A read-only MCP server for retrieving Telegram data. MCP is a standard way for an AI agent to call outside tools, while this server is configured to prevent direct write operations.

Use it for read-only Telegram queries through a locally configured Python server and session.

It lets an agent inspect Telegram safely without giving the read process permission to send or modify anything.

tgmcp-read — MCP server by matskevich/tg-mcp-guarded

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Clone the repo

git clone --depth 1 https://github.com/matskevich/tg-mcp-guarded

Installing this writes the configuration, not the program: `python3` runs a file from the repository, so clone it first and make the path in the command match where you put it.

Made for: Claude Code, Codex, Cursor, Gemini CLI, OpenCode.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/mcp/matskevich/tg-mcp-guarded/tgmcp-read/github.svg)](https://agentmods.dev/mcp/matskevich/tg-mcp-guarded/tgmcp-read)

Your own site

<a href="https://agentmods.dev/mcp/matskevich/tg-mcp-guarded/tgmcp-read"><img src="https://agentmods.dev/badge/mcp/matskevich/tg-mcp-guarded/tgmcp-read/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/mcp/matskevich/tg-mcp-guarded/tgmcp-read"><img src="https://agentmods.dev/badge/mcp/matskevich/tg-mcp-guarded/tgmcp-read.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session not measured What this adds to a session before it is invoked.

When invoked not measured Not applicable: nothing here is loaded into a session.

Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Security

Grade A, and why

tgmcp-read scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2mo ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

.mcp.json · 30 lines

What it actually says

{
  "tgmcp-read": {
    "command": "venv/bin/python3",
    "args": [
      "tganalytics/mcp_server_read.py"
    ],
    "env": {
      "PYTHONPATH": "tganalytics:.",
      "TG_SESSIONS_DIR": "data/sessions",
      "TG_SESSION_PATH": "data/sessions/read_only_ro.session",
      "TG_READ_SESSION_PATH": "data/sessions/read_only_ro.session",
      "TG_ACTIONS_SESSION_PATH": "data/sessions/actions_session.session",
      "TG_SESSION_PATH_CONFLICT_MODE": "fail",
      "TG_SESSION_CONFLICT_REGISTRY_FILE": "data/anti_spam/session_registry.json",
      "TG_ALLOW_SESSION_SWITCH": "0",
      "TG_BLOCK_DIRECT_TELETHON_WRITE": "1",
      "TG_ALLOW_DIRECT_TELETHON_WRITE": "0",
      "TG_ENFORCE_ACTION_PROCESS": "1",
      "TG_DIRECT_TELETHON_WRITE_ALLOWED_CONTEXTS": "actions_mcp",
      "TG_WRITE_CONTEXT": "read_mcp",
      "TG_ACTION_PROCESS": "0",
      "TG_SESSION_RUNTIME_MODE": "copy",
      "TG_RECEIVE_UPDATES": "0",
      "TG_SESSION_LOCK_MODE": "shared",
      "TG_GLOBAL_RPS_MODE": "shared",
      "TG_FLOOD_CIRCUIT_THRESHOLD_SEC": "300",
      "TG_FLOOD_CIRCUIT_COOLDOWN_SEC": "900"
    }
  }
}

Same file

What else `.mcp.json` configures

This page is one entry in a file that holds 2. Installing the file brings all of them; each is measured and scanned on its own page.

MCP server tgmcp-actions A not measured

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

2mo ago First seen · 30 lines scan A e9ec021a6866

Subscribe to this mod's changes

tgmcp-read is an MCP server published in the GitHub repository matskevich/tg-mcp-guarded (10 stars, last pushed today), licensed MIT. Its token cost is not measured: an MCP server costs its tool schemas, not its config file. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

tgmcp-read next to 6 mcp servers from other repositories
Mod	Type	Stars	Last push	Licence	Scan	Tokens	Works with
tgmcp-readmatskevich/tg-mcp-guarded	MCP server	10	today	MIT	A	—	Claude Code, Codex, Cursor, Gemini CLI, OpenCode
docs-langchainlangchain-ai/langchain	MCP server	149k	today	MIT	A	—	Claude Code, Codex, Cursor, Gemini CLI, OpenCode
component-explorermicrosoft/vscode	MCP server	195k	today	MIT	A	—	Claude Code, Codex, Cursor, Gemini CLI, OpenCode
codex_message_boardopenai/codex	MCP server	134k	today	Apache-2.0	A	—	Claude Code, Codex, Cursor, Gemini CLI, OpenCode
reference-langchainlangchain-ai/langchain	MCP server	149k	today	MIT	A	—	Claude Code, Codex, Cursor, Gemini CLI, OpenCode
playwright-testmicrosoft/playwright	MCP server	100k	today	Apache-2.0	A	—	Claude Code, Codex, Cursor, Gemini CLI, OpenCode
reamorluto/rea	MCP server	447k	today	MIT	A	—	Claude Code

tgmcp-read