Authorize Claude to access your Telegram bot.
${err ? `${err}
` : ''} `, { headers: { 'Content-Type': 'text/html;charset=utf-8' } }); } async function handleAuthorize(request, env) { if (request.method === 'GET') { const p = Object.fromEntries(new URL(request.url).searchParams); return authorizePage(p); } const form = await request.formData(); const state = form.get('state') || ''; const code_challenge = form.get('code_challenge') || ''; const redirect_uri = form.get('redirect_uri') || ''; const client_id = form.get('client_id') || ''; const secret = form.get('secret') || ''; const params = { state, code_challenge, redirect_uri, client_id }; if (!env.MCP_SECRET) return authorizePage(params, 'Server error: MCP_SECRET not configured.'); if (secret !== env.MCP_SECRET) return authorizePage(params, 'Invalid secret. Try again.'); const code = await makeCode(env.MCP_SECRET, { code_challenge, redirect_uri, exp: Date.now() + 5 * 60 * 1000, }); const dest = new URL(redirect_uri); dest.searchParams.set('code', code); dest.searchParams.set('state', state); return Response.redirect(dest.toString(), 302); } async function handleToken(request, env) { let params; const ct = request.headers.get('content-type') || ''; if (ct.includes('application/json')) { params = await request.json(); } else { params = Object.fromEntries(await request.formData()); } const { code = '', code_verifier = '', redirect_uri = '' } = params; if (!env.MCP_SECRET) return jsonRes({ error: 'server_error' }, 500); const payload = await parseCode(env.MCP_SECRET, code); if (!payload) return jsonRes({ error: 'invalid_grant', error_description: 'Invalid code' }, 400); if (Date.now() > payload.exp) return jsonRes({ error: 'invalid_grant', error_description: 'Code expired' }, 400); if (payload.redirect_uri !== redirect_uri) return jsonRes({ error: 'invalid_grant', error_description: 'redirect_uri mismatch' }, 400); const challenge = await sha256b64url(code_verifier); if (challenge !== payload.code_challenge) return jsonRes({ error: 'invalid_grant', error_description: 'PKCE verification failed' }, 400); return jsonRes({ access_token: env.MCP_SECRET, token_type: 'bearer' }); } // --- MCP --- async function handleMCP(request, env) { if (env.MCP_SECRET) { if (request.headers.get('Authorization') !== `Bearer ${env.MCP_SECRET}`) { return new Response('Unauthorized', { status: 401, headers: CORS }); } } let body; try { body = await request.json(); } catch { return mcpErr(null, -32700, 'Parse error'); } const { id, method, params } = body; if (id === undefined) return new Response(null, { status: 202, headers: CORS }); switch (method) { case 'initialize': return mcpRes(id, { protocolVersion: PROTOCOL_VERSION, capabilities: { tools: {} }, serverInfo: SERVER_INFO }); case 'ping': return mcpRes(id, {}); case 'tools/list': return mcpRes(id, { tools: TOOLS }); case 'tools/call': { const { name, arguments: args = {} } = params ?? {}; const { TELEGRAM_TOKEN: token, TELEGRAM_CHAT_ID: chatId } = env; if (!token || !chatId) { return mcpRes(id, { content: [{ type: 'text', text: 'Error: TELEGRAM_TOKEN or TELEGRAM_CHAT_ID not set' }], isError: true }); } if (name === 'send_message') { const result = await tg(token, 'sendMessage', { chat_id: chatId, text: args.text, parse_mode: args.parse_mode ?? 'HTML' }); return mcpRes(id, { content: [{ type: 'text', text: result.ok ? 'Message sent.' : `Error: ${result.description}` }], isError: !result.ok, }); } if (name === 'get_updates') { const result = await tg(token, 'getUpdates', { limit: Math.min(args.limit ?? 10, 100) }); if (!result.ok) return mcpRes(id, { content: [{ type: 'text', text: `Error: ${result.description}` }], isError: true }); const messages = result.result .filter(u => u.message?.text) .map(u => { const { message: m } = u; const from = m.from ? `${m.from.first_name}${m.from.username ? ` (@${m.from.username})` : ''}` : 'Unknown'; return `[${new Date(m.date * 1000).toISOString()}] ${from}: ${m.text}`; }) .join('\n'); return mcpRes(id, { content: [{ type: 'text', text: messages || 'No pending messages.' }] }); } if (name === 'get_bot_info') { const result = await tg(token, 'getMe', {}); if (!result.ok) return mcpRes(id, { content: [{ type: 'text', text: `Error: ${result.description}` }], isError: true }); const { first_name, username, id: botId } = result.result; return mcpRes(id, { content: [{ type: 'text', text: `Bot: ${first_name} (@${username}), ID: ${botId}` }] }); } return mcpErr(id, -32601, `Unknown tool: ${name}`); } default: return mcpErr(id, -32601, `Method not found: ${method}`); } } // --- Router --- export default { async fetch(request, env) { const { method } = request; const { pathname, origin } = new URL(request.url); if (method === 'OPTIONS') return new Response(null, { status: 204, headers: CORS }); if (pathname === '/.well-known/oauth-authorization-server') return oauthMeta(origin); if (pathname === '/authorize') return handleAuthorize(request, env); if (pathname === '/token' && method === 'POST') return handleToken(request, env); if (pathname === '/' && method === 'POST') return handleMCP(request, env); return new Response('Not Found', { status: 404, headers: CORS }); }, };