telegram-miniapps
Installation
SKILL.md
Telegram Mini Apps — one signed blob is the whole model
A Mini App is a web page in a WebView with a query string attached. That query string is the only proof of who the user is, and it is signed with your bot token. Verify it on your server and you have authentication as strong as the bot itself; trust the parsed object the SDK hands you and you have none.
Read against core.telegram.org/bots/webapps on 2026-08-25, Bot API 10.3.
Deep material, loaded on demand:
| Read | When |
|---|---|
references/initdata-verification.md |
implementing or reviewing verification — both algorithms, in three languages, with the failure cases |
references/app-to-bot.md |
returning a result to the bot, inline queries, and paying inside the app |
references/viewport-and-platform.md |
the app looks wrong on a real phone — viewport, safe areas, fullscreen, themes |