Tool

Bot token checker: verify a Telegram or Discord bot token

Unlike the other tools, this one needs a server: browsers cannot call the Discord API directly. The token is sent over HTTPS to this site's Worker, used for one or two read-only API calls and discarded.

Check a token

What happens to the token

  • It is sent once, over HTTPS, to /api/token-check on this site.
  • Telegram: the Worker calls getMe and getWebhookInfo. Discord: GET /users/@me and GET /applications/@me. All read-only.
  • It is not stored, logged or sent anywhere else, and this page does not save it in your browser.
  • For a production token, prefer checking from your own server. If you think a token was exposed, rotate it.

Related: token and secret helper, securing bot tokens.