SMF·BETTERMODE
Can a prompt replace Bettermode?
Community platforms — online communities and team communication
Exhibit tracking slip
Verdict
Bettermode's angle is embedding: the community appears inside your app, under your brand, with your users already signed in. The single-sign-on half is small and well-specified — a signed token from your app, verified on the community side. The forum underneath it is not small, and moderation is the part every self-built community underestimates until the first spam wave. Discourse exists and is excellent, which makes this a build-or-deploy decision rather than a build-from-nothing one.
Exhibit A — The prompt
Received on31.07.2026Build an embeddable community that authenticates members from a host application by signed token.
Authentication, which is the defining feature. The host application mints a short-lived JWT containing the user's id, display name, avatar URL and role, signed with a shared secret. The community verifies the signature, checks expiry and audience, and creates or updates the local member record. There is no password, no signup form and no session the host does not control. Log out follows the host. Document the exact claim set and rotation procedure for the secret, and reject any token older than a short window.
Embedding: serve the community in an iframe sized by a small host-side script, with correct frame-ancestors and cookie SameSite settings so it works cross-origin without opening it to any other site. Also serve it standalone at its own path for members who want a full window.
Structure: spaces, each holding topics and replies. A space carries a visibility rule expressed as a check against the token's role claim, so a space can be limited to paying customers without the community knowing anything about billing. Reactions, mentions, and per-space subscriptions.
Moderation, which is not optional: a report action on every post, a queue for reported content, per-member mute and ban, rate limits on posting for new accounts, a hold-first-post-for-review setting, and an audit log of every moderator action with the actor and reason. Ship these on day one, not as a follow-up.
Notifications: an email digest at a per-member frequency, plus immediate email on a direct mention. Every email carries an unsubscribe link that works without logging in.
Search across topics and replies. Pinned topics per space. A member directory that shows only what the token supplied.
Data: PostgreSQL, with per-member export and hard delete of a member and their content, because a community holds other people's writing and you will be asked for both.
Out of scope: native mobile apps, video or voice, direct messaging between members, gamification, and any hosted multi-tenant deployment. Note in the README that Discourse is a mature open-source alternative and that this build's justification is the embedded SSO model, not the forum itself.Opening prefills the prompt — press enter to run it.
Exhibit B — What you lose
- B.1 the native mobile apps members expect from a community
- B.2 the moderation tooling and spam defences a hosted platform maintains
- B.3 the analytics on member engagement and cohort retention
- B.4 the integrations that push activity into a CRM or a help desk
Prior art
Exhibit C — Why people still pay: network, moderation, and communication infrastructure
Because a community with nobody in it is worth nothing, and the effort a platform saves you is entirely on the running side: moderation, abuse, notifications people actually read.
Questions
Can I export a Bettermode community?
Members and posts export as CSV and JSON, which covers the content. What does not transfer is the thread of member identity — reconstructing who wrote what, and keeping their existing logins working, is the hard half, and it is why community migrations are usually announced weeks in advance.
Why signed tokens rather than a login form?
Because the whole premise is that the community is part of your product. A separate account is a signup step that kills participation, and it means two places to deactivate a user when they leave. The token model keeps your application as the only source of truth about who someone is.
What does it cost to run?
A VPS with PostgreSQL, so ten to twenty dollars a month, plus a transactional email provider for digests and mention alerts. Against a per-month platform fee this is cheaper, provided nobody's time is counted.
What is the one thing that does not survive the rebuild?
Moderation at 2am. Spam finds any open community within weeks, and a platform absorbs that with tooling and defaults refined across thousands of communities. Yours has whatever you built before the first wave arrived.
Related tools
Receipt