telegram-bot-mcp/mcp_bridge
Mikkel Georgsen 50c3b116f7 security: restrict /api/ingest to internal IPs only
Checks X-Forwarded-For/X-Real-IP from NPM proxy to get real client IP.
Only allows localhost, LAN (10.5.0.x), and NetBird (100.79.x) prefixes.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-30 11:35:53 +00:00
..
__init__.py feat: MCP bridge - Telegram group logger + FastMCP HTTP server 2026-03-29 23:56:05 +00:00
__main__.py feat: replace custom OAuth with FastMCP built-in OAuthProvider 2026-03-30 11:18:16 +00:00
config.py feat: MCP bridge - Telegram group logger + FastMCP HTTP server 2026-03-29 23:56:05 +00:00
db.py feat: MCP bridge - Telegram group logger + FastMCP HTTP server 2026-03-29 23:56:05 +00:00
mcp_server.py security: restrict /api/ingest to internal IPs only 2026-03-30 11:35:53 +00:00
models.py feat: MCP bridge - Telegram group logger + FastMCP HTTP server 2026-03-29 23:56:05 +00:00
telegram_bot.py feat: MCP bridge - Telegram group logger + FastMCP HTTP server 2026-03-29 23:56:05 +00:00