DialMyCalls MCP by usefulapi

io.usefulapi/dialmycallsusefulapi.iostreamable-httpv1.0.0Scanned 1 hour ago

Manage DialMyCalls contacts and groups; read broadcasts; send text and voice broadcasts on approval.

28 tools: 5 can delete or cancel things, 3 change things and 20 only read.

Reads private data · 11
Reads text others write · 6
Can send data out · 3
No findings

Anlyon alternative

8 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

28 tools

Deletes or cancels 5Removes, cancels or revokes something.Claude Code: deny

dialmycalls_cancel_callCancel an outgoing or scheduled call broadcast that has not finished.No findings
Why it is in this group
- The name "dialmycalls_cancel_call" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Cancel an outgoing or scheduled call broadcast that has not finished. Calls already placed are not undone.
Annotations the server declares
- title: Cancel a call broadcast
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
dialmycalls_cancel_textCancel an outgoing or scheduled text broadcast that has not finished.No findings
Why it is in this group
- The name "dialmycalls_cancel_text" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Cancel an outgoing or scheduled text broadcast that has not finished. Texts already sent are not undone.
Annotations the server declares
- title: Cancel a text broadcast
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true
dialmycalls_send_callSend (or schedule) an automated VOICE CALL broadcast that plays a recording to real people.Can send data outNo findings
Why it is in this group
- The name "dialmycalls_send_call" says "send": a word for sending, and what is sent cannot be taken back.
- The description says "cannot be undone".
- The input addresses people (input.recipients): what it sends cannot be taken back.
- The server marks it destructive (destructiveHint: true).
What it can reach
- outboundThe name "dialmycalls_send_call" says "send": it sends or publishes something to other people.
Description, as the server wrote it
Send (or schedule) an automated VOICE CALL broadcast that plays a recording to real people. THIS SPENDS ACCOUNT CREDITS AND PHONES THE RECIPIENTS; it cannot be undone once it goes out (a scheduled one can be stopped with dialmycalls_cancel_call). Needs an approved caller_id (dialmycalls_list_caller_ids) and a processed recording (dialmycalls_list_recordings or dialmycalls_create_recording_tts). Ask the user to approve the recipients, recording and time first; with confirm false nothing is sent and a preview is returned.
Annotations the server declares
- title: Send a voice call broadcast (spends credits)
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
dialmycalls_send_textSend (or schedule) a TEXT MESSAGE (SMS) broadcast to real people.Can send data outNo findings
Why it is in this group
- The name "dialmycalls_send_text" says "send": a word for sending, and what is sent cannot be taken back.
- The description says "cannot be undone".
- The input addresses people (input.recipients): what it sends cannot be taken back.
- The server marks it destructive (destructiveHint: true).
What it can reach
- outboundThe name "dialmycalls_send_text" says "send": it sends or publishes something to other people.
Description, as the server wrote it
Send (or schedule) a TEXT MESSAGE (SMS) broadcast to real people. THIS SPENDS ACCOUNT CREDITS AND TEXTS THE RECIPIENTS; it cannot be undone once it goes out (a scheduled one can be stopped with dialmycalls_cancel_text). Needs an active keyword (dialmycalls_list_keywords). Up to 10 messages per broadcast. Ask the user to approve the recipients, wording and time first; with confirm false nothing is sent and a preview is returned.
Annotations the server declares
- title: Send a text (SMS) broadcast (spends credits)
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: false
dialmycalls_update_contactUpdate a contact.No findings
Why it is in this group
- The name "dialmycalls_update_contact" says "update": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Update a contact. DialMyCalls requires the phone number on every update. Fields you omit are left as they are; if you pass group_ids the contact's groups are REPLACED by that list.
Annotations the server declares
- title: Update a contact
- readOnlyHint: false
- destructiveHint: true
- idempotentHint: true

Changes things 3Creates or changes something that can be changed back.Claude Code: ask

dialmycalls_create_contactAdd a contact (phone number required) to the contact list, optionally into contact groups.Can send data outNo findings
Why it is in this group
- The name "dialmycalls_create_contact" says "create": a word for a change.
What it can reach
- outboundThe input takes a destination (input.phone): what the tool writes goes there.
Description, as the server wrote it
Add a contact (phone number required) to the contact list, optionally into contact groups. Sends nothing to the contact.
Annotations the server declares
- title: Create a contact
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
dialmycalls_create_groupCreate an empty contact group.No findings
Why it is in this group
- The name "dialmycalls_create_group" says "create": a word for a change.
Description, as the server wrote it
Create an empty contact group. Sends nothing.
Annotations the server declares
- title: Create a contact group
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
dialmycalls_create_recording_ttsCreate a voice recording from text (text-to-speech) that a call broadcast can then play.No findings
Why it is in this group
- The name "dialmycalls_create_recording_tts" says "create": a word for a change.
Description, as the server wrote it
Create a voice recording from text (text-to-speech) that a call broadcast can then play. Makes no call and sends nothing.
Annotations the server declares
- title: Create a text-to-speech recording
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false

Only reads 20Looks things up and changes nothing.Show 20 read-only tools

dialmycalls_get_accountGet the account: credits available (calls and texts spend credits) and the account creation date.No findings
Why it is in this group
- The name "dialmycalls_get_account" says "get": a word for reading.
Description, as the server wrote it
Get the account: credits available (calls and texts spend credits) and the account creation date.
Annotations the server declares
- title: Get DialMyCalls account
- readOnlyHint: true
dialmycalls_get_callGet one voice call broadcast by id (name, recipients, credit cost, send time, pending_cancel).No findings
Why it is in this group
- The name "dialmycalls_get_call" says "get": a word for reading.
Description, as the server wrote it
Get one voice call broadcast by id (name, recipients, credit cost, send time, pending_cancel).
Annotations the server declares
- title: Get a call broadcast
- readOnlyHint: true
dialmycalls_get_contactGet one contact by id.Reads private dataNo findings
Why it is in this group
- The name "dialmycalls_get_contact" says "get": a word for reading.
What it can reach
- private-dataThe name "dialmycalls_get_contact" says "get" and "contact": it reads contacts.
- private-dataThe description's first sentence says "get" and "contact": it reads contacts.
Description, as the server wrote it
Get one contact by id.
Annotations the server declares
- title: Get a contact
- readOnlyHint: true
dialmycalls_get_groupGet one contact group (name, contacts_count) by id.Reads private dataNo findings
Why it is in this group
- The name "dialmycalls_get_group" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "get" and "contact": it reads contacts.
Description, as the server wrote it
Get one contact group (name, contacts_count) by id.
Annotations the server declares
- title: Get a contact group
- readOnlyHint: true
dialmycalls_get_incoming_textGet one incoming text message by id.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "dialmycalls_get_incoming_text" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "get" and "message": it reads messages.
- untrusted-inputThe description's first sentence says "get" and "message": it reads messages, which other people can write.
Description, as the server wrote it
Get one incoming text message by id.
Annotations the server declares
- title: Get an incoming text
- readOnlyHint: true
dialmycalls_get_recordingGet one voice recording by id (includes its audio file url and whether it is processed and ready).Reads private dataReads text others writeNo findings
Why it is in this group
- The name "dialmycalls_get_recording" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "get" and "file": it reads files.
- untrusted-inputThe description's first sentence says "get" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it
Get one voice recording by id (includes its audio file url and whether it is processed and ready).
Annotations the server declares
- title: Get a recording
- readOnlyHint: true
dialmycalls_get_textGet one outgoing text broadcast by id (name, recipients, credit cost, send time, pending_cancel).No findings
Why it is in this group
- The name "dialmycalls_get_text" says "get": a word for reading.
Description, as the server wrote it
Get one outgoing text broadcast by id (name, recipients, credit cost, send time, pending_cancel).
Annotations the server declares
- title: Get a text broadcast
- readOnlyHint: true
dialmycalls_list_call_recipientsList the recipients of a call broadcast with the result per number (answered, voicemail, busy, no answer...), 100 per page.No findings
Why it is in this group
- The name "dialmycalls_list_call_recipients" says "list": a word for reading.
Description, as the server wrote it
List the recipients of a call broadcast with the result per number (answered, voicemail, busy, no answer...), 100 per page.
Annotations the server declares
- title: List call recipients
- readOnlyHint: true
dialmycalls_list_caller_idsList caller ID phone numbers on the account (id, name, phone, approved).No findings
Why it is in this group
- The name "dialmycalls_list_caller_ids" says "list": a word for reading.
Description, as the server wrote it
List caller ID phone numbers on the account (id, name, phone, approved). A call broadcast needs an approved caller ID.
Annotations the server declares
- title: List caller IDs
- readOnlyHint: true
dialmycalls_list_callsList voice call broadcasts (name, recording, recipients, credit cost, send time), 100 per page.No findings
Why it is in this group
- The name "dialmycalls_list_calls" says "list": a word for reading.
Description, as the server wrote it
List voice call broadcasts (name, recording, recipients, credit cost, send time), 100 per page.
Annotations the server declares
- title: List call broadcasts
- readOnlyHint: true
dialmycalls_list_contactsList contacts in the account (name, phone, email, groups), 100 per page.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "dialmycalls_list_contacts" says "list": a word for reading.
What it can reach
- private-dataThe name "dialmycalls_list_contacts" says "list" and "contact": it reads contacts.
- private-dataThe description's first sentence says "list" and "contact": it reads contacts.
- untrusted-inputThe description's first sentence says "list" and "email": it reads inbound email, which other people can write.
Description, as the server wrote it
List contacts in the account (name, phone, email, groups), 100 per page.
Annotations the server declares
- title: List contacts
- readOnlyHint: true
dialmycalls_list_contacts_in_groupList the contacts that belong to one contact group (from dialmycalls_list_groups), 100 per page.Reads private dataNo findings
Why it is in this group
- The name "dialmycalls_list_contacts_in_group" says "list": a word for reading.
What it can reach
- private-dataThe name "dialmycalls_list_contacts_in_group" says "list" and "contact": it reads contacts.
- private-dataThe description's first sentence says "list" and "contact": it reads contacts.
Description, as the server wrote it
List the contacts that belong to one contact group (from dialmycalls_list_groups), 100 per page.
Annotations the server declares
- title: List contacts in a group
- readOnlyHint: true
dialmycalls_list_do_not_contactsList phone numbers on the account's do-not-contact lists (type call or text); these opted out.Reads private dataNo findings
Why it is in this group
- The name "dialmycalls_list_do_not_contacts" says "list": a word for reading.
What it can reach
- private-dataThe name "dialmycalls_list_do_not_contacts" says "list" and "contact": it reads contacts.
- private-dataThe description's first sentence says "list" and "contact": it reads contacts.
Description, as the server wrote it
List phone numbers on the account's do-not-contact lists (type call or text); these opted out.
Annotations the server declares
- title: List do-not-contact numbers
- readOnlyHint: true
dialmycalls_list_groupsList contact groups with their contact counts, 100 per page.Reads private dataNo findings
Why it is in this group
- The name "dialmycalls_list_groups" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "contact": it reads contacts.
Description, as the server wrote it
List contact groups with their contact counts, 100 per page.
Annotations the server declares
- title: List contact groups
- readOnlyHint: true
dialmycalls_list_incoming_textsList text messages people sent to the account's numbers (from, to, message, time), 100 per page.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "dialmycalls_list_incoming_texts" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "message": it reads messages.
- untrusted-inputThe description's first sentence says "list" and "message": it reads messages, which other people can write.
Description, as the server wrote it
List text messages people sent to the account's numbers (from, to, message, time), 100 per page.
Annotations the server declares
- title: List incoming texts
- readOnlyHint: true
dialmycalls_list_keywordsList text-message keywords (id, keyword, status).Reads private dataReads text others writeNo findings
Why it is in this group
- The name "dialmycalls_list_keywords" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "message": it reads messages.
- untrusted-inputThe description's first sentence says "list" and "message": it reads messages, which other people can write.
Description, as the server wrote it
List text-message keywords (id, keyword, status). A text broadcast must be tied to one active keyword.
Annotations the server declares
- title: List text keywords
- readOnlyHint: true
dialmycalls_list_recordingsList voice recordings (the messages a call broadcast can play): id, name, type, length, processed.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "dialmycalls_list_recordings" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "message": it reads messages.
- untrusted-inputThe description's first sentence says "list" and "message": it reads messages, which other people can write.
Description, as the server wrote it
List voice recordings (the messages a call broadcast can play): id, name, type, length, processed. A call needs a processed recording.
Annotations the server declares
- title: List voice recordings
- readOnlyHint: true
dialmycalls_list_shortcodesList shortcodes available to send texts from.No findings
Why it is in this group
- The name "dialmycalls_list_shortcodes" says "list": a word for reading.
Description, as the server wrote it
List shortcodes available to send texts from.
Annotations the server declares
- title: List shortcodes
- readOnlyHint: true
dialmycalls_list_text_recipientsList the recipients of a text broadcast with the delivery status per number (delivered, undeliverable, queued...), 100 per page.No findings
Why it is in this group
- The name "dialmycalls_list_text_recipients" says "list": a word for reading.
Description, as the server wrote it
List the recipients of a text broadcast with the delivery status per number (delivered, undeliverable, queued...), 100 per page.
Annotations the server declares
- title: List text recipients
- readOnlyHint: true
dialmycalls_list_textsList outgoing text (SMS) broadcasts (name, recipients, credit cost, send time), 100 per page.No findings
Why it is in this group
- The name "dialmycalls_list_texts" says "list": a word for reading.
Description, as the server wrote it
List outgoing text (SMS) broadcasts (name, recipients, credit cost, send time), 100 per page.
Annotations the server declares
- title: List text broadcasts
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

198 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 3 outbound tools breaks every one.

Reads private data11: Reads files, mail, messages, databases, secrets, calendars or repositories.; dialmycalls_get_contact
dialmycalls_get_group
dialmycalls_get_incoming_text
dialmycalls_get_recording
dialmycalls_list_contacts
dialmycalls_list_contacts_in_group
dialmycalls_list_do_not_contacts
dialmycalls_list_groups
dialmycalls_list_incoming_texts
dialmycalls_list_keywords
dialmycalls_list_recordings
Reads text others write6: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; dialmycalls_get_incoming_text
dialmycalls_get_recording
dialmycalls_list_contacts
dialmycalls_list_incoming_texts
dialmycalls_list_keywords
dialmycalls_list_recordings
Can send data out3: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; dialmycalls_create_contact
dialmycalls_send_call
dialmycalls_send_text

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__dialmycalls__dialmycalls_create_contact",
      "mcp__dialmycalls__dialmycalls_send_call",
      "mcp__dialmycalls__dialmycalls_send_text"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http dialmycalls https://dialmycalls.usefulapi.io/mcp

claude mcp add --transport http dialmycalls https://dialmycalls.usefulapi.io/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__dialmycalls__dialmycalls_get_account",
      "mcp__dialmycalls__dialmycalls_list_contacts",
      "mcp__dialmycalls__dialmycalls_list_contacts_in_group",
      "mcp__dialmycalls__dialmycalls_get_contact",
      "mcp__dialmycalls__dialmycalls_list_groups",
      "mcp__dialmycalls__dialmycalls_get_group",
      "mcp__dialmycalls__dialmycalls_list_recordings",
      "mcp__dialmycalls__dialmycalls_get_recording",
      "mcp__dialmycalls__dialmycalls_list_caller_ids",
      "mcp__dialmycalls__dialmycalls_list_keywords",
      "mcp__dialmycalls__dialmycalls_list_shortcodes",
      "mcp__dialmycalls__dialmycalls_list_do_not_contacts",
      "mcp__dialmycalls__dialmycalls_list_calls",
      "mcp__dialmycalls__dialmycalls_get_call",
      "mcp__dialmycalls__dialmycalls_list_call_recipients",
      "mcp__dialmycalls__dialmycalls_list_texts",
      "mcp__dialmycalls__dialmycalls_get_text",
      "mcp__dialmycalls__dialmycalls_list_text_recipients",
      "mcp__dialmycalls__dialmycalls_list_incoming_texts",
      "mcp__dialmycalls__dialmycalls_get_incoming_text"
    ],
    "ask": [
      "mcp__dialmycalls__dialmycalls_create_contact",
      "mcp__dialmycalls__dialmycalls_create_group",
      "mcp__dialmycalls__dialmycalls_create_recording_tts"
    ],
    "deny": [
      "mcp__dialmycalls__dialmycalls_update_contact",
      "mcp__dialmycalls__dialmycalls_send_call",
      "mcp__dialmycalls__dialmycalls_cancel_call",
      "mcp__dialmycalls__dialmycalls_send_text",
      "mcp__dialmycalls__dialmycalls_cancel_text"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as dialmycalls. Review it before you use it.

Capability tags behind 14 rules

mcp__dialmycalls__dialmycalls_list_contacts private-data, untrusted-input
mcp__dialmycalls__dialmycalls_list_contacts_in_group private-data
mcp__dialmycalls__dialmycalls_get_contact private-data
mcp__dialmycalls__dialmycalls_create_contact outbound
mcp__dialmycalls__dialmycalls_list_groups private-data
mcp__dialmycalls__dialmycalls_get_group private-data
mcp__dialmycalls__dialmycalls_list_recordings private-data, untrusted-input
mcp__dialmycalls__dialmycalls_get_recording private-data, untrusted-input
mcp__dialmycalls__dialmycalls_list_keywords private-data, untrusted-input
mcp__dialmycalls__dialmycalls_list_do_not_contacts private-data
mcp__dialmycalls__dialmycalls_send_call outbound
mcp__dialmycalls__dialmycalls_send_text outbound
mcp__dialmycalls__dialmycalls_list_incoming_texts private-data, untrusted-input
mcp__dialmycalls__dialmycalls_get_incoming_text private-data, untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/dialmycalls/verify?hash=e54aa0022d879be67882bd14c50e01ef0bca6e6d77bb1c64b55660df292422c1" | jq -e '.changed == false'

Pinned hash e54aa0022d87, from Oct 24, 2026, 11:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.usefulapi/dialmycalls/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.usefulapi/dialmycalls.svg)](https://anlyon.dev/servers/io.usefulapi/dialmycalls)

Source: MCP Registry · repository. Synced Oct 24, 2026, 11:18 UTC.