Works in the in-app browser
A link locker for your Discord community
Point a link at your invite, or at a code posted where only members can read it. Discord is the one platform where membership is technically checkable — and this page explains why Keyway still does not check it.
The Discord-specific situation
Every other platform in this category is simple: there is no API for a third party to confirm a follow, so nobody can. Discord is different, and the difference is worth being precise about.
Discord's OAuth2 scopes include guilds andguilds.members.read. An application can, with the visitor's explicit authorisation, confirm they are in a given server. So the check is possible.
Two reasons Keyway does not do it:
- The ask is wildly disproportionate. Completing an OAuth flow means granting a stranger's application read access to your Discord account — for a preset pack. Most people would decline, and the ones who accept probably should not have.
- Discord prohibits it. Their developer terms rule out using API access to gate rewards behind server membership. A tool built on it is one policy enforcement away from breaking every link that depends on it.
So the Discord step is an invite that opens, and the page tells the visitor exactly that. The full platform-by-platform picture is onthe social steps page.
What actually filters drive-by joins
The real complaint behind "can you verify they joined" is usually people joining, taking the file, and leaving within the minute. A membership check would not fix that either — it passes the instant they join.
A code posted in a members-only channel does fix it. To complete the step, someone has to be inside the server, find the channel and read the message. It is genuinely verified — checked against a salted hash on our server — and it takes a real member about two seconds.
Change the code when you post a new resource and the filter keeps working.
A setup that works
- Step one: open the invite. Label it plainly — "Join the Discord". Add the optional note if you want to invite rather than imply.
- Step two: enter the code. Post the code in a channel only members can see, with a line explaining what it unlocks.
- Point the destination at a folder, not a file. One link your community learns, rather than one per release.
- Set an expiry if the folder will move. A reposted link then stops working on its own rather than pointing somewhere dead.
- Check per-step completion after a week. If the code step is completing badly, the code is hard to find — not the visitors' fault.
Discord questions
Can a link locker check whether someone joined my server?
Technically yes, and practically no. Discord exposes guild membership through OAuth — but only if the visitor authorises your application to read their account, which is an enormous ask for a font pack. Discord's developer terms also prohibit using it to gate rewards. Keyway therefore uses an invite link that opens, and says on the page that the visitor confirmed it themselves.
Will a link locker get my server banned?
Linking to your server is completely normal. Requiring people to join in exchange for something is what the platform rules are about, and mass-invite schemes built on that get actioned. Keyway is built so the compliant version is the only version available — the step is a visit, and nothing in the interface lets you claim otherwise.
How do I stop people joining, grabbing the file and leaving?
A locker cannot stop that, because the visit step completes the moment they open the invite. What does work is a code step: post the code in a members-only channel so someone has to actually be inside to read it. That is genuinely verified, it costs a real member two seconds, and it filters exactly the behaviour you are describing.
Can I use one link for a whole resource library?
Yes — point it at a channel, a pinned message or a Drive folder rather than at a single file. That is usually better than one locker per file: you maintain one link, and your community learns one URL.
Does the unlock page work in the Discord in-app browser?
Yes. It is server-rendered HTML with almost no JavaScript, and the whole flow works even with scripts blocked — every step is a real form. That matters more here than almost anywhere: in-app browsers are the most constrained environment these links get opened in.
Set one up for your server
No account, no bot to add, no permissions to grant. About two minutes.