---
title: "Telegram Update"
method: POST
path: "/api/webhooks/telegram/{connection_id}/{signature}"
tags: ["webhooks"]
---

# Telegram Update

`POST /api/webhooks/telegram/{connection_id}/{signature}`

## Request

- Base URL: `https://api.heymetra.com` (the document declares no server; this is the origin it was published from)
- URL: `https://api.heymetra.com/api/webhooks/telegram/{connection_id}/{signature}`
- Auth: none declared

Receive one customer bot's updates.

Unauthenticated by necessity — Telegram delivers to a URL, not a session.
Two independent checks stand in front: the signature in the path and the
secret token Telegram echoes back in a header. Both run before any database
work, and a failure never reveals whether the connection exists.

Anything past verification answers 200, even when it is ignored: Telegram
retries non-2xx, and retrying a delivery that can never succeed is noise.

## Path parameters

- `connection_id` string, required
- `signature` string, required

## Response `200`

Successful Response

- object

## Other responses

- `422`: Validation Error

---

[API](https://skmtc.dev/heymetra/apis/heymetra-api.md) · [All operations](https://skmtc.dev/heymetra/apis/heymetra-api/llms.txt) · [OpenAPI document](https://skmtc.dev/heymetra/apis/heymetra-api/revisions/877b0f87d6d0?raw)