Spoke Phone MCP by usefulapi
io.usefulapi/spoke-phoneusefulapi.iostreamable-httpv1.0.0Scanned
Read Spoke calls, transcripts, directory and users; manage phonebook contacts and send SMS.
27 tools: 2 can delete or cancel things, 1 do something that can't be undone and 24 only read.
- Reads private data · 5
- Reads text others write · 2
- Can send data out · 1
- No findings
Anlyon alternative
3 of these tools change something. Run those as governed actions.
Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.
Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.
Import an OpenAPI spec →Tools
Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.
27 tools
Deletes or cancels 2Claude Code: deny
spokephone_delete_phonebook_contactWRITE, destructive: delete one contact from a phonebook (it stops showing in caller ID).No findings
Why it is in this group
- The name "spokephone_delete_phonebook_contact" says "delete": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it WRITE, destructive: delete one contact from a phonebook (it stops showing in caller ID). DELETE /phonebooks/{id}/contacts/{contactId}.
Annotations the server declares
- title: Delete a phonebook contact
- readOnlyHint: false
- destructiveHint: true
spokephone_save_phonebook_contactWRITE: add a contact to a phonebook, REPLACING any contact there with the same contactId (other contacts are untouched).No findings
Why it is in this group
- The name "spokephone_save_phonebook_contact" says "save": a word for a change.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it WRITE: add a contact to a phonebook, REPLACING any contact there with the same contactId (other contacts are untouched). The phonebook id may be a user's email for a personal phonebook. Contacts feed caller ID. PUT /phonebooks/{id}/contacts.
Annotations the server declares
- title: Add or replace a phonebook contact
- readOnlyHint: false
- destructiveHint: true
Can't be undone 1Claude Code: ask
spokephone_send_smsWRITE: send a real SMS to a phone number (or a group MMS to several) from a company number or from a Spoke user's conversation number.Reads text others writeCan send data outNo findings
Why it is in this group
- The name "spokephone_send_sms" says "send": a word for sending, and what is sent cannot be taken back.
- The input addresses people (input.to): what it sends cannot be taken back.
What it can reach
- untrusted-inputThe server marks it openWorldHint: true: it reaches things outside the server's own data.
- outboundThe name "spokephone_send_sms" says "send": it sends or publishes something to other people.
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Description, as the server wrote it WRITE: send a real SMS to a phone number (or a group MMS to several) from a company number or from a Spoke user's conversation number. The message appears in the Spoke conversation. Confirm the recipient and text with the user first. Needs an SMS-enabled number. POST /conversationMessages.
Annotations the server declares
- title: Send an SMS
- readOnlyHint: false
- destructiveHint: false
- idempotentHint: false
- openWorldHint: true
Only reads 24Show 24 read-only tools
spokephone_get_callGet one call record by call id.No findings
Why it is in this group
- The name "spokephone_get_call" says "get": a word for reading.
Description, as the server wrote it Get one call record by call id.
Annotations the server declares
- title: Get a call
- readOnlyHint: true
spokephone_get_call_recordingGet the details and download URL of one recording of a call.Reads text others writeNo findings
Why it is in this group
- The name "spokephone_get_call_recording" says "get": a word for reading.
What it can reach
- untrusted-inputThe description's first sentence says "get" and "url": it reads web pages, which anyone can write.
Description, as the server wrote it Get the details and download URL of one recording of a call.
Annotations the server declares
- title: Get a call recording
- readOnlyHint: true
spokephone_get_content_analysisGet one content-analysis result by id.No findings
Why it is in this group
- The name "spokephone_get_content_analysis" says "get": a word for reading.
Description, as the server wrote it Get one content-analysis result by id.
Annotations the server declares
- title: Get an AI content analysis
- readOnlyHint: true
spokephone_get_directory_entryGet one directory entry (user, team or device) by entry id.Reads private dataNo findings
Why it is in this group
- The name "spokephone_get_directory_entry" says "get": a word for reading.
What it can reach
- private-dataThe name "spokephone_get_directory_entry" says "get" and "directory": it reads files.
- private-dataThe description's first sentence says "get" and "directory": it reads files.
Description, as the server wrote it Get one directory entry (user, team or device) by entry id.
Annotations the server declares
- title: Get a directory entry
- readOnlyHint: true
spokephone_get_locationGet one location by id.No findings
Why it is in this group
- The name "spokephone_get_location" says "get": a word for reading.
Description, as the server wrote it Get one location by id.
Annotations the server declares
- title: Get a location
- readOnlyHint: true
spokephone_get_phonebookGet one phonebook and a page of its contacts.Reads private dataNo findings
Why it is in this group
- The name "spokephone_get_phonebook" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "get" and "contact": it reads contacts.
Description, as the server wrote it Get one phonebook and a page of its contacts. The id may also be a user's email address for that user's personal phonebook.
Annotations the server declares
- title: Get a phonebook
- readOnlyHint: true
spokephone_get_phonebook_contactGet one contact of a phonebook.Reads private dataNo findings
Why it is in this group
- The name "spokephone_get_phonebook_contact" says "get": a word for reading.
What it can reach
- private-dataThe name "spokephone_get_phonebook_contact" says "get" and "contact": it reads contacts.
- private-dataThe description's first sentence says "get" and "contact": it reads contacts.
Description, as the server wrote it Get one contact of a phonebook.
Annotations the server declares
- title: Get a phonebook contact
- readOnlyHint: true
spokephone_get_transcriptGet one transcript by id.No findings
Why it is in this group
- The name "spokephone_get_transcript" says "get": a word for reading.
Description, as the server wrote it Get one transcript by id.
Annotations the server declares
- title: Get a transcript
- readOnlyHint: true
spokephone_get_transcript_segmentsGet the per-speaker segments of one transcript.No findings
Why it is in this group
- The name "spokephone_get_transcript_segments" says "get": a word for reading.
Description, as the server wrote it Get the per-speaker segments of one transcript.
Annotations the server declares
- title: Get transcript segments
- readOnlyHint: true
spokephone_get_trunkGet one SIP trunk by id.No findings
Why it is in this group
- The name "spokephone_get_trunk" says "get": a word for reading.
Description, as the server wrote it Get one SIP trunk by id.
Annotations the server declares
- title: Get a SIP trunk
- readOnlyHint: true
spokephone_get_userGet one Spoke user with availability, by user id.No findings
Why it is in this group
- The name "spokephone_get_user" says "get": a word for reading.
Description, as the server wrote it Get one Spoke user with availability, by user id.
Annotations the server declares
- title: Get a user
- readOnlyHint: true
spokephone_get_webhookGet one webhook subscription by id.No findings
Why it is in this group
- The name "spokephone_get_webhook" says "get": a word for reading.
Description, as the server wrote it Get one webhook subscription by id.
Annotations the server declares
- title: Get a webhook
- readOnlyHint: true
spokephone_list_call_content_analysisList the Enlighten AI content-analysis results (summaries etc.) stored for one call.No findings
Why it is in this group
- The name "spokephone_list_call_content_analysis" says "list": a word for reading.
Description, as the server wrote it List the Enlighten AI content-analysis results (summaries etc.) stored for one call.
Annotations the server declares
- title: List a call's AI analysis
- readOnlyHint: true
spokephone_list_callsList call records (oldest first by default; pass sortOrder descending for the latest calls), with caller, direction, duration, assigned user/team and recording URLs.No findings
Why it is in this group
- The name "spokephone_list_calls" says "list": a word for reading.
Description, as the server wrote it List call records (oldest first by default; pass sortOrder descending for the latest calls), with caller, direction, duration, assigned user/team and recording URLs. Filter by time window or the external party's number. Returns { meta: { next }, calls }.
Annotations the server declares
- title: List calls
- readOnlyHint: true
spokephone_list_content_analysisList AI content-analysis results (needs the Enlighten entitlement).No findings
Why it is in this group
- The name "spokephone_list_content_analysis" says "list": a word for reading.
Description, as the server wrote it List AI content-analysis results (needs the Enlighten entitlement). Filter by time, source, participant or artifact name.
Annotations the server declares
- title: List AI content analysis
- readOnlyHint: true
spokephone_list_directoryList or search the unified Spoke directory (users, teams, devices) with extensions and live availability.Reads private dataNo findings
Why it is in this group
- The name "spokephone_list_directory" says "list": a word for reading.
What it can reach
- private-dataThe name "spokephone_list_directory" says "list" and "directory": it reads files.
- private-dataThe description's first sentence says "list" and "directory": it reads files.
Description, as the server wrote it List or search the unified Spoke directory (users, teams, devices) with extensions and live availability. Exactly one of extension, phoneNumber or ivrKey may be used to look up an entry. Returns { meta: { next }, entries }.
Annotations the server declares
- title: List the directory
- readOnlyHint: true
spokephone_list_location_usersList the users assigned to one location.No findings
Why it is in this group
- The name "spokephone_list_location_users" says "list": a word for reading.
Description, as the server wrote it List the users assigned to one location.
Annotations the server declares
- title: List a location's users
- readOnlyHint: true
spokephone_list_locationsList the locations of the organisation.No findings
Why it is in this group
- The name "spokephone_list_locations" says "list": a word for reading.
Description, as the server wrote it List the locations of the organisation.
Annotations the server declares
- title: List locations
- readOnlyHint: true
spokephone_list_phonebooksList shared phonebooks (the CRM contact containers used for caller ID), each with its contacts.Reads private dataNo findings
Why it is in this group
- The name "spokephone_list_phonebooks" says "list": a word for reading.
What it can reach
- private-dataThe description's first sentence says "list" and "contact": it reads contacts.
Description, as the server wrote it List shared phonebooks (the CRM contact containers used for caller ID), each with its contacts. Use limit 0 to list phonebooks without contacts.
Annotations the server declares
- title: List phonebooks
- readOnlyHint: true
spokephone_list_teamsList Spoke teams (call groups) with their members and availability.No findings
Why it is in this group
- The name "spokephone_list_teams" says "list": a word for reading.
Description, as the server wrote it List Spoke teams (call groups) with their members and availability.
Annotations the server declares
- title: List teams
- readOnlyHint: true
spokephone_list_transcriptsList call and voicemail transcripts.No findings
Why it is in this group
- The name "spokephone_list_transcripts" says "list": a word for reading.
Description, as the server wrote it List call and voicemail transcripts. Filter by time window or source.
Annotations the server declares
- title: List transcripts
- readOnlyHint: true
spokephone_list_trunksList the SIP trunks that overlay a legacy PBX onto Spoke.No findings
Why it is in this group
- The name "spokephone_list_trunks" says "list": a word for reading.
Description, as the server wrote it List the SIP trunks that overlay a legacy PBX onto Spoke.
Annotations the server declares
- title: List SIP trunks
- readOnlyHint: true
spokephone_list_usersList active Spoke users with real-time availability.No findings
Why it is in this group
- The name "spokephone_list_users" says "list": a word for reading.
Description, as the server wrote it List active Spoke users with real-time availability. Optionally filter by email address.
Annotations the server declares
- title: List users
- readOnlyHint: true
spokephone_list_webhooksList the webhook subscriptions of the account.No findings
Why it is in this group
- The name "spokephone_list_webhooks" says "list": a word for reading.
Description, as the server wrote it List the webhook subscriptions of the account.
Annotations the server declares
- title: List webhooks
- readOnlyHint: true
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Exfil surface
Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.
10 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 1 outbound tool breaks every one.
- Reads private data5
- Reads files, mail, messages, databases, secrets, calendars or repositories.
- Reads text others write2
- Brings in text someone else can write: web pages, inbound email, messages, issues and comments.
- Can send data out1
- Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.
{
"permissions": {
"deny": [
"mcp__spoke-phone__spokephone_send_sms"
]
}
}Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.
Findings
Matches of fixed checks, with the text they matched.
No check matched anything in these tool definitions. That is not a safety guarantee.
History
Changes to its tool definitions and to its remote endpoint, newest first.
No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http spoke-phone https://spoke-phone.usefulapi.io/mcpclaude mcp add --transport http spoke-phone https://spoke-phone.usefulapi.io/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__spoke-phone__spokephone_list_calls",
"mcp__spoke-phone__spokephone_get_call",
"mcp__spoke-phone__spokephone_get_call_recording",
"mcp__spoke-phone__spokephone_list_call_content_analysis",
"mcp__spoke-phone__spokephone_list_directory",
"mcp__spoke-phone__spokephone_get_directory_entry",
"mcp__spoke-phone__spokephone_list_users",
"mcp__spoke-phone__spokephone_get_user",
"mcp__spoke-phone__spokephone_list_teams",
"mcp__spoke-phone__spokephone_list_locations",
"mcp__spoke-phone__spokephone_get_location",
"mcp__spoke-phone__spokephone_list_location_users",
"mcp__spoke-phone__spokephone_list_phonebooks",
"mcp__spoke-phone__spokephone_get_phonebook",
"mcp__spoke-phone__spokephone_get_phonebook_contact",
"mcp__spoke-phone__spokephone_list_transcripts",
"mcp__spoke-phone__spokephone_get_transcript",
"mcp__spoke-phone__spokephone_get_transcript_segments",
"mcp__spoke-phone__spokephone_list_content_analysis",
"mcp__spoke-phone__spokephone_get_content_analysis",
"mcp__spoke-phone__spokephone_list_webhooks",
"mcp__spoke-phone__spokephone_get_webhook",
"mcp__spoke-phone__spokephone_list_trunks",
"mcp__spoke-phone__spokephone_get_trunk"
],
"ask": [
"mcp__spoke-phone__spokephone_send_sms"
],
"deny": [
"mcp__spoke-phone__spokephone_save_phonebook_contact",
"mcp__spoke-phone__spokephone_delete_phonebook_contact"
]
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as spoke-phone. Review it before you use it.
Capability tags behind 7 rules
- mcp__spoke-phone__spokephone_get_call_recording untrusted-input
- mcp__spoke-phone__spokephone_list_directory private-data
- mcp__spoke-phone__spokephone_get_directory_entry private-data
- mcp__spoke-phone__spokephone_list_phonebooks private-data
- mcp__spoke-phone__spokephone_get_phonebook private-data
- mcp__spoke-phone__spokephone_get_phonebook_contact private-data
- mcp__spoke-phone__spokephone_send_sms untrusted-input, outbound
Pin
Keep the decision: fail CI when the tools change, follow every change, or show a badge.
Pin in CI
Fail a build when the tools you reviewed are not the tools the server serves today.
curl -s "https://anlyon.dev/api/v1/servers/io.usefulapi/spoke-phone/verify?hash=cd7c610282b59e6cda8c44afeec827b11b44537277e99fe8e9c2f36b863b03e8" | jq -e '.changed == false'Pinned hash cd7c610282b5, from Oct 26, 2026, 00:26 UTC.
Watch
Get told when its tools change: a new tool, a new description, a new class.
https://anlyon.dev/servers/io.usefulapi/spoke-phone/changes.xmlAn Atom feed. Works in any feed reader or Slack's RSS app.
Badge
[](https://anlyon.dev/servers/io.usefulapi/spoke-phone)Source: MCP Registry · repository. Synced Oct 26, 2026, 00:25 UTC.