Skip to content

POST /telegram/webhook

Receive Telegram updates for:

  • /start <token> account linking
  • contact-share verification updates
  • /dev_* developer management commands

Request must include header:

X-Telegram-Bot-Api-Secret-Token: <configured-secret>

Telegram Update JSON payload.

200 OK

{ "ok": true }
  • 401 unauthorized: missing/invalid Telegram webhook secret.
  • 400 invalid_request: malformed update payload.
Terminal window
curl -X POST "$GATEWAY_BASE_URL/telegram/webhook" \
-H "X-Telegram-Bot-Api-Secret-Token: $TELEGRAM_WEBHOOK_SECRET" \
-H "Content-Type: application/json" \
-d '{"update_id":1}'
  • This endpoint is for Telegram platform traffic, not third-party app backends.
  • End-user messages are branded with API key label when context is available.