Bots and automation, done right
Build bots that people actually want to talk to.
A vendor-neutral hub for developers who build chat bots, AI agents and automations: step-by-step platform guides, hosting and security playbooks, a curated directory and client-side tools that never see your tokens.
Guides
Platform and engineering guides
From your first token to a production bot with queues, retries, monitoring and a security review.
Getting started
What a bot is, how to pick a platform, polling versus webhooks, and the minimum production checklist.
TelegramTelegram bots
Create a bot with BotFather, handle updates with polling or webhooks, add inline keyboards and stay within limits.
DiscordDiscord bots
Register an application, choose Gateway intents, ship slash commands and buttons, and verify HTTP interactions.
WhatsAppWhatsApp Cloud API
Send and receive WhatsApp messages through Meta's official Cloud API with templates, webhooks and opt-in.
SlackSlack bots
Create a Slack app with a manifest, choose scopes, receive events over HTTP or Socket Mode and verify requests.
AIAI chatbots and agents
Add language models to a bot with tool calling, retrieval and MCP while controlling cost, latency and prompt injection.
AutomationAutomation workflows
Design trigger and action workflows, self-host n8n, handle errors and know when to move to code.
WebhooksAPIs and webhooks
Build webhook receivers that verify signatures, acknowledge fast, deduplicate and retry correctly.
ScrapingWeb scraping ethics
When automated collection is acceptable, how to be a polite crawler, and the lines you should not cross.
HostingHosting bots
Pick the right runtime for polling, Gateway and webhook bots, and run it with restarts, logs and backups.
ServerlessBots on Cloudflare Workers
Deploy a webhook bot at the edge with secrets, storage, background work and scheduled jobs.
SecurityBot security
A threat model and checklist for bots: secret management, least privilege, signed webhooks, SSRF, injection and leaks.
ReliabilityReliability and rate limits
Keep a bot fast and correct under load: respect 429s, queue work, deduplicate, time out and alert.
Tools
Utilities that stay on your device
Debug payloads, verify signatures, design embeds and schedule jobs without pasting secrets into someone else's server.
Webhook payload tester
Validate, format and explore JSON payloads, then verify HMAC signatures for GitHub, Slack, Standard Webhooks and more.
CronCron builder
Build and validate cron schedules, read them in plain language and preview the next run times.
TelegramTelegram API builder
Compose Bot API calls (sendMessage, setWebhook and more) as URLs, curl commands and fetch snippets.
DiscordDiscord embed builder
Design rich embeds with a live preview, check Discord limits and export webhook-ready JSON.
SecretsToken and secret helper
Find leaked bot tokens and API keys in logs or code, redact them, generate strong secrets and decode JWTs.
RegexRegex tester
Test JavaScript regular expressions with highlighting, groups, replace preview and ReDoS protection.
Principles
What makes a bot legitimate
"Bot" is not a dirty word. The difference between a useful bot and abuse is consent, transparency and restraint.
- It says what it isUsers know they are talking to software, and who operates it.
- It is invitedPeople opt in to messages; servers and workspaces choose to install it.
- It follows the platform rulesOfficial APIs, published rate limits and terms of service, not scraped sessions.
- It takes only what it needsMinimal scopes, minimal data, short retention, a way to delete.
- It protects its credentialsTokens in a secret store, signed webhooks, rotated keys.
- It has an off switchStop commands, unsubscribe, a human fallback and an owner who answers reports.
Directory
A curated map of the bot ecosystem
Official docs, libraries, frameworks, hosting options and security tooling, filtered and described in plain language.
Telegram, Discord, WhatsApp, Slack
Official APIs and the most reliable libraries for each platform.
AILLMs, agents and MCP
Model APIs, local inference, retrieval frameworks and the Model Context Protocol.
InfrastructureHosting, automation and security
Serverless, containers, workflow engines and secret scanners.