Check a token
What happens to the token
- It is sent once, over HTTPS, to
/api/token-checkon this site. - Telegram: the Worker calls
getMeandgetWebhookInfo. Discord:GET /users/@meandGET /applications/@me. All read-only. - It is not stored, logged or sent anywhere else, and this page does not save it in your browser.
- For a production token, prefer checking from your own server. If you think a token was exposed, rotate it.
Related: token and secret helper, securing bot tokens.