Skip to content

Telegram Bot API Key

Service Name: Telegram Bot Platform

Service Description: Telegram Bot API allows developers to create bots that can interact with users on the Telegram messaging platform. These bots can perform a variety of functions from simple notifications to complex interactive applications.

Service Address: https://core.telegram.org/bots/api

Validation Type: -

IP Allow list: Does not exist

Secret Access Scope: Grants full access to control a Telegram bot, including sending messages, receiving updates, and managing bot settings.

Secret Revokement URL: https://t.me/BotFather (Use the /revoke command with BotFather)

Secret Example: 1234567890:AAHHGgYtYukF7Uj3jRP-QMaJhNhGYUiMpP0

Suspicious Activity Investigation Instructions:

  • Check the bot's message history for unauthorized communications
  • Review webhook settings to ensure they haven't been changed
  • Look for unusual patterns in API usage or unexpected commands being processed
  • Check if the bot has been added to unexpected groups or channels
  • Review Telegram's bot activity logs for suspicious IP addresses or locations

Mitigation Instructions:

  • Immediately revoke the compromised token by messaging BotFather on Telegram
  • Use the /revoke command with BotFather to invalidate the current token
  • Generate a new bot token using the /token command with BotFather
  • Update all applications and services using the old token with the new one
  • Review and strengthen security practices for storing bot tokens
  • Consider implementing IP restrictions if possible through your application logic