diff --git a/external_plugins/discord/server.ts b/external_plugins/discord/server.ts
index aa6761de..b437abe2 100644
--- a/external_plugins/discord/server.ts
+++ b/external_plugins/discord/server.ts
@@ -41,8 +41,8 @@ const ENV_FILE = join(STATE_DIR, '.env')
 
 // Token is injected via ${user_config.DISCORD_BOT_TOKEN} from .mcp.json —
 // prompted at enable time, stored in keychain (macOS) or .credentials.json 0600
-// elsewhere. The .env file below is a legacy fallback for users configured
-// before H1 #3617646 — real env wins, so the injected value takes precedence.
+// elsewhere. The .env file below is a legacy fallback for previously configured
+// installs — real env wins, so the injected value takes precedence.
 try {
   // Defensive chmod for legacy .env files (no-op on Windows).
   chmodSync(ENV_FILE, 0o600)
diff --git a/external_plugins/telegram/.claude-plugin/plugin.json b/external_plugins/telegram/.claude-plugin/plugin.json
index 41b42894..6c0a6e2d 100644
--- a/external_plugins/telegram/.claude-plugin/plugin.json
+++ b/external_plugins/telegram/.claude-plugin/plugin.json
@@ -1,11 +1,20 @@
 {
   "name": "telegram",
   "description": "Telegram channel for Claude Code \u2014 messaging bridge with built-in access control. Manage pairing, allowlists, and policy via /telegram:access.",
-  "version": "0.0.7",
+  "version": "0.0.8",
   "keywords": [
     "telegram",
     "messaging",
     "channel",
     "mcp"
-  ]
+  ],
+  "userConfig": {
+    "TELEGRAM_BOT_TOKEN": {
+      "type": "string",
+      "title": "Bot Token",
+      "description": "Bot token from @BotFather — format is 123456789:AAH... Stored in keychain (macOS) or ~/.claude/.credentials.json with 0600 permissions elsewhere. Never written to settings.json.",
+      "required": true,
+      "sensitive": true
+    }
+  }
 }
diff --git a/external_plugins/telegram/server.ts b/external_plugins/telegram/server.ts
index 876452f4..494ed901 100644
--- a/external_plugins/telegram/server.ts
+++ b/external_plugins/telegram/server.ts
@@ -32,8 +32,8 @@ const ENV_FILE = join(STATE_DIR, '.env')
 
 // Token is injected via ${user_config.TELEGRAM_BOT_TOKEN} from .mcp.json —
 // prompted at enable time, stored in keychain (macOS) or .credentials.json 0600
-// elsewhere. The .env file below is a legacy fallback for users configured
-// before H1 #3617646 — real env wins, so the injected value takes precedence.
+// elsewhere. The .env file below is a legacy fallback for previously configured
+// installs — real env wins, so the injected value takes precedence.
 try {
   // Defensive chmod for legacy .env files (no-op on Windows).
   chmodSync(ENV_FILE, 0o600)