// SCAN REPORT

Tgmcp

73 tools. 35 can modify or destroy data without limits.

4 destructive tools with no built-in limits. Policy required.

Last updated: 29 Jun 2026

35 can modify or destroy data

38 read-only

73 tools total

Community server · catalogue entry verified 29/06/2026

How to control Tgmcp ↓

TOOL MAP

What Tgmcp exposes to your agents

Read (38) Write / Execute (31) Destructive / Financial (4)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous Tgmcp tools

Destructive · Medium delete_chat_photo The tool permanently removes a chat photo, which cannot be recovered. Destructive · High delete_contact This tool permanently removes a contact from a Telegram account without the ability to undo the action. Destructive · High delete_message This tool permanently removes a message from a Telegram account, which cannot be undone. Destructive · High delete_profile_photo This tool permanently deletes user profile data (profile photo) which cannot be automatically restored.

35 of Tgmcp's 73 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control Tgmcp

PolicyLayer is an MCP gateway — it sits between your AI agents and Tgmcp, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "delete_chat_photo": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "add_contact": {
    "limits": [
      {
        "counter": "add_contact_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "ban_user": {
    "limits": [
      {
        "counter": "ban_user_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register Tgmcp — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON TGMCP →

Instant setup, no code required.

FULL CATALOGUE

All 73 Tgmcp tools

DESTRUCTIVE 4 tools

Destructive delete_chat_photo Delete the photo of a chat, group, or channel. Destructive delete_contact Delete a contact by user ID. Destructive delete_message Delete a message by ID. Destructive delete_profile_photo Delete your current profile photo.

WRITE 31 tools

Write add_contact Add a new contact to your Telegram account. Write archive_chat Archive a chat. Write create_channel Create a new channel or supergroup. Write create_group Create a new group or supergroup and add users. Write edit_chat_photo Edit the photo of a chat, group, or channel. Requires a file path to an image. Write edit_chat_title Edit the title of a chat, group, or channel. Write edit_message Edit a message you sent. Write forward_message Forward a message from one chat to another. Write import_chat_invite Import a chat invite by hash. Write import_contacts Import a list of contacts. Each contact should be a dict with phone, first_name, last_name. Write invite_to_group Invite users to a group or channel. Write join_chat_by_link Join a chat by invite link. Write mark_as_read Mark all messages as read in a chat. Write mute_chat Mute notifications for a chat. Write pin_message Pin a message in a chat. Write promote_admin Promote a user to admin in a group/channel. Write reply_to_message Reply to a specific message in a chat. Write send_file Send a file to a chat. Write send_gif Send a GIF to a chat by Telegram GIF document ID (not a file path). Write send_message Send a message to a specific chat. Write send_sticker Send a sticker to a chat. File must be a valid .webp sticker file. Write send_voice Send a voice message to a chat. File must be an OGG/OPUS voice note. Write set_bot_commands set_bot_commands Write set_privacy_settings Set privacy settings (e.g., last seen, phone, etc.). Write set_profile_photo Set a new profile photo. Write unarchive_chat Unarchive a chat. Write unban_user Unban a user from a group or channel. Write unblock_user Unblock a user by user ID. Write unmute_chat Unmute notifications for a chat. Write unpin_message Unpin a message in a chat. Write update_profile Update your profile information (name, bio).

READ 38 tools

Read ban_user Ban a user from a group or channel. Read block_user Block a user by user ID. Read demote_admin Demote a user from admin in a group/channel. Read download_media Download media from a message in a chat. Read export_chat_invite Export a chat invite link. Read export_contacts Export all contacts as a JSON string. Read get_admins Get all admins in a group or channel. Read get_banned_users Get all banned users in a group or channel. Read get_blocked_users Get a list of blocked users. Read get_bot_info Get information about a bot by username. Read get_chat Get detailed information about a specific chat. Read get_chats Get a paginated list of chats. Read get_contact_chats List all chats involving a specific contact. Read get_contact_ids Get all contact IDs in your Telegram account. Read get_direct_chat_by_contact Find a direct chat with a specific contact by name, username, or phone. Read get_gif_search Search for GIFs by query. Returns a list of Telegram document IDs (not file paths). Read get_history Get full chat history (up to limit). Read get_invite_link Get the invite link for a group or channel. Read get_last_interaction Get the most recent message with a contact. Read get_me Get your own user information. Read get_media_info Get info about media in a message. Read get_message_context Retrieve context around a specific message. Read get_messages Get paginated messages from a specific chat. Read get_participants List all participants in a group or channel. Read get_pinned_messages Get all pinned messages in a chat. Read get_privacy_settings Get your privacy settings for last seen status. Read get_recent_actions Get recent admin actions (admin log) in a group or channel. Read get_sticker_sets Get all sticker sets. Read get_user_photos Get profile photos of a user. Read get_user_status Get the online status of a user. Read leave_chat Leave a group or channel by chat ID. Read list_chats List available chats with metadata. Read list_contacts List all contacts in your Telegram account. Read list_messages list_messages Read resolve_username Resolve a username to a user or chat ID. Read search_contacts Search for contacts by name, username, or phone number using Telethon's SearchRequest. Read search_messages Search for messages in a chat by text. Read search_public_chats Search for public chats, channels, or bots by username or title.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about Tgmcp

Can an AI agent delete data through the Tg MCP server? +

Yes. The Tgmcp server exposes 4 destructive tools including delete_chat_photo, delete_contact, delete_message. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through Tgmcp? +

The Tgmcp server has 31 write tools including add_contact, archive_chat, create_channel. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Tgmcp.

How many tools does the Tg MCP server expose? +

73 tools across 3 categories: Destructive, Read, Write. 38 are read-only. 35 can modify, create, or delete data.

How do I enforce a policy on Tgmcp? +

Register the Tg MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Tgmcp tool call.

Deterministic rules across all 73 Tgmcp tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON TGMCP →

Instant setup, no code required.

73 Tgmcp tools catalogued and risk-classified — across an index of 43,000+ MCP servers.