What it means
An app added to your Discord account is listed in User Settings under Authorized Apps and can use the information and actions you consented to. A server bot is installed by the server owner or someone with Manage Server permission; it appears in server integrations and often in the member list. It can have server-specific permissions such as managing channels or roles. One brand can offer both installation paths, so the icon or name alone does not identify the scope.
A real-world example
After clicking a bot invite, a member sees an unfamiliar app in their personal Authorized Apps but no new server member. Another time an admin adds the same app to a server, where its role grants too much power. Each case requires a different review and removal path.
What to do
Inspect the exact consented permissions. Revoke an untrusted personal grant in Authorized Apps. Ask an owner or authorized admin to inspect and remove a suspicious server installation, review its role and audit changes it made.
The distinction that matters
Discord says user-installed apps cannot simply read all private DMs or server data; they receive consented account information and data from interactions. Server-installed apps operate under their server permissions and can behave differently. Revoking an app cannot claw back data already held by its developer, and removing it may break a workflow that relied on it. Save evidence of suspicious behavior, then replace the tool only after reviewing the new permissions. Password change is separately needed if credentials were entered on a phishing site.
Discord apps and authorization
