pages, because the behaviour they need is the client's, not a bot's. The same person shipping that as a public service for strangers should switch to bot authentication and Discord's official documentation instead.
Next step: decide which identity your project must act as. If the answer is "an application," start at Discord's official developer documentation. If it is "me, as a user," read the scope and bugs sections here first, then check the reference for the specific resource you need — billing, payments, subscriptions and premium referrals are among the documented areas. Corrections and improvements go through the project's GitHub repository.
How can I contribute corrections or improvements to this community-driven Discord API documentation?
The site points contributors to its GitHub repository and a CONTRIBUTING.md file, which is the standard route for a community documentation project: open an issue or submit a pull request with your correction. Corrections are explicitly welcomed, and the project states that its success depends on community contributions.
How to contribute in practice
- Find the page that contains the error on Discord Userdoccers.
- Check whether the project links that page to a source file on GitHub — most docs sites of this kind map one page to one Markdown file.
- Open an issue describing the inaccuracy, or fork the repo, edit the Markdown, and open a pull request.
- Include evidence: a captured request/response, a client version, or a reproducible sequence. Reverse-engineered docs are hard to verify, so reviewers weigh evidence heavily.
What makes a correction likely to be accepted
| Weak submission | Strong submission |
|---|---|
| "This endpoint returns the wrong field." | "As of client build X, field a is now b; here is the response body." |
| Rewriting a whole page in a PR | A focused diff that changes only the inaccurate lines |
| Reporting a bot API bug here | Reporting bot API bugs to the official Discord documentation issue tracker, as the site itself directs |
One important boundary
The site documents the user side of the API, used with user and bearer tokens, and it notes that automating user accounts violates the platform Terms of Service, with a ban risk. So treat contributions as documentation work, not as an invitation to run automation against your own account. If your interest is bots and interactions instead, the site itself points you to Discord's official documentation, which carries a stronger stability guarantee.
Next step: open the repo's CONTRIBUTING.md first and follow its formatting and commit conventions — matching the existing style is usually the fastest way to get a PR merged.
What are the main risks and inaccuracies when relying on reverse-engineered Discord API information?
Relying on reverse-engineered Discord API information means accepting two separate risks: the technical risk that the documented behavior is wrong or changes without notice, and the account risk that using it violates the platform's rules. Discord Userdoccers states both plainly: it is not an official source, much of its content comes from reverse engineering and educated guesses, and automating user accounts is against Discord's Terms of Service, so doing it unsafely "might get you banned."
The two risks are different in kind
- Accuracy risk. The docs themselves warn that inaccuracies may be present because they are built from observation and inference rather than a published contract. Endpoints, fields, and behaviors can be undocumented, partially documented, or described from a pattern that holds in most cases but not all.
- Enforcement risk. Even perfectly accurate information does not make user-account automation permitted. The documentation is describing how the official client and developer portal use the user side of the API, not granting permission to imitate it.
- Stability risk. Discord's official documentation is where bot endpoints get something closer to a guarantee that an endpoint won't break. The user-facing side documented here carries no such promise, so a working integration can stop working after a client update.
- Support risk. Because the project is unaffiliated with Discord, there is no official channel to escalate a broken assumption. Bugs in bot-accessible parts belong in Discord's own issue tracker, not this project's.
What this means in practice
If you are building a bot, an interaction handler, or anything you need to keep running for other people, the trade-off points clearly toward the official documentation: you accept slower-moving, narrower coverage in exchange for stability and legitimacy. If you are researching how the client works, building personal tooling, or writing about the platform, the user-side documentation is genuinely useful precisely because the official docs do not cover it — but treat every entry as a hypothesis to verify against live behavior, not a specification.
A reasonable decision rule: use reverse-engineered references for exploration and understanding, and official references for anything you intend to depend on. If you do rely on the community docs, keep the blast radius small — isolate the code that talks to undocumented endpoints, log responses so you notice drift early, and assume any undocumented field can vanish. Never put a user account you care about behind automation you cannot afford to lose.
A concrete next step
Before writing code, check whether the endpoint you need is actually covered by Discord's official documentation. If it is, use that and stop. If it is not, decide explicitly whether the task is worth the enforcement risk, and if so, contribute corrections back to the project — its accuracy depends on community input, and your verified observations are exactly what reduces the inaccuracy problem for the next person.
User reviews (0)