69
/ 100
1 month ago
glama

tg-mcp-guarded

Dual-plane Telegram MCP server providing read-only analytics and guarded write actions with built-in rate limiting, anti-spam protection, and session management.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
No credential exfiltration, no sensitive file access, no obfuscation
Static analysis found nothing flowing your secrets to unexpected places.
Open source with a license and README
Anyone can audit the code, the license is declared, and the publisher documents what it does.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
configTG_MCP_SERVER_NAME
configTG_ALLOW_SESSION_SWITCH
configTG_ACTIONS_ENABLED
configTG_ACTIONS_REQUIRE_ALLOWLIST
configTG_ACTIONS_UNSAFE_OVERRIDEActionMCP is fail-closed by default: weakening core safe flags auto-disables actions unless =1.
configTG_ACTIONS_MAX_MESSAGE_LEN"": "2000",
configTG_ACTIONS_MAX_FILE_MB
configTG_ACTIONS_MIN_CONFIRM_TEXT_LEN
configTG_ACTIONS_IDEMPOTENCY_WINDOW_SEC"": "86400",
configTG_ACTIONS_REQUIRE_CONFIRMATION_TEXT
configTG_ACTIONS_CONFIRMATION_PHRASENon-dry-run write actions require confirm=true and exact confirmation_text ().
configTG_ACTIONS_REQUIRE_APPROVAL_CODENon-dry-run write actions also require one-time approval_code from the matching dry_run preview (=1).
configTG_ACTIONS_IDEMPOTENCY_ENABLED
configTG_ACTIONS_APPROVAL_TTL_SEC"": "1800",
configTG_ACTIONS_APPROVAL_MIN_AGE_SECapproval_code has minimum age (, default 30s): immediate execute right after dry_run is blocked.
configTG_ACTIONS_APPROVAL_FILE"": "data/anti_spam/action_approvals.json",
configTG_ACTIONS_BATCH_TTL_HOURS"": "168",
configTG_ACTIONS_BATCH_APPROVAL_LEASE_SEC"": "86400",
configTG_ACTIONS_BATCH_RUN_LEASE_SEC"": "1800",
configTG_ACTIONS_BATCH_FILE"": "data/anti_spam/action_batches.json",
configTG_ACTIONS_ALLOWED_GROUPSenv ="-1001234567890" \
configTG_WRITE_CONTEXTenv =read_mcp \
configTG_ENFORCE_ACTION_PROCESSIn strict mode (=1), write is allowed only when process entrypoint is mcp_server_actions.py.
configTG_EXPECTED_USERNAMEenv ="my_main_account" \
configTG_SESSION_CONFLICT_REGISTRY_FILEenv ="$REPO/data/anti_spam/session_registry.json" \
configTG_READ_SESSION_PATHenv ="$REPO/data/sessions/my_account_ro.session" \
configTG_ACTIONS_SESSION_PATHenv ="$REPO/data/sessions/my_account.session" \
configTG_SESSIONS_DIRenv ="$REPO/data/sessions" \
configTG_SESSION_PATH_CONFLICT_MODEenv =warn \
configTG_SESSION_PATHenv ="$REPO/data/sessions/my_account_ro.session" \
configSESSION_NAME
configTG_DISABLE_RATE_LIMIT_FOR_TESTS
configPYTEST_CURRENT_TEST
configRATE_RPS
configMAX_DM_PER_DAY
configMAX_JOINS_PER_DAY
configMAX_GROUP_MSGS_PER_DAY
configMAX_GROUPS
configTG_GLOBAL_RPS_MODEenv =shared \
configTG_FLOOD_CIRCUIT_THRESHOLD_SEC"": "300",
configTG_FLOOD_CIRCUIT_COOLDOWN_SEC"": "900",
configSESSION_DIR
configTG_SESSION_LOCK_MODEenv =shared \
configTG_RECEIVE_UPDATES0 (default) disables Telethon updates loop to reduce sqlite session lock contention.
configTG_BLOCK_DIRECT_TELETHON_WRITE
configTG_ALLOW_DIRECT_TELETHON_WRITE
configTG_AUTH_BOOTSTRAP
configTG_ACTION_PROCESS
configTG_DIRECT_TELETHON_WRITE_ALLOWED_CONTEXTSenv =actions_mcp \
configTG_SESSION_RUNTIME_MODEenv =copy \
configTG_SESSION_RUNTIME_PROFILE
configTG_SECRET_PROVIDERenv (default): read plain env values
configTG_USE_KEYCHAIN
configTG_API_IDEdit .env with your , TG_API_HASH
configTG_API_HASHEdit .env with your TG_API_ID,
configTG_KEYCHAIN_SERVICE
configTG_KEYCHAIN_ACCOUNT_API_ID
configTG_KEYCHAIN_ACCOUNT_API_HASHTG_API_HASH
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/matskevich-tg-mcp-guarded-ell9ts)](https://m8ven.ai/mcp/matskevich-tg-mcp-guarded-ell9ts)
commit: 1f6788fc8f0e95bb73313f866eef613b8c0f6ca8
code hash: 4633ae867f7d848d411eafaafa7d0a388ea00bcf9b75053073ddff27fc506167
verified: 6/23/2026, 10:35:49 AM
view raw JSON →