Telegram bot for Claude Code and Codex CLI with MCP routing, multi-agent orchestration, cron jobs, and access controls.
Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.
Install from
M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.
Disclosed vulnerabilities in this server's declared npm dependencies (via OSV). Whether each is reachable depends on the installed versions.
simple-git has blockUnsafeOperationsPlugin bypass via case-insensitive protocol.allow config key enables RCE
@modelcontextprotocol/sdk has cross-client data leak via shared server/transport instance reuse
Anthropic's MCP TypeScript SDK has a ReDoS vulnerability
Model Context Protocol (MCP) TypeScript SDK does not enable DNS rebinding protection by default
simple-git is vulnerable to Remote Code Execution
process.env. You'll be asked to provide them before it can run.ALLOWED_USER_IDS— 123456789,987654321BOT_TOKEN— 123456789:telegram-tokenCODEX_ARGSCODEX_BACKEND— On =sdk, Telegram streams structured Codex SDK events and persists thread IDs per projectCODEX_COMMAND— Codex not producing output: verify CODEX_BACKEND, , and CODEX_WORKDIRCODEX_SDK_ADDITIONAL_DIRECTORIES— ["/abs/path/extra-worktree"]CODEX_SDK_APPROVAL_POLICYCODEX_SDK_CONFIGCODEX_SDK_NETWORK_ACCESS_ENABLEDCODEX_SDK_REASONING_EFFORTCODEX_SDK_SANDBOX_MODE— danger-full-accessCODEX_SDK_SKIP_GIT_REPO_CHECKCODEX_SDK_WEB_SEARCH_MODECODEX_WORKDIR— Keep scoped to a safe workspace rootCRON_DAILY_SUMMARY— Daily summary schedule: (default 0 9 )CRON_TIMEZONE— Asia/ShanghaiE2E_TEST_COMMAND— npx playwright test --reporter=lineGITHUB_DEFAULT_BRANCHGITHUB_DEFAULT_WORKDIRGITHUB_TOKEN— GitHub API failures: verify scope (repo) and account permissionsMCP_SERVERSPROACTIVE_USER_IDS— Target users:REASONING_RENDER_MODE— quote block (if =quote)SHELL_ALLOWED_COMMANDS— ["pwd","ls","git status","git diff --stat","npm test","npm run check"]SHELL_DANGEROUS_COMMANDS— ["git add","git commit","git push","rm","mv","cp","npm publish"]SHELL_ENABLEDSHELL_MAX_OUTPUT_CHARSSHELL_READ_ONLY— Keep =true unless you have a strong reason to allow write commandsSHELL_TIMEOUT_MSSTATE_FILE— .codex-telegram-claws-state.jsonSTREAM_BUFFER_CHARSSTREAM_THROTTLE_MS— Throttle: controlled by (default 1200)TELEGRAM_API_BASE— Telegram API blocked: set TELEGRAM_PROXY_URL (HTTP proxy like http://127.0.0.1:7890) or run a local Bot API server and setTELEGRAM_EXPECTED_USERNAME— (optional)TELEGRAM_PROXY_URL— Telegram API blocked: set (HTTP proxy like http://127.0.0.1:7890) or run a local Bot API server and set TELEGRAM_API_BASETELEGRAM_SMOKE_CHAT_ID— (optional)WORKSPACE_ROOT— /repo - list switchable git projects under[](https://m8ven.ai/mcp/mackding-codexclaw-sqcydb)