Build bots for Slack, Discord, or Telegram with conversation memory, admin controls, rate limiting, and prompt injection defense. Security is built in, not bolted on.
Tutorials show you how to receive messages and call an API. They don't show you webhook signature verification, rate limiting, or input sanitization. Those get added after the first incident, if at all.
Every incoming event gets HMAC-SHA256 signature verification. Every user gets a rate limit. Every message runs through injection defense before it reaches the AI. Admin commands are restricted to an explicit user list. These aren't add-ons.
Slack-compatible HMAC-SHA256 verification on every inbound request. Unsigned or tampered events get rejected with 401. Uses timing-safe comparison.
Sliding window rate limiter. Default: 5 messages per 60 seconds, configurable per deployment. Users who hit the limit get a clear message, not silence.
Each user gets their own conversation history that expires after a configurable window (default: 30 minutes). Old messages don't eat your token budget forever.
All user input runs through sanitization before processing. Strips fake system/assistant tags, "ignore previous instructions" patterns, and role-override attempts. Blocked content is flagged in metadata.
Messages starting with /admin are restricted to users in the adminUsers set. Everyone else gets a rejection. No middleware config, just a user list you control.
Set a name, signing secret, admin user list, and optionally an Anthropic API key. Without the API key, the bot runs in echo mode for testing.
The included MockPlatformServer simulates Slack's event API. Send signed and unsigned requests, verify admin controls work, test rate limits. All offline, no platform app needed yet.
Wire the webhook URL to your Slack/Discord/Telegram app. The bot handles event verification, message routing, rate limiting, and response generation automatically.
One-time purchase. Full source code. Zero external dependencies.
Tell us the platform, the use case, and any integrations you need. We'll scope the build within 24 hours.
Get in Touch