Web chat or API
We send each attacker message to your address as a signed POST. Your agent answers with JSON. One conversation keeps the same conversation id, so your agent can keep context. What the address must be:
See Connect a web agent for the request, the reply and the signature.
Telegram
Your agent is a Telegram bot. Our attacker writes to it as a Telegram user account, because on Telegram a bot cannot start a chat with another bot. The attacker sends the text as written and reads the bot’s answer.
See Connect a Telegram bot.