Telegram Bridge MCP server
Stdio MCP bridge to Telegram with scrubbing and a fail-closed allowlist.
0 stars319 downloads/wk
Reviews
Write oneNobody has reviewed Telegram Bridge yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Telegram Bridge tools (6, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
telegram_answer_callbackAcknowledge a callback_query (optional toast text / alert).
telegram_edit_reply_markuptelegram_get_chatFetch chat metadata (getChat) for a chat_id.
telegram_get_meReturn the bot identity (getMe). Useful as a connectivity check.
telegram_get_updatestelegram_send_messagewrite action
Public scan report
scanner v0.1.10 · 2026-11-01 · same rubric, same numbers if you re-run it
- Code scan11 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 3 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Telegram Bridge compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 92/100
- higher than 90% of 48,273 servers
- Tools
- 6
- the typical server has 7
- Tools that change things
- 17%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 319
- more than 82% of 11,915 servers with a package
What its tools let an agent do: 5 read · 1 change
Release history: 3 versions in the registry since 2026-09-21, latest 2026-10-27, typically one every 27 days.
Install Telegram Bridge in Claude Code, Cursor or VS Code
claude mcp add mcp-telegram-bridge -- uvx mcp-telegram-bridge
What the publisher says
From the Telegram Bridge repository's README, as published. We do not edit it. Read it on GitHub
mcp-telegram-bridge
Controlled Telegram channel bridge for any MCP host.
A small stdio Model Context Protocol server that sits between your local agent (Cursor, Claude Desktop, Windsurf, Grok/Cursor agents, and others) and the Telegram Bot API. The agent owns conversation logic; this process handles I/O, always-on outbound scrubbing, and chat allowlist enforcement. Optional strict inbound classification is disabled by default.
Built for client-owned deployments: the bridge runs on your machine, not on a hosted Grok VM. Games and game-master flows are one demo use case, not the product.
Owner context: Antonio Castellon / Castellon.CH - Swiss freelance architect. The same bridge shape is useful for SME lab patterns (notify channels, specialist handoff, moderated drafts) alongside email or ERP connectors.
What / why
Agents are good at reasoning and poor at holding a raw Bot API session by themselves. Telegram is a convenient human surface (groups, buttons, mobile). This project gives you a narrow, reviewable bridge:
- Client-owned - stdio MCP on the workstation or CI runner that already hosts your agent.
- Host-agnostic - any MCP client that can launch a local command.
- Controlled - outbound scrubbing and optional ALLOWEDCHATIDS; optional strict inbound classification for untrusted groups.
- Minimal tools - send, edit markup, answer callbacks, get updates, getMe / getChat. No game engine, no inbox file, no wake-RPC.
Pitch pattern for SMEs: start with a Telegram notify or triage channel using the same architecture you would later apply to email or ERP.
Architecture
+---------------------------+
| MCP host / agents | Cursor / Claude Desktop / Windsurf / ...
| (conversation logic) |
+-------------+-------------+
|
| MCP (stdio)
v
+---------------------------+
| mcp-telegram-bridge | tools + safety scrub/classify
| (this process) |
+-------------+-------------+
|
| HTTPS Bot API
v
+---------------------------+
| api.telegram.org |
+-------------+-------------+
v
Telegram chats / groupsThe agent owns polling offsets, handoffs between specialists, and product policy. This server enforces destination controls and sends scrubbed text; inbound classification is opt-in.
Install
Requirements: Python 3.11+, a Telegram bot token from @BotFather.
git clone https://github.com/antonio-castellon/mcp-telegram-bridge.git
cd mcp-telegram-bridge
python -m venv .venv
source .venv/bin/activate # Windows: .venv\Scripts\activate
pip install -e ".[dev]"
cp .env.example .env # set TELEGRAM_BOT_TOKEN (never commit .env)Or without cloning, once published:
uvx --from mcp-telegram-bridge mcp-telegram-bridge
# or: pipx run mcp-telegram-bridgeCursor / Claude Desktop (mcp.json)
Example for Cursor (User MCP settings) or Claude Desktop (claudedesktopconfig.json):
{
"mcpServers": {
"telegram-bridge": {
"command": "uvx",
"args": ["--from", "mcp-telegram-bridge", "mcp-telegram-bridge"],
"env": {
"TELEGRAM_BOT_TOKEN": "YOUR_BOT_TOKEN_HERE",
"ALLOWED_CHAT_IDS": "-1001234567890"
}
}
}
}On Windows, point command at your venv Python if needed, for example:
C:\DEV.Personal\mcp-telegram-bridge\.venv\Scripts\python.exe
Leave ALLOWEDCHATIDS empty only if you intentionally accept traffic from every chat the bot can see - document that risk for your deployment.
Smoke without a host:
python -m mcp_telegram_bridge
# process waits on stdio for MCP JSON-RPC (Ctrl+C to stop)Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Telegram Bridge: common questions
- Is Telegram Bridge MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Telegram Bridge safety report
- How do I install Telegram Bridge?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Telegram Bridge need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Telegram Bridge maintained?
- The last commit was 4 days ago (2026-10-29). The latest release is v0.2.1.
- How does Telegram Bridge compare with other MCP servers?
- safety score 92/100 (higher than 90% of 48,273 servers); tools 6 (the typical server has 7); tools that change things 17% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.