Skip to content

Odile Labs

by odilelabs.com · remote · no sign-in to list tools · v1.7.0 · published by com.odilelabs

Let AI agents message or book businesses that have no API (Odile Direct); phone lines, 25c a minute

Final · 1Changes · 9

20 tools: 1 do something that can't be undone, 9 change things and 10 only read.

Scanned Oct 21, 2026

3 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http odile https://odilelabs.com/mcp

Findings

Matches of fixed checks, with the text they matched.

2 warn1 info
  • The server marks "buy_pack" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The description's first verb is "return": a word for reading.

    What this check looks for
  • The server marks "estimate_meal_photo" as not read-only (readOnlyHint: false), and its words say it reads.

    Matched text

    annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The description's first verb is "read": a word for reading.

    What this check looks for
  • The description mentions "credentials".

    Matched text

    description: "...or read a SIP address and private trunk credentials for one of the signed-in owner's answer..."

    What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

20 tools

Can't be undone 1Claude Code: ask
  • send_to_businessSend take_message, check_availability, book or book_first_available (data.options: up to 5 {date, after, before, service} windows in order; fallback take_message or none) through O…No findings

    Why it is in this group

    • The name "send_to_business" says "send": a word for sending, and what is sent cannot be taken back.
    Description, as the server wrote it
    Send take_message, check_availability, book or book_first_available (data.options: up to 5 {date, after, before, service} windows in order; fallback take_message or none) through Odile Direct. No sign-in: free with IP caps. Signed in: first 50 completed tasks/account/calendar month free, then delivered message 1 credit, availability 0, confirmed booking 5 (a first-available request that leaves a message instead costs 1). Uses the same Direct credits as REST, separate from phone minutes. Keep message_id unchanged on retry. One keyed task/account at a time. For free listings set target=claim and biz to its /c/ card ID: messages only, email, 20/day for everyone. Returns the A2A v1.0 {task}. Disclose automation and obtain permission before booking. A deposit-required booking returns INPUT_REQUIRED with a payment_url for the human; it is pending for 30 minutes and confirmed only after payment. Deposit bookings use no Direct credits. Directory REST skill call_business requires a signed-in developer API key and explicit account enablement: US/Canada landline, or a verified business SIP claim in any country with its time zone; weekdays 09:00–17:00 locally, disclosure first, no sales, opt-out forever; 10 credits per completed call and zero for rejected/no-answer. It never calls an Odile line or a listing without SIP; use send_to_business.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
Changes things 9Claude Code: ask
  • buy_packReturns a one-time Stripe checkout link for a prepaid pack; the customer opens it and pays on Stripe's own page, and this connection never sees the card.1 finding

    Why it is in this group

    • The description's first verb is "return": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "buy_pack" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":true}; The description's first verb is "return": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Returns a one-time Stripe checkout link for a prepaid pack; the customer opens it and pays on Stripe's own page, and this connection never sees the card. Only call it when the customer asked to buy, and tell them the price first. Products: 'formats' (Odile Formats credits; packs from get_catalog), 'minutes' (meeting minutes, only where Meeting Notes is on), 'line_minutes' (phone minutes for a new After Hours line; line_id required: min40: 40 minutes for $10; min200: 200 minutes for $50), 'photos' (Plate API photo credits: starter: 1000 photos for $10; growth: 5000 photos for $45; scale: 20000 photos for $160), 'calls' (legacy per-call lines only). What was paid is added within a minute of payment, whatever device paid it. Nothing renews. Needs a signed-in connection with the billing:checkout permission. Returns { checkout_url, product, pack, price_cents, units, unit, then }.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • create_media_jobQueue an Odile Formats job from sources uploaded with prepare_upload's helper.No findings

    Why it is in this group

    • The name "create_media_job" says "create": a word for a change.
    Description, as the server wrote it
    Queue an Odile Formats job from sources uploaded with prepare_upload's helper. Costs nothing: credits are only spent by unlock_job, after the customer approves. One set of uploads makes exactly one job: calling it again with the same sources returns the existing job (replayed: true) whatever outputs, fit or trim are passed, so to render different outputs, upload again with prepare_upload. Needs a signed-in connection with write access. Returns at once with the job (same shape as get_job) plus replayed and next; poll get_job until state is ready.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • estimate_meal_photoReads a photo of a meal or drink (the Plate API, SPEC-plate-api.md) and returns its items with grams, calories, protein and likely allergens -- guesses from the usual recipe, not a…1 finding

    Why it is in this group

    • The description's first verb is "read": a word for reading.
    • The server marks it as not read-only (readOnlyHint: false).

    Findings

    • Warn

      The server marks "estimate_meal_photo" as not read-only (readOnlyHint: false), and its words say it reads.

      Matched text

      annotations: {"readOnlyHint":false,"destructiveHint":false,"idempotentHint":false,"openWorldHint":false}; The description's first verb is "read": a word for reading.

      What this check looks for
    Description, as the server wrote it
    Reads a photo of a meal or drink (the Plate API, SPEC-plate-api.md) and returns its items with grams, calories, protein and likely allergens -- guesses from the usual recipe, not a promise the dish is free of one, and not medical advice. A photo with no food costs nothing; one with food spends 1 Plate API photo credit, a balance separate from Odile Formats credits (get_balance). The first 25 are free on every account, granted automatically the first time this is called. Needs a signed-in connection with the media:spend permission. Returns { items[{name, grams, calories, protein_g, allergens}], allergens, total_calories, total_protein_g, confidence, note, credits_left }, or an error with credits_left and buy_credits_at when the balance is short.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • estimate_media_jobPrice an Odile Formats job in credits before anything is uploaded or charged; use it to tell the customer the cost and get their approval before unlock_job.No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    • The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
    Description, as the server wrote it
    Price an Odile Formats job in credits before anything is uploaded or charged; use it to tell the customer the cost and get their approval before unlock_job. Needs no sign-in and changes nothing. Photos are priced exactly. Reel, Feed and Square video outputs cost exactly 1 credit each; YouTube 16:9 costs 1 or 2 because the length is only known once the file is read. Returns { minimum_credits, maximum_credits, final_price_known, charge_now: 0, why }. An unknown preset or a photo count out of range returns an error naming the valid values (get_catalog lists them).

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_sip_addressCreate or read a SIP address and private trunk credentials for one of the signed-in owner's answering lines.1 finding

    Why it is in this group

    • The name "get_sip_address" says "get": a word for reading.
    • The description's first verb is "create": a word for a change.

    Findings

    • Info

      The description mentions "credentials".

      Matched text

      description: "...or read a SIP address and private trunk credentials for one of the signed-in owner's answer..."

      What this check looks for
    Description, as the server wrote it
    Create or read a SIP address and private trunk credentials for one of the signed-in owner's answering lines. Any phone system that can send a call to a SIP address can send calls here with no phone number. SIP calls use the line's normal allowance or prepaid minutes, with no separate SIP price. Keep the returned username and password private. Needs lines:manage.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: true
  • prepare_uploadStep one of an Odile Formats job: returns a 30-minute upload token and the helper command.No findings

    Why it is in this group

    • The name "prepare_upload" says "upload": a word for a change.
    Description, as the server wrote it
    Step one of an Odile Formats job: returns a 30-minute upload token and the helper command. Run the helper in a shell on the customer's machine: file bytes go straight to Odile and never enter this conversation. The helper prints the source keys to pass to create_media_job. Needs a signed-in connection with write access; nothing is charged. Returns { kind, upload_token, expires_at, helper_url, run[], accepts, part_size, note }. One video OR up to ten photos per job. Each call mints a new token; earlier tokens stay valid until their own expiry, so call it again only when a token has expired or for a new job. To price a job first use estimate_media_job; for the file limits use get_catalog.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: false
  • set_up_answering_lineStarts an After Hours AI receptionist for the signed-in owner's business, prepaid and billed per minute (min40: 40 minutes for $10; min200: 200 minutes for $50).No findings

    Why it is in this group

    • The name "set_up_answering_line" says "set": a word for a change.
    Description, as the server wrote it
    Starts an After Hours AI receptionist for the signed-in owner's business, prepaid and billed per minute (min40: 40 minutes for $10; min200: 200 minutes for $50). Real answered phone calls cost $0.25 per minute, billed by the second: each call rounds up to the next whole second, with a 20-second minimum. Robocalls, calls from your own numbers or ours, website and widget chats, text messages, and calls whose transcripts cannot be read are not charged. Nothing is built or bought until the owner pays: this returns a Stripe checkout link for the first pack, and the line (agent and phone number) is set up automatically once that is paid; its number and forwarding codes are then emailed to the account's address. Every line also gets a SIP address on request, so a phone system can send calls to it with no phone number. Only call it after showing the owner https://odilelabs.com/terms and getting a yes. For prices first use get_answering_line_offer; for a line that already exists use get_answering_line, and add minutes to it with buy_pack (product 'line_minutes'), not a second set-up. United States only (the business line and the owner's mobile must be US numbers). Needs a signed-in connection with the lines:manage permission; limited to 3 set-ups a day per account. Returns { setup_id, status: 'awaiting payment', business_name, business_phone, pack, minutes, price_cents, checkout_url, then }.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • try_answering_lineFree, before buying anything: a shared test phone number and a 4-digit code (valid 24 hours, 5 calls).No findings

    Why it is in this group

    • Nothing in its name or description says what it does, so it is counted as a write.
    Description, as the server wrote it
    Free, before buying anything: a shared test phone number and a 4-digit code (valid 24 hours, 5 calls). Calling the number and keying the code reaches an AI receptionist answering as the business described here, and hear_url plays the same receptionist in a browser. Nothing is booked, sent or charged on a test line; it shows how a real one sounds. Needs a signed-in account (any permissions). For a real line on the business's own number, use set_up_answering_line.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: false
    • openWorldHint: true
  • unlock_jobSpends the customer's credits to unlock a finished job's files.No findings

    Why it is in this group

    • The name "unlock_job" says "unlock": a word for a change.
    Description, as the server wrote it
    Spends the customer's credits to unlock a finished job's files. Only call once get_job says the job is ready and the customer has approved a maximum spend. Refuses, charging nothing, if the job costs more than max_credits, is not ready, or the balance is short (the error says which, with the amount needed). A job that is already unlocked comes back as it is, with no charge and no balance or max_credits check. Needs a signed-in connection with spend access. Returns the job (same shape as get_job, with unlocked: true) plus credits_left and next: 'get_downloads'.

    Annotations the server declares

    • readOnlyHint: false
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
Only reads 10Claude Code: allow
  • find_business_agentResolve an E.164 number to a public Odile Direct agent card.No findings

    Why it is in this group

    • The name "find_business_agent" says "find": a word for reading.
    Description, as the server wrote it
    Resolve an E.164 number to a public Odile Direct agent card. Free: 30/IP/hour without sign-in; 10000/key/day signed in.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_answering_lineThe signed-in owner's own After Hours lines and pending setups.No findings

    Why it is in this group

    • The name "get_answering_line" says "get": a word for reading.
    Description, as the server wrote it
    The signed-in owner's own After Hours lines and pending setups. New lines use phone minutes; existing per-call lines retain calls. Returns billing_mode, balance (seconds for minutes, calls for legacy lines), minutes_remaining to one decimal for minute lines, forwarding codes and recent_calls. Callers are shown by their last four digits only. Needs lines:manage and changes nothing.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_answering_line_offerThe offer for an After Hours AI phone receptionist on the owner's own business line, prepaid and billed per minute: min40: 40 minutes for $10; min200: 200 minutes for $50 ($0.25 a …No findings

    Why it is in this group

    • The name "get_answering_line_offer" says "get": a word for reading.
    Description, as the server wrote it
    The offer for an After Hours AI phone receptionist on the owner's own business line, prepaid and billed per minute: min40: 40 minutes for $10; min200: 200 minutes for $50 ($0.25 a minute). Real answered phone calls cost $0.25 per minute, billed by the second: each call rounds up to the next whole second, with a 20-second minimum. Robocalls, calls from your own numbers or ours, website and widget chats, text messages, and calls whose transcripts cannot be read are not charged. At zero the line keeps answering and usage goes below zero; your next pack pays that balance first. You are emailed at 5 minutes left, at zero, and at 10 minutes below zero. Nothing switches the line off automatically. Offered in: US. Use it before set_up_answering_line, to tell the owner exactly what they would buy. Needs no sign-in, reads no account and changes nothing. Returns { product, packs[{id, minutes, cents}], per_minute_cents, min_billable_seconds, billing_rule, at_zero, countries[], owner_must[], terms_url, set_up_with, top_up_with }.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_balanceThe signed-in customer's Odile Formats credit balance.No findings

    Why it is in this group

    • The name "get_balance" says "get": a word for reading.
    Description, as the server wrote it
    The signed-in customer's Odile Formats credit balance. Use it before unlock_job to check the job is affordable, or when the customer asks what they have left. Needs a signed-in connection; takes no arguments and changes nothing. Returns { account, credits (whole number, 0 when empty), next_expiry ({ at: epoch milliseconds, credits } for the next credits to lapse, or null), buy_credits_at }. To buy more: buy_pack (needs the billing:checkout permission) returns a checkout link the customer pays on Stripe's own page, or send the customer to buy_credits_at.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_catalogThe live price list and limits for Odile Formats, which reformats an existing video or photos for social platforms (it does not pick clips, write captions or edit).No findings

    Why it is in this group

    • The name "get_catalog" says "get": a word for reading.
    Description, as the server wrote it
    The live price list and limits for Odile Formats, which reformats an existing video or photos for social platforms (it does not pick clips, write captions or edit). Call it first, before estimate_media_job or prepare_upload, to learn the preset and fit names, the file limits and the job flow. Needs no sign-in, takes no arguments and changes nothing. Returns { currency, packs[{id, credits, cents}], free_credits_per_account, credits_valid_months, buy_credits_at, purchasable_through_this_connection: true, how_to_buy, units, presets{video[], photos[]} (preset name strings), fits[] (fit name strings), limits{video_source_bytes, photo_source_bytes, max_source_photos, max_trim_seconds}, flow[] }. Prices are read from the same source the website charges from.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_downloadsSigned download links for every finished file of a job, once unlock_job has succeeded for it.No findings

    Why it is in this group

    • The name "get_downloads" says "get": a word for reading.
    Description, as the server wrote it
    Signed download links for every finished file of a job, once unlock_job has succeeded for it. Use it as the last step of the flow, and again whenever links have expired. Needs a signed-in connection and changes nothing. Returns { job_id, files[{name, preset, bytes, width, height, duration, url, expires_at}], how }. Each link works for 15 minutes and needs no login: fetch the files with curl (see how) rather than reading them into the conversation, or, without a shell, give the customer the links to open. Files are kept for 30 days. A job that is not unlocked returns an error with its state and cost; call unlock_job first.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_jobOne Odile Formats job by id, or the ten most recent when no id is given.No findings

    Why it is in this group

    • The name "get_job" says "get": a word for reading.
    Description, as the server wrote it
    One Odile Formats job by id, or the ten most recent when no id is given. Use it to poll a job after create_media_job (every 10-20 seconds, up to 10 minutes) until state is ready or failed; if it is still rendering after that, tell the customer and check again later (nothing is charged until unlock_job). Needs a signed-in connection and changes nothing. Returns one job { job_id, kind, state (queued | rendering | ready | failed), error, unlocked, credits_cost, credits_cost_known, credits_spent, outputs[{name, preset, ready, bytes, duration}], created_at, updated_at }, or { jobs[] } of the same shape. credits_cost is final only once credits_cost_known is true. An id that is not on this account returns 'No such job'. It reports status only: the files come from get_downloads after unlock_job, and a price before uploading comes from estimate_media_job.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_line_callsThe signed-in owner's own line: its calls, newest first.No findings

    Why it is in this group

    • The name "get_line_calls" says "get": a word for reading.
    Description, as the server wrote it
    The signed-in owner's own line: its calls, newest first. Each item has id, at (ISO), caller (E.164 or null), duration_seconds, summary when there is one, and urgent when known. No audio links; use the owner console to listen. Pass the previous result's next_before as before to page back through older calls. Needs lines:manage and changes nothing.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_line_messagesThe signed-in owner's own line: messages the receptionist took, newest first.No findings

    Why it is in this group

    • The name "get_line_messages" says "get": a word for reading.
    Description, as the server wrote it
    The signed-in owner's own line: messages the receptionist took, newest first. Each item has id, at (ISO), name, phone, message and urgent. Pass the previous result's next_before as before to page back through older messages. Needs lines:manage and changes nothing.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false
  • get_receptionist_benchmarkOdile Labs' published benchmark of AI phone receptionists: real test calls placed to public lines, scored against stated measures.No findings

    Why it is in this group

    • The name "get_receptionist_benchmark" says "get": a word for reading.
    Description, as the server wrote it
    Odile Labs' published benchmark of AI phone receptionists: real test calls placed to public lines, scored against stated measures. Use it when someone asks how AI receptionists actually handle calls, or to compare named products; call it with no arguments first, then filter. Needs no sign-in and changes nothing. Returns { source, date, calls, minutes, run_by, limitations, fairness_note, scenarios[{id,name,brief}], lines[{id, vendor, business, kind, answers_as, list_price, ranked, points, possible, by_scenario{<scenario_id>:{points, possible, answered, first_words_s, ai_disclosed_unprompted, reply_language, price_quoted, measures}}}], read_more }. An unknown line_id or scenario_id returns an error listing the valid ids. Vendor-run by Odile Labs (which sells After Hours and Dusklin), not independent. It does not test the caller's own line (for that, see read_more.free_line_check); to set up an After Hours line billed per minute, see get_answering_line_offer.

    Annotations the server declares

    • readOnlyHint: true
    • destructiveHint: false
    • idempotentHint: true
    • openWorldHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.7.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http odile https://odilelabs.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json
{
  "permissions": {
    "allow": [
      "mcp__odile__find_business_agent",
      "mcp__odile__get_answering_line_offer",
      "mcp__odile__get_answering_line",
      "mcp__odile__get_line_calls",
      "mcp__odile__get_line_messages",
      "mcp__odile__get_receptionist_benchmark",
      "mcp__odile__get_catalog",
      "mcp__odile__get_balance",
      "mcp__odile__get_job",
      "mcp__odile__get_downloads"
    ],
    "ask": [
      "mcp__odile__send_to_business",
      "mcp__odile__try_answering_line",
      "mcp__odile__set_up_answering_line",
      "mcp__odile__get_sip_address",
      "mcp__odile__estimate_media_job",
      "mcp__odile__prepare_upload",
      "mcp__odile__create_media_job",
      "mcp__odile__unlock_job",
      "mcp__odile__buy_pack",
      "mcp__odile__estimate_meal_photo"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as odile. Review it before you use it.