Back to Browse

Telegram Bridge MCP Server

CommunicationLow Risk10.0Local
Free

Stdio MCP bridge to Telegram Bot API with scrubbing and chat allowlist.

About

Controlled Telegram Bot API bridge for any MCP host (stdio). Deny-by-default chat allowlist, outbound scrubbing, token redaction in logs, rate limits and untrusted-input labeling. Also usable as a plain Python library (TelegramBridge). The agent owns the logic; the bridge handles Telegram I/O.

Security Report

10.0
Low Risk10.0Low Risk

Valid MCP server (2 strong, 3 medium validity signals). 1 code issue detected. No known CVEs in dependencies. Package registry verified. Imported from the Official MCP Registry. 1 finding(s) downgraded by scanner intelligence.

11 files analyzed · 2 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

file_system

Check that this permission is expected for this type of plugin.

env_vars

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-antonio-castellon-mcp-telegram-bridge": {
      "args": [
        "mcp-telegram-bridge"
      ],
      "command": "uvx"
    }
  }
}

Getting Started

Once installed, try these example prompts and explore these capabilities:

  • 1"Check that the Telegram bot is online" → uses `telegram_get_me`
  • 2"Send this triage note to the ops chat with Ack / Snooze buttons" → `telegram_send_message` with buttons
  • 3"Poll for new messages and button taps" → `telegram_get_updates` (agent owns the offset loop)
  • 4"Clear the spent buttons on that message" → `telegram_edit_reply_markup`
  • 5"Acknowledge this callback query" → `telegram_answer_callback`

Reviews

No reviews yet

Be the first to review this server!

Version History

v0.2.1Oct 27, 2026Re-scanned

0.2.1: non-breaking. New library layer: TelegramBridge and Settings importable without the MCP server; the stdio server is a thin adapter over the same class. Tool names and command unchanged.

v0.2.0Oct 27, 2026Re-scanned

0.2.0: security hardening. BREAKING: empty ALLOWED_CHAT_IDS now denies all chats (set ALLOW_ALL_CHATS=1 to opt in to open mode). Token redaction in logs, inbound/outbound rate limits, bot-message filtering, hash-pinned dependencies.

v0.1.2Sep 23, 2026Re-scanned

Updated to version 0.1.1.