CHATBOTS
Discord WAF False-Positive Triage from Ray ID
When a user posts a Cloudflare ray ID in a Discord support channel, the bot looks up the blocked request's WAF event, classifies whether it looks like a genuine false positive.
How it runs
The automated pipeline, trigger to output.
- TriggerNew message in Discord support channelDiscord
- LogicExtract ray ID; skip if none present
- ActionFetch firewall event for ray ID from CloudflareCloudflare
- LogicClassify event as false-positive vs maliciousOpenAI
- OutputReply in Discord thread with verdict and ruleDiscord
What it does
Turns a raw Cloudflare ray ID dropped in your Discord support channel into an instant, evidence-backed triage reply. The bot fetches the matching firewall event, shows which WAF rule fired, and tells the reporter whether their request looks like a legitimate block or a probable false positive.
When to use it
Run this when customers or internal users keep pasting "I got blocked, ray ID 8a1b..." into Discord and your on-call has to manually dig through the Cloudflare dashboard every time. It collapses that lookup into a single automatic reply.
How it works
- 1A message in the designated Discord support channel triggers the flow.
- 2A filter extracts a Cloudflare ray ID pattern from the message text; messages without one are ignored.
- 3The bot queries Cloudflare's firewall events API for that ray ID to retrieve the action, matched rule, source IP, and URI.
- 4A classifier scores the event as likely-false-positive or likely-malicious using the rule category and request shape.
- 5The bot posts a threaded reply summarizing the verdict, the rule that fired, and recommended next step.
Set it up
What you configure once, before turning it on.
- 1Connect DiscordCommunity channels + voice + bots.
- 2Connect CloudflareWorkers, Pages, R2, KV — the edge stack.
- 3Connect OpenAIModels, embeddings, files.
- 4Set each agent's modelWe leave models unset so you pick the tier — fast + cheap, or top-quality.
- 5Tune it to your dataEdit the prompts, filters, and field mappings so it matches how your team works.
- 6Test, then turn it onRun once against a sample, confirm the output, then enable the trigger.
More Chatbots workflows
Agentic WAF Investigator with Discord Approval Gate
An autonomous agent investigates a Discord-reported WAF block end to end: pulls Cloudflare logs, correlates with PagerDuty incidents, decides if an allowlist is safe.
Discord Onboarding Completion to CRM Sync
The moment a member finishes Discord onboarding, captures their submitted profile answers, creates or updates a contact in HubSpot.
Draft WAF Allowlist Proposal to Linear from Discord Report
Lets a support engineer confirm a Discord WAF report is a false positive, then auto-drafts a scoped Cloudflare allowlist rule proposal and files it as a Linear ticket…
Discord FAQ Free-Text Answer Grader
When a member submits a free-text answer in their onboarding thread, an agent grades it against the canonical FAQ knowledge base, replies with targeted feedback.
Discord FAQ-Gated Role Concierge
Greets each new Discord member in a private onboarding thread, walks them through required FAQ steps one at a time.
Slack /rollback Concierge with Approval Gate and Audit Trail
An operator types /rollback <project> in Slack; the bot pins the current Vercel deployment, requests a peer approval.
Run it inside a business
This workflow drops into a full company template. Import the org, and this is one of the playbooks its agents run.
Run this workflow in your colony.
14-day trial. No DevOps. No Sales call. Provisioned in under a minute.