Numbers Online — phone intelligence
by numbers.online · remote · no sign-in to list tools · v1.0.0 · published by online.numbers
Read-only phone intelligence for AI voice agents — line type, risk, DNC, signed receipts.
4 tools: 1 change things and 3 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone0Claude Code: ask
- Changes things1Claude Code: ask: see these tools
- Only reads3Claude Code: allow: see these tools
1 check matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http numbers-online https://numbers.online/api/v1/mcpFindings
Matches of fixed checks, with the text they matched.
- Warnline_type
The server marks "line_type" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":true}; The name "line_type" says "type": a word for a change.
Tools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
4 tools
Changes things 1Claude Code: ask
line_typeReturn only the deterministic fields for a number — validity, line type (mobile / fixed line / VoIP / …), range carrier, country, and formatting.1 finding
Why it is in this group
- The name "line_type" says "type": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
The server marks "line_type" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
What this check looks forMatched text
annotations: {"readOnlyHint":true,"idempotentHint":true,"openWorldHint":true}; The name "line_type" says "type": a word for a change.
Description, as the server wrote it Return only the deterministic fields for a number — validity, line type (mobile / fixed line / VoIP / …), range carrier, country, and formatting. No paid dip; a free, fast classification a voice agent can call before deciding to enrich.
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: true
- title: Line type
Only reads 3Claude Code: allow
caller_riskReturn a labeled, low-confidence risk read for an inbound caller: a spam signal (0–100, higher = riskier), verstat passthrough, and a first-party do-not-contact (DNC) signal — with…No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it Return a labeled, low-confidence risk read for an inbound caller: a spam signal (0–100, higher = riskier), verstat passthrough, and a first-party do-not-contact (DNC) signal — without a name dip. A supplementary input to the agent's own policy, never a verdict on whether to accept or reject the call. Supply the call's STIR/SHAKEN verstat to fold it into the signal — a failed validation raises the risk.
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: true
- title: Caller risk signal
dnc_checkReturn a first-party do-not-contact signal (suppress / no_match / unknown) for a number, sourced ONLY from suppression preferences registered and verified by the number's own owner…No findings
Why it is in this group
- The description's first verb is "return": a word for reading.
Description, as the server wrote it Return a first-party do-not-contact signal (suppress / no_match / unknown) for a number, sourced ONLY from suppression preferences registered and verified by the number's own owner inside Numbers Online — never a copy of any government or licensed do-not-call registry. "suppress" = the owner asked not to be contacted on this channel; "no_match" = no suppression preference on record (absence of suppress is not consent); "unknown" = the number could not be evaluated. Comes with a signed receipt recording the status "as of T". Advisory input to the agent's own process — it does not assert that a call is lawful.
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: true
- title: Do-not-contact supplementary signal
phone_lookupReturn a supplementary, low-confidence intelligence bundle for a phone number: validity, formatting, line type, range carrier, country, caller name (CNAM, where available), STIR/SH…No findings
Why it is in this group
- The name "phone_lookup" says "lookup": a word for reading.
Description, as the server wrote it Return a supplementary, low-confidence intelligence bundle for a phone number: validity, formatting, line type, range carrier, country, caller name (CNAM, where available), STIR/SHAKEN verstat (supply the call's verstat to fold it into the spam signal), a labeled spam signal, and a first-party do-not-contact (DNC) signal — a suppression preference registered by the number's own owner, never a copy of any government registry. Advisory only — the agent keeps every routing and dialing decision.
Annotations the server declares
- readOnlyHint: true
- idempotentHint: true
- openWorldHint: true
- title: Phone number intelligence
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http numbers-online https://numbers.online/api/v1/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__numbers-online__phone_lookup",
"mcp__numbers-online__caller_risk",
"mcp__numbers-online__dnc_check"
],
"ask": [
"mcp__numbers-online__line_type"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as numbers-online. Review it before you use it.