Back to MCP Trust Indexm8ven
74
/ 100
10 days ago
glama

MCP Telegram Cloud

Open source MCP server that connects a Telegram account to AI assistants over OAuth + QR login, enabling read-only and safe state-change operations.

→ kaka-sangi/mcp-telegram-cloud-deploy· listed on glama
Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
✅
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
✅
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
🔐
You'll be asked for 5 credentials: ADMIN_TOKEN, SESSION_ENCRYPTION_KEY, TELEGRAM_2FA_PASSWORD, TELEGRAM_PROXY_PASSWORD, TELEGRAM_PROXY_SECRET
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretADMIN_TOKEN— and ISSUER (your public HTTPS URL). is optional but
configBRAND_NAME
configCONTACT_EMAIL
configCONTACT_TELEGRAM
configDATABASE_PATH
configDESTRUCTIVE_AUDIT_RETENTION_DAYS
configDESTRUCTIVE_DAILY_LIMIT
configFREE_TIER_LIMIT
configISSUER— and (your public HTTPS URL). ADMIN_TOKEN is optional but
configISSUES_LABEL
configISSUES_URL
configLOG_HASH_SALT
configLOG_SERVICE_NAME
configLOG_USER_IDS
configMAX_JSON_BODY_BYTES
configMAX_OAUTH_CLIENTS
configMCP_DRAIN_HEALTH_DELAY_MS
configMCP_DRAIN_POLL_MS
configMCP_DRAIN_TIMEOUT_MS
configMCP_IDLE_REAP_INTERVAL_MS
configMCP_IDLE_REAP_MS
configMCP_RATE_LIMIT
configMCP_RATE_WINDOW_MS
configMCP_TELEGRAM_DAEMON
configMCP_TELEGRAM_ENABLE_GROUP_CALLS
configMCP_TELEGRAM_ENABLE_QUICK_REPLIES
configMCP_TELEGRAM_ENABLE_STARS
configMCP_TELEGRAM_TELEMETRY
configOAUTH_RATE_LIMIT
configOAUTH_RATE_WINDOW_MS
configOPENAI_APPS_CHALLENGE
configPORT
configREGISTER_RATE_LIMIT
configREGISTER_RATE_WINDOW_MS
🔐 secretSESSION_ENCRYPTION_KEY
configSIGNOZ_AUTH
configSIGNOZ_ENDPOINT— Cloud, etc.), or stderr if is empty
configSOURCE_REPO_URL
🔐 secretTELEGRAM_2FA_PASSWORD
configTELEGRAM_API_HASH— fill in TELEGRAM_API_ID + (from https://my.telegram.org/apps)
configTELEGRAM_API_ID— fill in + TELEGRAM_API_HASH (from https://my.telegram.org/apps)
configTELEGRAM_LOG_LEVEL
configTELEGRAM_PROXY_IP
🔐 secretTELEGRAM_PROXY_PASSWORD
configTELEGRAM_PROXY_PORT
🔐 secretTELEGRAM_PROXY_SECRET
configTELEGRAM_PROXY_SOCKS_TYPE
configTELEGRAM_PROXY_USERNAME
configTELEGRAM_SESSION_PATH
configTELEGRAM_USE_WSS
configTRAEFIK_YAML_PATH
configUNUSED_CLIENT_TTL_DAYS
configUPLOAD_FILE_MAX_BYTES
configUPLOAD_QUOTA_BYTES
configUPLOAD_TTL_SECONDS
configUSAGE_LOG_RETENTION_DAYS
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 6 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/kaka-sangi-mcp-telegram-cloud-deploy-1mrwz0)](https://m8ven.ai/mcp/kaka-sangi-mcp-telegram-cloud-deploy-1mrwz0)
commit: 9c0e4ea0de096a0a49c6b9d5a81f008f7b664ca3
code hash: a3ffe175d493859c7502a73de06b04d46a51d9c0d8aa04b4e720c2b365cfea97
verified: 7/21/2026, 9:32:39 AM
view raw JSON →