Critical Risk →

telegram-convert-star-gift

Convert a received Star Gift into Stars (non-reversible). The gift is removed from your profile and its conversion value is added to your Stars balance. Pass msgId for personal gifts or chatId + savedId for chat gifts. Opt-in: register only when MCP_TELEGRAM_ENABLE_STARS=1.

How to control telegram-convert-star-gift ↓

What telegram-convert-star-gift does on MCP-Telegram

AI agents use telegram-convert-star-gift to commit financial operations through MCP-Telegram — usually the final step of a payment, billing, or trading workflow. A call moves real money.

Critical Risk

Why telegram-convert-star-gift needs a policy

This tool irreversibly converts a Telegram Star Gift into Stars currency, which is a financial transaction involving Telegram's virtual currency. It is explicitly non-reversible, moves financial value (Stars), and permanently removes the gift from the profile. Financial category takes precedence, with high severity due to the irreversible nature and financial impact on the user's account.

From the tool's definition 'Convert a received Star Gift into Stars (non-reversible)' and 'its conversion value is added to your Stars balance'

Documented attack patterns abuse exactly the kind of access telegram-convert-star-gift gives an agent:

How to control telegram-convert-star-gift

PolicyLayer is an MCP gateway — it sits between your AI agents and MCP-Telegram, and nothing reaches the server without passing your rules. This is the rule we recommend for telegram-convert-star-gift:

policy.json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "telegram-convert-star-gift": {
      "deny_if": [
        {
          "conditions": [],
          "on_deny": "Requires human approval."
        }
      ]
    }
  }
}

Any call to telegram-convert-star-gift is blocked until a human approves it. The rest of the server keeps working.

  1. Create a free account and register MCP-Telegram — nothing to install.
  2. Add this policy — paste it, or build it visually.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
GATE THIS TOOL →

Free to start. No card required.

Related tools and policies

Go deeper

Questions about telegram-convert-star-gift

What does the telegram-convert-star-gift tool do? +

Convert a received Star Gift into Stars (non-reversible). The gift is removed from your profile and its conversion value is added to your Stars balance. Pass msgId for personal gifts or chatId + savedId for chat gifts. Opt-in: register only when MCP_TELEGRAM_ENABLE_STARS=1. It is categorised as a Financial tool in the MCP-Telegram MCP Server, which means it involves financial transactions. Block by default and require explicit approval.

How do I enforce a policy on telegram-convert-star-gift? +

Register the MCP-Telegram MCP server in PolicyLayer and add a rule for telegram-convert-star-gift: allow, deny, rate-limit, or require approval. Point your MCP client at the PolicyLayer proxy URL and the rule is enforced on every call, before it reaches MCP-Telegram. Nothing to install.

What risk level is telegram-convert-star-gift? +

telegram-convert-star-gift is a Financial tool with critical risk. Critical-risk tools should be blocked by default and only enabled with explicit human approval.

Can I rate-limit telegram-convert-star-gift? +

Yes. Add a rate_limit block to the telegram-convert-star-gift rule in your PolicyLayer policy. For example, setting max: 10 and window: 60 limits the tool to 10 calls per minute. Rate limits are tracked per agent session and reset automatically.

How do I block telegram-convert-star-gift completely? +

Set action: deny in the PolicyLayer policy for telegram-convert-star-gift. The AI agent will receive a policy violation error and cannot call the tool. You can also include a reason field to explain why the tool is blocked.

What MCP server provides telegram-convert-star-gift? +

telegram-convert-star-gift is provided by the MCP-Telegram MCP server (mcp-telegram/mcp-telegram). PolicyLayer sits as a proxy in front of this server to enforce policies before tool calls reach the server.

Enforce policy on every MCP-Telegram tool call.

Start from MCP-Telegram, add the rest of your stack, and see everything your agents can call. Then put policy on all of it.

Free to start. No card required.

181 MCP-Telegram tools catalogued and risk-classified — across an index of 43,000+ MCP servers.

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.