Unverified50% confidenceFactExact time
A Telegram Bot's API Key is equivalent to a VPS password; if leaked, an attacker can directly control the bot via APIs such as sendMessage.
1
Sources
50%
Confidence
Long-term
Relevance
10/9/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedA Telegram Bot Token is created and obtained by conversing with @BotFather.68% similarUnverified该项目内置 Telegram Bot，可通过 Telegram 接收新邮件通知并查看内容66% similarUnverifiedBy default, any person with a Telegram Bot link can initiate a conversation, so a whitelist mechanism to restrict the range of accessible users should be configured as a priority.64% similarUnverifiedThe tool intercepts requests before they are sent to Cursor's servers and rewrites the Authorization identity information in the request header with the current account's token63% similarUnverifiedDuring the system assistant proxy-sending process, WeChat displays a prompt saying 'executing the system assistant's request' and pops up a confirmation dialog as a safety valve.62% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/991153API
curl https://kongchang.com/api/v1/knowledge/claims/991153MCP
get_claim(id=991153)