How Telegram Managed Bots Work: Zero-Code AI Deployment, Automated Webhooks & Cloud Hosting
You can have a bot without running a server. Hosted services will take the token a bot is created with, host the logic, and give you a screen to build the conversation on — which puts a working bot within reach of somebody who does not write code.
What you are choosing when you do that is not a technology. It is who holds the token and who sees the messages.
What you will be able to do
- check_circle Tell the three ways of having a bot apart.
- check_circle Say what a token grants to whoever holds it.
- check_circle Judge a hosted service before handing it one.
- check_circle Get out again if you need to.
The bot is still yours — what changes is where the thing answering the messages lives.
key The token is the bot
Every bot is created through Telegram's own bot-making bot, and what comes out is a token: a long string that is not a password to an account but something closer to the account itself. Whoever holds it can read whatever the bot receives and send whatever they like as the bot.
That single fact is the whole of this page. Handing a hosted service your token is handing it the ability to be your bot, for as long as the token exists. It is a reasonable thing to do — it is how every hosted service works — and it is worth doing consciously rather than by pasting it into the first free tool you find.
The good news is that the decision is reversible. A token can be regenerated, which instantly stops the old one working and disconnects anybody using it. If a service turns out to be wrong, or is abandoned, or you simply want out, that is the exit — and it is worth knowing the exit exists before you need it.
Three ways to have a bot in your group
Increasing effort, decreasing exposure — pick the point that matches what the bot handles.
| What it suits | Who sees the messages | What it costs | |
|---|---|---|---|
| Somebody else's bot | Ordinary jobs other groups already have — welcoming, filtering, reminders. No token, no setup. | Whoever runs it, for whatever the bot is allowed to receive. | You control nothing. It can change, break, start charging, or quietly stop being maintained. |
| A hosted builder | Your own bot, your own wording, without writing or running code — the practical middle for most people. | The service, since it holds the token and processes everything the bot receives. | A dependency on a company. If it disappears, your bot stops — and the flow you built usually cannot be taken elsewhere. |
| Your own code, your own server | Anything handling money, personal data, or a job nothing off the shelf does. | Only you. | Real work: hosting, updates, breakages at inconvenient times, and being the person who fixes them. |
Ask what the bot will handle. The more sensitive the messages, the fewer parties should hold the token.
fact_check Judging a hosted service
Most of the important questions are not technical. Who runs it, where they are, whether anybody is paying them — a free service with no visible business is a service that will either start charging or stop existing, and either way your bot is the thing that changes.
Then two practical ones. Can you export what you build, or at least see it clearly enough to rebuild it elsewhere? And does it work if you close the browser — that is, is it actually hosted, or is it a builder that only runs while you are looking at it?
Finally, the thing worth testing rather than reading: send it something wrong. A bot that handles the unexpected message by saying nothing is a bot whose users will assume the group is broken, and you will not find that out from a features page.
shield What the bot can reach is a separate decision
Hosting determines who processes the messages the bot gets. What messages it gets at all is decided elsewhere — by whether you make it an administrator, and by the permissions you grant if you do.
Those two decisions compound, and people make the second one carelessly after being careful about the first. A bot from a service you researched, granted the ability to add administrators, is a worse arrangement than a bot from a service you did not research with no powers at all.
settings Setting one up
- Create the bot through Telegram's own bot maker That is where the token comes from.
- Decide who needs to hold it Token equals bot.
- Check who is behind a hosted service And whether anyone pays them.
- Give it the fewest permissions that work Hosting and powers are separate.
- Test it with a wrong message Silence is the common failure.
- Know how to regenerate the token That is the exit.
This page decides where a bot runs. The curriculum step is how one comes into existence: creating it, what the token is, how commands are registered, and what a bot is permitted to do before you change anything.
Hosted bots at a glance
Why the token is the bot, the three ways of having one compared, what to ask a hosted service, why permissions are a separate decision, and where the exit is, on one page. Tap to open it at full resolution.