Developer infrastructure

Telegram auth,
two API calls.

TeleAuth turns your Telegram bot into a full authentication backend — send a code, verify it, get a signed webhook. No OTP forwarding, no scraping, only official Telegram mechanisms.

Start building free Read the docs

API calls to sign a user in: 2
Default OTP lifetime: 300s
Signed webhook delivery: HMAC

POST /v1/otp/send

curl -X POST https://teleauth.run.place/api/public/v1/otp/send \
  -H "x-api-key: $TELEAUTH_API_KEY" \
  -H "content-type: application/json" \
  -d '{ "username": "@ada_lovelace" }'

200 — verified

{
  "ok": true,
  "verified": true,
  "recipient": { "type": "username", "value": "@ada_lovelace" },
  "chat_id": 815273901,
  "expires_in": 300
}

Platform

Everything the platform includes

A complete toolkit for shipping Telegram authentication in production — not a demo.

Telegram authentication

OTP over Telegram

Six-digit codes delivered by your own bot to any Telegram username. No phone number required.

Scoped API keys

Per-project, per-environment keys, hashed at rest, revocable in one click.

Signed webhooks

HMAC-signed event delivery with full delivery history and retries.

Authentication logs

Every send, verify and failure recorded with status and timestamp.

Usage analytics

Track request volume and outcomes per project over time.

Project management

Keep development and production configuration cleanly separated.

Live playground

Fire real requests from the dashboard before you write a line of code.

How it works

Three steps to your first verified user

01
Create a project
One project per app and environment, each with its own credentials.
02
Connect your bot
Paste your BotFather token. We validate it and register the webhook for you.
03
Send & verify
Call send, then verify. Your user is authenticated inside Telegram.

Safety

Built on official Telegram mechanisms

TeleAuth never asks for a user's Telegram login code and never signs in on anyone's behalf. Your bot sends the message; we verify the signature.

Bot tokens stored server-side only, never exposed to browser code

API secrets hashed at rest and shown exactly once

Codes hashed, expiring in 5 minutes with a 5-attempt limit

Every event written to an auditable authentication log

Ship Telegram login this afternoon.

Create a project, connect your bot, and send your first code from the playground.

Get started See pricing

Telegram auth,two API calls.