Telegram NotificationsBLOCK
Simple MCP server to send you notifications on telegram
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
An MCP (Model Context Protocol) server that sends notifications to Telegram when Claude Code completes tasks. Built with TypeScript using the Cloudflare Agents SDK and deployable on Cloudflare Workers.
📢 Prefer Discord? Check out Discord Notification MCP for Discord notifications instead.
Features
- 🤖 MCP Tool: Provides a
send_telegram_messagetool for sending notifications - 🚀 Cloudflare Workers: Runs serverless with global distribution
- 🔐 Authenticated: Requires a bearer token stored as a Cloudflare secret
- 🌐 Streamable HTTP: Uses the current stateless MCP transport
- 💬 Message Formatting: Supports Markdown and HTML formatting
- 📝 Formatting: Supports Markdown and HTML message formatting
Architecture
This server implements the MCP specification using Cloudflare's Agents SDK:
- POST /mcp: Stateless Streamable HTTP endpoint for MCP communication
- GET /sse: Returns
410 Gone; legacy SSE clients must migrate to/mcp - Built with TypeScript, MCP SDK, and Cloudflare Agents SDK
- Proper JSON-RPC 2.0 error handling
- Node.js compatibility mode enabled
Setup
Prerequisites
- Telegram Bot: Create a bot via @BotFather and get your bot token
- Chat ID: Get your chat ID by sending a message to your bot and visiting:
https://api.telegram.org/bot/getUpdates
- Cloudflare Account: Sign up at cloudflare.com
Installation
- Clone this repository
- Install dependencies:
pnpm install
Configuration
- Create a
.dev.varsfile from the example:
cp .dev.vars.example .dev.vars
Then edit .dev.vars with your bot token and chat ID. This file is used for both local development a
962384e53ab4OBSERVED · 2026-10-10Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.
claude mcp add telegram-notification-mcp -- npx -y [email protected]
{
"mcpServers": {
"telegram-notification-mcp": {
"command": "npx",
"args": [
"-y",
"[email protected]"
]
}
}
}Exposed tools (1)
0 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
send_telegram_message | write |
Trust audit
BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- none-observed
- Network
- declared (5 observation(s))
- Shell
- declared (2 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- none-found
Findings (9)
exec(input?: (string | URLPatternInit), baseURL?: string): URLPatternResult | null;
exec(query: string): Promise<D1ExecResult>;
.dev.vars.example
atob(data: string): string;
declare function atob(data: string): string;
agents, zod, @biomejs/biome, @grammyjs/types, @types/node, typescript, vitest, wrangler
images/logo.png
images/telegram.jpg
For local development, Wrangler will automatically load environment variables from your `.dev.vars` file.
Gates applied: no_behavioural_pass.
962384e53ab4full audit observations/trust-audit/mcp-server/kstonekuan__telegram-notifications.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | 962384e53ab4 | BLOCK | D | 69 | first audit |
Questions
What is the Telegram Notifications MCP server?
Simple MCP server to send you notifications on telegram
What tools does Telegram Notifications expose?
1 in total: 0 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is Telegram Notifications safe to connect to an agent?
No — not without reading the findings first. The audit graded it D (69/100) and found 2 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does Telegram Notifications need?
No credential environment variables were found in its source, so it appears to need none.
How current is this page?
The grade is for one exact copy of the source (962384e53ab4), read on 2026-10-10. The repository is watched and re-audited when it changes.