Is io.github.leshchenko1979/fast-mcp-telegram safe to use?

io.github.leshchenko1979/fast-mcp-telegram has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.

How do I install io.github.leshchenko1979/fast-mcp-telegram?

io.github.leshchenko1979/fast-mcp-telegram supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.leshchenko1979/fast-mcp-telegram do?

io.github.leshchenko1979/fast-mcp-telegram provides 3 tools: discovery, get_messages, send_message. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.leshchenko1979/fast-mcp-telegram?

io.github.leshchenko1979/fast-mcp-telegram is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.

Is io.github.leshchenko1979/fast-mcp-telegram actively maintained?

io.github.leshchenko1979/fast-mcp-telegram is actively maintained - last commit was 2 days ago. It has 50 GitHub stars.

io.github.leshchenko1979/fast-mcp-telegram

fast-mcp-telegram

Multi-tenant Telegram gateway for AI agents — HTTP+stdio, 8 tools, MTProto User API

50 3 tools GitHub PyPI

No known CVEs

MIT license

Actively maintained

Last commit 2d ago

Works with most clients

Transport: stdio, sse

3 tools · ~164 tok

Grade A · 0.1% of 200K ctx

MCPpedia last refreshed this data 2d ago

Edit this pageView history

io.github.leshchenko1979/fast-mcp-telegram is an MCP server that multi-tenant Telegram gateway for AI agents — HTTP+stdio, 8 tools, MTProto User API. Its tool list has not been published yet over stdio and sse, requires no API key, and scores 88/100 on MCPpedia's security, maintenance and efficiency rubric.

Communication

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "telegram": {
      "env": {
        "API_ID": "your_api_id",
        "API_HASH": "your_api_hash"
      },
      "args": [
        "fast-mcp-telegram"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-leshchenko1979-fast-mcp-telegram)](https://mcppedia.org/s/io-github-leshchenko1979-fast-mcp-telegram)

Read me

What io.github.leshchenko1979/fast-mcp-telegram does

Multi-tenant Telegram gateway for AI agents — HTTP+stdio, 8 tools, MTProto User API

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

88/100across 5 weighted dimensions

How we score →

0255075100

−12

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2026-52830critical · fixedCVSS 9.4

fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protection

## Summary fast-mcp-telegram validates HTTP Bearer tokens by joining the raw token string into a session-file path. The verifier rejects the exact reserved token `telegram`, but it does not reject path separators or normalize the path before checking whether the session file exists. A remote HTTP client can therefore authenticate as the default legacy session with a token such as `../fast-mcp-telegram/telegram` when the documented default session file `~/.config/fast-mcp-telegram/telegram.sessi

Affected: >= 0Fixed in 0.19.1source →

Inventory

Tools (3)

Click any tool to inspect its schema.

~164 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.leshchenko1979/fast-mcp-telegram safe to use?: io.github.leshchenko1979/fast-mcp-telegram has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.leshchenko1979/fast-mcp-telegram?: io.github.leshchenko1979/fast-mcp-telegram supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.leshchenko1979/fast-mcp-telegram do?: io.github.leshchenko1979/fast-mcp-telegram provides 3 tools: discovery, get_messages, send_message. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.leshchenko1979/fast-mcp-telegram?: io.github.leshchenko1979/fast-mcp-telegram is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is io.github.leshchenko1979/fast-mcp-telegram actively maintained?: io.github.leshchenko1979/fast-mcp-telegram is actively maintained - last commit was 2 days ago. It has 50 GitHub stars.

Similar servers

Others in communication

View all →

io.github.team-telnyx/telnyx95

Official TypeScript library for the Telnyx API

198 8

app.mailtea/mailtea92

Send email and newsletters with Mailtea over MCP, plus skills for email and website design.

io.github.labaccessnow/secops-field-notes-mcp92

CVSS scoring, IOC extraction, email header triage, hash/JWT/timestamp decoding, CISA KEV lookup.

Textbee92

Open-source SMS gateway. Turn your Android phone into an SMS API: send and receive SMS from your apps over REST and webhooks. Self-hostable, with a free hosted plan.

3.4k 3

MCP Security Weekly

Get CVE alerts and security updates for io.github.leshchenko1979/fast-mcp-telegram and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Communication

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktopstdio, sse · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "telegram": {
      "env": {
        "API_ID": "your_api_id",
        "API_HASH": "your_api_hash"
      },
      "args": [
        "fast-mcp-telegram"
      ],
      "command": "uvx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-leshchenko1979-fast-mcp-telegram)](https://mcppedia.org/s/io-github-leshchenko1979-fast-mcp-telegram)

Read me

What io.github.leshchenko1979/fast-mcp-telegram does

Multi-tenant Telegram gateway for AI agents — HTTP+stdio, 8 tools, MTProto User API

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

Telegram MCP Server — Model Context Protocol (MCP) gateway for Telegram. 8 context-efficient tools, multi-tenant, MTProto bridge.

Try the Demo

Open https://tg-mcp.l1979.ru/setup
Scan the QR code from Telegram mobile (Settings → Devices → Scan QR) — no phone typing, no OTP, no 2FA. Or enter your phone number as fallback.
Copy your Bearer token from the success page

Then choose your path:

MCP Client (AI assistants)

From the setup page, download the mcp.json file
Add the server to your AI client and ask: "send hello to my saved messages in telegram"

Direct API (curl)

Run the command below (replace TOKEN with yours):

curl -X POST "https://tg-mcp.l1979.ru/mtproto-api/messages.SendMessage" \
  -H "Authorization: Bearer TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"params": {"peer": "me", "message": "Hello!"}}'

How It Works

This server sits between your AI agent and Telegram's API:

Your agent → MCP/HTTP → this server → MTProto → Telegram

What it does: Authenticates you with Telegram (QR or phone/bot token), exposes 8 AI-friendly tools instead of 80+ micro-APIs, and bridges raw MTProto for power users. Multi-tenant — one server, many users, isolated sessions.

Features

Feature	Description
:building_construction: Dual Transport	Stdio for local MCP clients, HTTP for remote deploys (`http-auth` production, optional `http-no-auth` for dev)
:closed_lock_with_key: Multi-User Authentication	Shared `http-auth` server: one Bearer token per user, one Telegram account per MCP connection. QR login for instant auth — no phone/OTP/2FA.
:dart: AI-Optimized	8 consolidated tools vs 80+ micro-tools — context-efficient design, LLM-friendly API, MCP ToolAnnotations
:globe_with_meridians: HTTP-MTProto Bridge	Direct curl access to any Telegram API method with entity resolution and safety guardrails
:shield: Session ACL	Opt-in per-principal limits on `http-auth` (`ACL_ENABLED`) — chat lanes, `read_only`, `blocked_peers`, `allow_mtproto`, `ACL_DENY_UNLISTED_PRINCIPALS`; see SECURITY.md
:tv: QR & Web Setup	Scan QR from Telegram mobile for instant auth (no phone/

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

88/100across 5 weighted dimensions

How we score →

0255075100

−12

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

1 fixed

CVE-2026-52830critical · fixedCVSS 9.4

fast-mcp-telegram: Bearer token path traversal bypasses reserved Telegram session protection

Affected: >= 0Fixed in 0.19.1source →

Inventory

Tools (3)

Click any tool to inspect its schema.

~164 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.leshchenko1979/fast-mcp-telegram safe to use?: io.github.leshchenko1979/fast-mcp-telegram has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment. Licensed under MIT.
How do I install io.github.leshchenko1979/fast-mcp-telegram?: io.github.leshchenko1979/fast-mcp-telegram supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.leshchenko1979/fast-mcp-telegram do?: io.github.leshchenko1979/fast-mcp-telegram provides 3 tools: discovery, get_messages, send_message. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.leshchenko1979/fast-mcp-telegram?: io.github.leshchenko1979/fast-mcp-telegram is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse transport.
Is io.github.leshchenko1979/fast-mcp-telegram actively maintained?: io.github.leshchenko1979/fast-mcp-telegram is actively maintained - last commit was 2 days ago. It has 50 GitHub stars.

Similar servers

Others in communication

View all →

io.github.team-telnyx/telnyx95

Official TypeScript library for the Telnyx API

198 8

app.mailtea/mailtea92

Send email and newsletters with Mailtea over MCP, plus skills for email and website design.

io.github.labaccessnow/secops-field-notes-mcp92

CVSS scoring, IOC extraction, email header triage, hash/JWT/timestamp decoding, CISA KEV lookup.

Textbee92

Open-source SMS gateway. Turn your Android phone into an SMS API: send and receive SMS from your apps over REST and webhooks. Self-hostable, with a free hosted plan.

3.4k 3

MCP Security Weekly

Get CVE alerts and security updates for io.github.leshchenko1979/fast-mcp-telegram and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?