agents-guide-to-telegram (Circe22/agents-guide-to-telegram) is an MCP server listed on the M8ven Trust Index. It scores 60 out of 100, grade C. No publisher has claimed this listing.

Back to MCP Trust IndexM8ven
C
Caution
60/100

agents-guide-to-telegram

教 agent 使用 Telegram / Teach your agent to use Telegram — native rich messages (tables, LaTeX, collapsible blocks), a live progress window for Claude Code, and a field guide of hard-won pitfalls.

→ Circe22/agents-guide-to-telegram· listed on github_repo_search

Caution. Specific findings reduced this grade. They are listed on the page. Grades reflect the full trust pyramid: code, verification depth, and reputation. New projects cap at C until adoption is earned.

How we verified

⚡ Live Monitored: not connected

Verified is a snapshot. Live keeps it current, and builds your track record.

⚡ Connect GitHub → continuous verification on every pushwhy connect →

Who stands behind it

Circe22

Source: github_repo_search

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find. Or connect your repo for our deepest verification, Live Monitored: read-only, revoke anytime. What we access →

⚡ Connect GitHub for Live Monitored

Install from

GitHub

The grade above is for the source repository. Registries can serve a different version, so we mark the ones we were not able to read.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// environment variables
To run this server yourself, you supply these values. They go in your own MCP client configuration and stay on your machine. The secret label means the value is sensitive, not that the server mishandles it.
configTG_RICH_MAX_REQUEST_BYTES在 json.loads 之前按字节有界读取；超长行只保留 limit+1，其余用固定窗口 drain 到换行后继续服务，避免巨型请求先把 parser/内存吃满。
configTG_RICH_MEDIA_TOTAL_MB累计输入预算：一次调用所有文件读进内存拼 multipart 的总量，默认 200 MiB（ 可调）。读取本身有界——每个文件最多只读「单文件上限与剩余预算取小」再 +1 字节（多那一字节用来判超限），所以就算文件在 stat 之后被撑大，也不会先把整份读进内存再事后拒绝。这道界约束的是文件输入字节，不等于封顶整体 RSS（拼 multipart、requests 缓冲另有开销）；
configTG_RICH_MEDIA_GUARD这种名字——确认无害就设 =0。
configTG_RICH_MEDIA_ROOTS稳定路径下按 resolve() 后真实目标做父子判定，普通 symlink 越界会被拦；凭证文件名 guard 仍作第二层。这不是 race-hard filesystem sandbox：不承诺抵抗另一个本地进程在检查与 open() 之间并发替换路径组件（TOCTOU）。
configTG_RICH_ALLOWED_CHATS配了之后 send / edit / draft / sticker / ask 的目标 chat（含默认 chat）都必须在名单内，否则拒发；报错不泄露名单内容。
configTG_PROGRESS_TITLETG_PROGRESS_TITLE=… / TG_PROGRESS_DONE_TITLE=…
configTG_PROGRESS_DONE_TITLETG_PROGRESS_TITLE=… / TG_PROGRESS_DONE_TITLE=…
configTG_PROGRESS_MODEvia =draft.
configTG_PROGRESS_ENDTG_PROGRESS_END=keep
configTG_PROGRESS_REDACT0 一把关掉 —— 详见下面「安全闸，以及怎么关」。
configTG_PROGRESSTG_PROGRESS=0
configTG_STICKER_DIR库默认在 ~/.tg-rich-mcp-stickers/（ 或配置文件 sticker_dir
configTG_STICKER_MAX一条消息最多剥几张，多出来的原样留在正文
configTG_STICKER_MARKERS=0 关掉句内标记层（工具对不受影响）
// quality suggestions

Tools detected

No tools extracted — insufficient content to verify at Tier 2

Claim the listing to review these findings one by one and send us a correction where you disagree, straight to the team. Claiming also means we tell you when the grade moves, and reach you first if we find anything urgent.

// full audit trail
The findings above are the summary. The full trail, every check we ran, each deduction, the network hosts observed and the dependency advisories, goes to verified publishers, along with an alert whenever a new one lands. Verified publishers can also review each finding and dispute it in one click. Publisher corrections have sharpened several of our checks this month, because the maintainer knows the codebase better than any scanner.
// improvement guidance — verified publishers only
We have 0 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Verified](https://m8ven.ai/badge/mcp/circe22/agents-guide-to-telegram?variant=verified)](https://m8ven.ai/mcp/circe22/agents-guide-to-telegram)
Shows verification status without the grade. Want the grade badge instead? Remove ?variant=verified from the URL.
commit: 2eac0310cfe7dccc1e382fbab158e27d6ac58830
code hash: f3f7144f9dc5a59d820a8795b60d701a40efc96501d6959a9c47e3706cb90f10
view raw JSON →
Check MCPs from inside your assistant
Tool Check · MCP

Vetting this one by hand? Tool Check is an MCP that scores other MCPs. Add it once and ask Claude, ChatGPT, or any MCP client to grade a server, surface CVEs, check the publisher, and suggest safer alternatives — before you install.

https://m8ven.ai/api/mcp/tool-check
check_toolsearch_toolscompare_toolsrecommend_alternativescheck_publisherreport_concern
How to add it →Free · no account needed · works in any MCP client