Telegram integration

Get Gurdx alerts as Telegram messages in a private chat, group or channel.

What you need#

• A Telegram account.
• A bot token from BotFather.
• The chat ID of the destination.

Step 1: create a bot#

1. In Telegram, open a chat with @BotFather and send /newbot.
2. Follow the prompts to choose a name and username.
3. Copy the bot token. It looks like 123456789:AAExampleTokenValue. Treat it like a password.

Step 2: find the chat ID#

• Private chat: send any message to your new bot, then open https://api.telegram.org/bot<TOKEN>/getUpdates in a browser. The chat.id value is your chat ID.
• Group: add the bot to the group, send a message that mentions it, and read getUpdates the same way. Group IDs are usually negative numbers.
• Channel: add the bot as an administrator with permission to post. Channel IDs start with -100.

Step 3: add it in Gurdx#

1. In https://gurdx.cretip.com/app, open Settings, then Integrations, and add an integration of type Telegram.
2. Enter the bot token and the chat ID. Both are stored encrypted.
3. Pick the event types and a minimum risk score.
4. Save and enable it.

What Telegram receives#

Gurdx calls the Telegram sendMessage method with link previews disabled. The text is the standard alert:

🛡️ Gurdx — Spam email (My Shop)
Risk: 66.7/100
Subject: user@mailinator.com
User: user_1042
Time: 2026-10-06 12:14:22

Verify the bot yourself#

You can test the token and chat ID outside Gurdx first:

curl -X POST "https://api.telegram.org/bot<TOKEN>/sendMessage" \
  -d chat_id=<CHAT_ID> \
  -d text="Gurdx test"

Troubleshooting#

• chat not found: the bot has never received a message from that chat, or the ID is wrong.
• bot was blocked or Forbidden: unblock the bot, or re-add it to the group or channel with posting rights.
• No alerts at all: confirm the integration is enabled and that live-mode traffic reaches the minimum risk score. Test-mode requests never raise events.

Warning: Anyone with the bot token can send messages as your bot. If it leaks, revoke it with BotFather using /revoke and update the integration.

Failed sends are retried up to 3 times, one minute apart. Continue with Integrations overview.