Telegram
MESSAGING · MESSAGING
Conversations read and replied to from the Telegram account they pair.
Connecting Telegram in practice
Telegram’s bot limits live in the FAQ rather than the API reference, and they are per-scope rather than global: roughly one message per second in a single chat, no more than 20 per minute in a group, and about 30 per second for bulk broadcasts. The download ceiling is also tighter than the upload one — getFile only works for files up to 20 MB, while a bot can send files up to 50 MB.
Scopes that draw scrutiny
Bot tokenThe only credential, of the form 123456:ABC-DEF1234ghIkl-zyx57W2v1u123ew11, issued by @BotFather. There are no scopes; what the bot can see in a group depends on privacy mode, and getMe is the only place that reports whether it is disabled.
Rate limits
- In a single chat, "avoid sending more than one message per second". Short bursts are tolerated, "but eventually you’ll begin receiving 429 errors".
- In a group, bots "are not be able to send more than 20 messages per minute".
- For bulk notifications, bots are "not able to broadcast more than about 30 messages per second" unless paid broadcasts are enabled.
- Paid broadcasts raise the ceiling to 1,000 messages per second at 0.1 Stars per message above the free 30 per second, and require at least 100,000 Stars on the bot’s balance and at least 100,000 monthly active users.
- getUpdates `limit` accepts 1–100 and defaults to 100; a webhook’s `max_connections` accepts 1–100 and defaults to 40.
Worth knowing
- getUpdates and webhooks are mutually exclusive: "You will not be able to receive updates using getUpdates for as long as an outgoing webhook is set up."
- Webhooks are only accepted on ports 443, 80, 88 and 8443, which rules out most default application ports.
- getFile "will only work with files of up to 20 MB in size", so a bot can send a 50 MB file it cannot then fetch back through the same API.
- Running a self-hosted Local Bot API Server changes the physics: downloads lose their size limit entirely and uploads rise to 2000 MB, so behaviour differs between the cloud API and a local server.
Checked against Telegram Bot API (2026-09-29), Telegram bots FAQ (2026-09-29)
What an agent can do
Each action is granted on its own. An agent allowed to read is not thereby allowed to write, and the scope beside each row is what the acting user must have connected for it to run at all.
Often connected alongside
Put Telegram behind one governed endpoint.
Same permissions, same audit trail, whatever else you connect next.