Docs / Platform / Marketplace plugins

Marketplace plugins

How third-party plugins are installed, sandboxed and permitted.

The Marketplace is where developers publish plugins for YourBot. Servers running a custom bot can browse, buy and install them from the dashboard. The ten built-in services are not marketplace plugins: they are part of the platform and documented service by service in these docs.

What you see before installing

Each plugin's marketplace page shows the developer, reviews, price and plans, the slash commands it registers, the changelog of its latest release and the capabilities it asks for. Capabilities are the plugin's permissions inside YourBot, such as sending messages, managing roles or reading message content.

The sandbox

Every marketplace plugin runs in its own container with no direct network access, a memory and CPU limit, and a read-only filesystem. It talks to Discord only through YourBot, which checks every call against the capabilities you granted. A plugin cannot read your bot token, another server's data or another plugin's storage.

Choosing permissions

When installing you decide:

  • Capabilities. What the plugin may do. Dangerous ones, such as banning members or managing roles, are marked and can be refused. The plugin's features that need a refused capability will not work, and the plugin is told so.
  • Proxy domains. The external websites the plugin may call, if it asks for any. All outbound requests go through YourBot's proxy.
  • Privacy mode. Whether the plugin sees message content, or only who posted in which channel.

You can change all three later from the Services page. Changes take effect on the plugin's next event.

Commands and Command Access

Marketplace plugin commands are registered per server, under your bot, and obey the same Command Access rules as built-in ones. A marketplace plugin cannot claim a command name a built-in service uses.

Updates

Developers publish new releases through review. Installed plugins update automatically to reviewed releases unless you pin a version. The changelog is on the plugin's page and in the updates feed.

Reporting a problem

Inside Discord, /pluginbugreport sends a report to the plugin's developer with the context they need. The dashboard shows the developer's response time and reliability record on each plugin page.

Writing your own

The developer docs cover the SDK, the review process and payouts. The Plugin Builder can write a first version for you from a description.

YourBot docs Reference tables are generated from the code that is running. Ask in Discord Suggest a correction