AwrAIter — Telegram channels

Name: AwrAIter — Telegram channels
Author: mediazione

SAFEgrade B · trust 88/100

None

Overview

From the repository's own README, as read at the audited commit.

# AwrAIter MCP Server[![MCP Registry](https://img.shields.io/badge/MCP%20Registry-ai.awraiter%2Ftelegram-5A5AFF)](https://registry.modelcontextprotocol.io)[![Transport](https://img.shields.io/badge/transport-streamable--http-1f6feb)](https://modelcontextprotocol.io)[![Auth](https://img.shields.io/badge/auth-OAuth%202.1%20%C2%B7%20PKCE-2ea043)](#authentication)[![Docs](https://img.shields.io/badge/docs-awraiter.ai%2Fmcp--server-8957e5)](https://awraiter.ai/mcp-server/)A remote MCP server for the **Telegram channels you administer**: read analytics, draft posts from your own scraped sources, build content plans, schedule and publish — from inside ChatGPT, Claude, or any MCP-capable client.**Not a userbot.** No phone number, no login code, no `.session` file. The server acts through your AwrAIter account and reaches only the channels of the team you authorize.[Русская версия](README.ru.md) · [Connection guide](docs/connect.md) · [Tool reference](docs/tools.md) · [awraiter.ai](https://awraiter.ai)---## Server| | ||---|---|| **URL** | `https://awraiter.ai/mcp` || **Transport** | Streamable HTTP || **Authentication** | OAuth 2.1 (PKCE, dynamic client registration) or a personal access token || **Registry name** | `ai.awraiter/telegram` || **Availability** | Every plan, including the free tier |## Quick startYou need an AwrAIter account ([sign in with Telegram](https://awraiter.ai/login)) and at least one connected channel.### Claude (web / desktop)**Settings → Connectors → Add custom connector**, paste the URL, press **Connect**, and confirm access for the team you want.```https://awraiter.ai/mcp```### Claude Code```bashclaude mcp add --transport http awraiter https://awraiter.ai/mcp```### ChatGPTAwrAiter is not in the ChatGPT plugin catalog yet — add it as your own MCP server: **Settings → Security and login → Developer mode**, then **chatgpt.com/plugins → +**, paste the URL, keep OAuth and press **Connect**. In a chat, pick it from the tools menu.The ChatGPT/Codex deskt

Details

Source: MediaZione/AwrAiter
Transports: streamable-http
Tools: Registered at runtime; the list could not be read from source.
License: MIT
Stars: 0 · pushed 0d ago

Trust audit

Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: none-observed
Network: none-observed
Shell: none-observed
Dependencies: pinned
Secrets in source: none-found

Findings (4)

MEDIUMAuth / authz · mcp.remote_no_auth · CWE-287, CWE-862

streamable-http

Why it matters. a network transport with no auth environment variable found

Fix. require a token

LOWPrompt injection · prompt.authority_framing · CWE-94, CWE-1427

docs/connect.md:59

Pick *Full access* if the assistant may publish, *Read only* if it should just read analytics.

LOWPrompt injection · prompt.transfer_instruction · CWE-94, CWE-1427

README.md:64

Create a token in the panel under [**MCP connection**](https://awraiter.ai/mcp-connect) — it is shown once — and send it as a header:

Why it matters. an instruction to move sensitive data to an outside destination

Fix. remove; a skill never needs the user's secrets off the machine

LOWInventory / provenance · mcp.no_tools_extracted · CWE-1104

server.json

Why it matters. the tool list is enumerated at runtime by tools/list, not declared in source

Fix. the page says so rather than showing an empty table

Gates applied: no_behavioural_pass.

Audited 2026-09-17 · audit v0.4.0 · source sha 636346b306e4 · full audit: observations/trust-audit/mcp-server/mediazione__telegram.json · Report an issue or request a re-scan

Audit history

Date	Source	Verdict	Grade	Score	Change
2026-09-17	`636346b306e4`	SAFE	B	88	source changed, verdict held
2026-09-12	`44bcd539eec6`	SAFE	B	88	first audit

Also audited

Servers with a similar trust profile.

Atlaso — remote MCP server**Atlaso is an AI memory layer: on
0r/0w/0d · SAFE Notion
2r/1w/0d · CAUTION Magic
0r/0w/0d · SAFE AgentTrust — Identity & Trust for A2A Agents
12r/6w/1d · CAUTION AIノアカリ☆ Agent Trust Receipt
0r/0w/0d · SAFE SpotDB
0r/0w/0d · SAFE

Questions

What is the AwrAIter — Telegram channels MCP server?

None

Is AwrAIter — Telegram channels safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (88/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B.

What credentials does AwrAIter — Telegram channels need?

No credential environment variables were found in its source, so it appears to need none.

How does AwrAIter — Telegram channels run?

It speaks streamable-http, so it runs as a service you connect to over the network.

How current is this page?

The grade is for one exact copy of the source (636346b306e4), read on 2026-09-17. The repository is watched and re-audited when it changes.

Provenance: OBSERVED · read 2026-09-17 · job trust-audit-2026-09-17