veil

Add the Veil app to Discord

Look up cards and check signed messages in any Discord server or DM.

The Veil app brings the directory into Discord. Add it to your own Discord account and it works in every server and direct message you are in, with no server admin involved. A server can also add it for all its members.

text
https://discord.com/oauth2/authorize?client_id=1565374022386983073

Open the install link and choose Add to My Apps, or Add to Server for a community. The app asks for no permissions and reads no messages on its own.

What it does#

  • On a person, Apps, then Veil card: the card that holds their Discord account, with its other verified accounts, its badges and its 12-word fingerprint. It shows what GET /v1/lookup?discord=<id> and the card return.
  • On a message, Apps, then Verify with Veil: the verdict of POST /v1/verify on the message’s signature block, at the time Discord says it was posted, and whether the account that posted it is on the signing card.
  • /veil card looks up a Discord user, a card number, an alias, a public key or a fingerprint, and with nothing given shows your own card. /veil verify checks a pasted block; left empty, it opens a form that keeps line breaks.

Answers are public, so everyone in the conversation sees whose card it is or who signed. Add private to /veil card or /veil verify for an answer only you see; not found and errors are always private. Answers are the server’s word, so each one links to the card or to the verify page, where the real check runs in your browser.

What the app sends#

To answer, the app sends the directory the Discord ID or the value you looked up, and for a check the signed message. It logs which command ran and how it ended, never who asked or what was checked. A verify link keeps the message after its #, so it reaches no server.

Terms and privacy#

The app follows Veil’s terms of use, and the privacy notice has a section on what the app receives, sends and keeps. Discord asks for both addresses when an app is verified.

text
https://veil.rip/terms
https://veil.rip/privacy
  • Verify a signed message
    Check the exact text, its signing key and that key’s state.
  • Look up a cardGET /v1/lookup
    Find the card that holds one exact account, key or fingerprint.
  • Verify a messagePOST /v1/verify
    Check a signature block or an explicit key, message and signature. This POST only reads.

Read this entry as JSON