github JavaScript analyzed 07c0fc8

AgentPhone-AI/agentphone-mcp

v0.7.0
github

MCP server for AgentPhone — give AI agents phone numbers, SMS, and voice calls

maintainer
AgentPhone-AI
licence
MIT
first seen
2026-06-03
last seen
2026-09-16
releases · 30d
1
short id

AgentPhone-AI/agentphone-mcp is an MCP server distributed on github, maintained by AgentPhone-AI, tracked here since June 2026. It has shipped 12 releases (currently 0.7.0) and exposes 28 tools. Tools include account_overview, attach_number, buy_number, create_agent, delete_agent, delete_webhook, and 22 more. Its composite risk grade is A — an inferred review prompt computed from observed signals, not a verdict.

what we found

Reading the source raised one review prompt — dangerous code — each a pattern worth a human look rather than a finding of fault.

Its 28 tools appear to reach network and secrets, inferred from tool names, descriptions and input schemas rather than from observed behaviour.

Since the previous scan on 2026-09-14: 28 tools added and 28 tools removed.

full security breakdown →
tools 20 of 28
  • account_overview
  • attach_number
  • buy_number
  • create_agent
  • delete_agent
  • delete_webhook
  • detach_number
  • get_agent
  • get_call
  • get_conversation
  • get_messages
  • get_usage
  • get_webhook
  • list_agents
  • list_calls
  • list_contacts
  • list_conversations
  • list_numbers
  • list_voices
  • list_webhook_deliveries
All 28 tools →
release cadence · 90d 2 releases
06-22 00:00 08-05 00:00 now
recent releases last 10
version date src
0.7.0 2026-08-25 npm
0.6.0 2026-06-25 npm
0.5.2 2026-04-24 npm
0.5.1 2026-04-24 npm
0.5.0 2026-04-17 npm
0.4.1 2026-04-15 npm
0.4.0 2026-04-11 npm
0.3.0 2026-04-11 npm
0.2.0 2026-03-21 npm
0.1.2 2026-02-27 npm

view all →