Back to plugin

Security audit

Telegram Full Access

Security checks for vulnerabilities and agentic risk

Overview

This package is a small, disclosed Telegram MCP connector, but it requires sensitive Telegram session and database settings that users should handle carefully.

Install only if you intend to give the configured MCP runtime access to your Telegram account. Keep TELEGRAM_API_HASH, DATABASE_URL, and especially the Telegram session file private, and use a trusted tgchats-mcp installation.

Static analysis

No suspicious patterns detected.