Slim Telegram MCP server with skill-based lazy loading, encrypted sessions, and prompt-injection defense
Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.
Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"slim-tg-mcp","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.
Everything here was measured by our prober or read from a registry. Nothing is self-reported.
Attributed to the source that supplied each field. Treated as claims, not facts.
# slim-tg-mcp [](https://github.com/haoyu-haoyu/slim-tg-mcp/actions/workflows/ci.yml) [](https://github.com/haoyu-haoyu/slim-tg-mcp/blob/main/LICENSE) [](https://www.python.org) A slim, security-hardened **Telegram MCP server** for [Claude Code](https://claude.com/claude-code) and any MCP-compatible client. > 一个精简、安全加固的 **Telegram MCP 服务器**，专为 Claude Code 与任何兼容 MCP 的客户端设计。 --- ## English ### Why slim-tg-mcp? The popular `chigwell/telegram-mcp` exposes **73 tools** — that's roughly **11 000 tokens** permanently consumed in every conversation. This project keeps only **8 search/read tools** as MCP and ships every write/admin operation as a **lazy-load Skill**. Same capabilities (now with feature parity at v0.4.0 across **11 Skills**), **~87 % less context overhead**, and a security model designed from day one to survive prompt injection. ### Architecture at a glance ``` ┌───────────────────────┐ │ Claude Code / Desktop │ └───────────┬───────────┘ │ ┌────────┴─────────┐ ▼ ▼ [Slim MCP — 8 tools] [Skills — 11 lazy-loaded] search/read messaging / group-admin (13 ops) download contacts / media-upload resolve polls (incl. edit) / scheduling (incl. edit) profile (incl. 2FA) / export privacy / folders / stickers-gifs │ │ └─────────┬────────┘ ▼ [TG Daemon (Unix socket)] ├─ multi-account session pool ├─ AES-GCM session storage + Keychain ├─ prompt-injection sanitizer ├─ flock-based singleton + audit log └─ Telethon (MTProto) ▼ Telegram ``` ### What's in the box (v0.4.0) **Always-loaded MCP tools** (~1.5 k tokens): | Tool |…
Mapped onto the structured taxonomy from declared text and observed tool names. Confidence shown for derived entries.
Every source is kept verbatim. Field changes are logged as events.