Ucode SMS

by ucode.uk · remote · no sign-in to list tools · v1.1.0 · published by uk.ucode

Virtual phone numbers for SMS/OTP verification. Browse free; pay with credits or USDC (x402).

Deletes · 2Final · 7Changes · 351 high finding

Compare Registry entry

50 tools: 2 can delete or cancel things, 7 do something that can't be undone, 35 change things and 6 only read.

Scanned Oct 21, 2026

Deletes or cancels2Claude Code: deny: see these tools
Can't be undone7Claude Code: ask: see these tools
Changes things35Claude Code: ask: see these tools
Only reads6Claude Code: allow: see these tools

9 checks matched something in the tool definitions. No finding is not a safety guarantee. How the checks work.

claude mcp add --transport http sms https://mcp.ucodesim.com/mcp

Findings

Matches of fixed checks, with the text they matched.

1 high8 warn

Highucode_sms_rent_with_credits
The description contains "Never mention wholesale/provider IDs or dollar amounts to the user", an instruction to keep something from the user.
Matched text
description: "...e_sms_rent_packages** (matches mobile). Never mention wholesale/provider IDs or dollar amounts to the user."
What this check looks for
Warnucode_render_home
The server marks "ucode_render_home" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The description's first verb is "call": a word for a change.
What this check looks for
Warnucode_render_services
The server marks "ucode_render_services" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The description's first verb is "open": a word for a change.
What this check looks for
Warnucode_connect
The server marks "ucode_connect" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The description's first verb is "start": a word for a change.
What this check looks for
Warnucode_login_start
The server marks "ucode_login_start" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "ucode_login_start" says "start": a word for a change.
What this check looks for
Warnucode_render_credits
The server marks "ucode_render_credits" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The description's first verb is "open": a word for a change.
What this check looks for

Show 3 more findings

Warnucode_payments_stripe_prices
The server marks "ucode_payments_stripe_prices" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "ucode_payments_stripe_prices" says "payment": a word that usually means money moves, which cannot be taken back.
What this check looks for
Warnucode_payments_nowpayments_status
The server marks "ucode_payments_nowpayments_status" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "ucode_payments_nowpayments_status" says "payment": a word that usually means money moves, which cannot be taken back.
What this check looks for
Warnucode_app_init_snapshot
The server marks "ucode_app_init_snapshot" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
Matched text
annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "ucode_app_init_snapshot" says "init": a word for a change.
What this check looks for

Tools

Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.

50 tools

Deletes or cancels 2Removes, cancels or revokes something.Claude Code: deny

ucode_agent_cancelCancel an agent rental when no SMS arrived; credits return to the agent wallet.No findings
Why it is in this group
- The name "ucode_agent_cancel" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Cancel an agent rental when no SMS arrived; credits return to the agent wallet. Requires the uc_live_ API key.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: true
ucode_sms_cancel_rentalCancel an active rental and refund credits when no SMS has arrived.No findings
Why it is in this group
- The name "ucode_sms_cancel_rental" says "cancel": a word for removing or ending something.
- The server marks it destructive (destructiveHint: true).
Description, as the server wrote it
Cancel an active rental and refund credits when no SMS has arrived. Requires a cancel reason for analytics. Reasons: service_rejected | number_has_account | code_not_arrived | other. If an SMS arrives during cancel, credits stay charged and the code is returned.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: true

Can't be undone 7Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

ucode_credits_verify_app_store_purchaseServer-side verify of RevenueCat / store purchase (same as mobile).No findings
Why it is in this group
- The name "ucode_credits_verify_app_store_purchase" says "store": a word for a change.
- The name "ucode_credits_verify_app_store_purchase" also says "purchase": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Server-side verify of RevenueCat / store purchase (same as mobile). Requires packageId, transactionId, productId, platform (iOS/Android), and purchaseToken for Android.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
ucode_payments_nowpayments_createCreates a crypto invoice (NOWPayments) for human web/Telegram top-ups.No findings
Why it is in this group
- The name "ucode_payments_nowpayments_create" says "payment": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Creates a crypto invoice (NOWPayments) for human web/Telegram top-ups. ChatGPT humans should use **https://ucode.uk/app/credits** instead. Autonomous agents/bots must pay **USDC on Base via x402**, not NOWPayments.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
ucode_payments_nowpayments_statusPoll invoice / payment status by NOWPayments id.1 finding
Why it is in this group
- The name "ucode_payments_nowpayments_status" says "payment": a word that usually means money moves, which cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "ucode_payments_nowpayments_status" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "ucode_payments_nowpayments_status" says "payment": a word that usually means money moves, which cannot be taken back.
  What this check looks for
Description, as the server wrote it
Poll invoice / payment status by NOWPayments id.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_payments_stripe_create_checkout**Do not use in ChatGPT.** In-card Stripe is blocked.No findings
Why it is in this group
- The name "ucode_payments_stripe_create_checkout" says "payment": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
**Do not use in ChatGPT.** In-card Stripe is blocked. For humans, call **ucode_render_credits** and open **https://ucode.uk/app/credits**. For agents/bots, call **ucode_agent_billing** and pay USDC on Base via x402.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
ucode_payments_stripe_prices**Rare.** Resolve fiat display for Stripe IDs — do **not** read raw **prod_**/ **price_** strings to end users; use **ucode_credit_packages** for storefront-style copy.1 finding
Why it is in this group
- The name "ucode_payments_stripe_prices" says "payment": a word that usually means money moves, which cannot be taken back.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "ucode_payments_stripe_prices" read-only (readOnlyHint: true), and its own name, description or input give the class "irreversible".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "ucode_payments_stripe_prices" says "payment": a word that usually means money moves, which cannot be taken back.
  What this check looks for
Description, as the server wrote it
**Rare.** Resolve fiat display for Stripe IDs — do **not** read raw **prod_**/ **price_** strings to end users; use **ucode_credit_packages** for storefront-style copy.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_payments_stripe_verifyAfter Checkout completes, pass checkout **session id** plus **packageId** so Panel credits the account.No findings
Why it is in this group
- The name "ucode_payments_stripe_verify" says "payment": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
After Checkout completes, pass checkout **session id** plus **packageId** so Panel credits the account.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
ucode_sms_refund_expiredTrigger server-side refund scan for expired rentals (same as app).No findings
Why it is in this group
- The name "ucode_sms_refund_expired" says "refund": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it
Trigger server-side refund scan for expired rentals (same as app).
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false

Changes things 35Creates or changes something that can be changed back.Claude Code: ask

ucode_agent_billingNo login.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
No login. Lists prepaid credit packs priced in USDC on Base for autonomous agents/bots (packageId, credits, usd, payTo). Buy one with **ucode_agent_buy_credits**. Signed-in humans pay by card at https://ucode.uk/app/credits instead (**ucode_render_credits**).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_agent_buy_creditsAutonomous agents: buy a prepaid credit pack with USDC on Base using the x402 protocol — no account or card needed.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Autonomous agents: buy a prepaid credit pack with USDC on Base using the x402 protocol — no account or card needed. Step 1: call with {pack, acceptLawfulUse:true} (no paymentHeader) → returns PAYMENT_REQUIRED with exact x402 requirements. Step 2: sign that payment with your x402 wallet and call again with paymentHeader → credits are added and a uc_live_ API key is returned (shown once, also stored for this MCP session). Pack ids come from ucode_agent_billing (aliases: starter, plus, pro). Only spend what the user approved.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
ucode_agent_check_smsPoll an agent rental for the SMS/OTP.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Poll an agent rental for the SMS/OTP. Pass id and pollToken from ucode_agent_rent (or rely on the session API key).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_agent_quoteExact USDC (Base) price to rent ONE number for a service/country without prepaid credits.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Exact USDC (Base) price to rent ONE number for a service/country without prepaid credits. Use the 'service' code from ucode_find_numbers and a countryId.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_agent_rentRent one virtual number for a lawful SMS verification.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Rent one virtual number for a lawful SMS verification. Pays from the agent wallet when a uc_live_ API key is active (from ucode_agent_buy_credits, ucode_agent_use_api_key, or an Authorization: Bearer uc_live_… header on the MCP connection). Without a key it uses pay-per-SMS: first call returns PAYMENT_REQUIRED (x402, USDC on Base); call again with paymentHeader. Returns phone, id and pollToken → then call ucode_agent_check_sms. Signed-in human accounts should use ucode_sms_rent_with_credits instead.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
ucode_agent_use_api_keyActivate a previously issued uc_live_ agent API key for this MCP session (for clients that cannot set an Authorization header).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Activate a previously issued uc_live_ agent API key for this MCP session (for clients that cannot set an Authorization header).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_agent_walletCredit balance of the agent wallet behind the active uc_live_ API key.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Credit balance of the agent wallet behind the active uc_live_ API key.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_app_init_snapshotCombined snapshot (packages, rentals, credit status, settings).1 finding
Why it is in this group
- The name "ucode_app_init_snapshot" says "init": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "ucode_app_init_snapshot" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "ucode_app_init_snapshot" says "init": a word for a change.
  What this check looks for
Description, as the server wrote it
Combined snapshot (packages, rentals, credit status, settings). Use platform web for ChatGPT (Stripe/crypto web packages); ios/android for native.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_authenticateHidden escape hatch: only if the user explicitly already has a mobile Bearer token and asks to use it.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Hidden escape hatch: only if the user explicitly already has a mobile Bearer token and asks to use it. Do NOT suggest this for normal sign-in — use ucode_login_start + ucode_login_poll instead.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
ucode_connectStarts browser sign-in for the visual card **Connect** button.1 finding
Why it is in this group
- The description's first verb is "start": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "ucode_connect" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The description's first verb is "start": a word for a change.
  What this check looks for
Description, as the server wrote it
Starts browser sign-in for the visual card **Connect** button. Returns linkUrl + sessionId with uiView sign-in. Poll **ucode_login_poll** until linked.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_credit_gift_breakdownFree-credit badges / gift breakdown.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Free-credit badges / gift breakdown.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_credit_packagesSame packs as **ucode_render_credits** (data).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Same packs as **ucode_render_credits** (data). Prefer **ucode_render_credits**; credits are added on the Ucode website dashboard, never in chat.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_credit_referral_redeemApply a friend's referral code (once per account, only if the referral program is active).No findings
Why it is in this group
- The description's first verb is "apply": a word for a change.
- The input takes a statement or command to run (input.code), which can change anything it can reach.
Description, as the server wrote it
Apply a friend's referral code (once per account, only if the referral program is active). Never guess, generate or loop over codes.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
ucode_credit_referral_statsReferral code and earnings summary.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Referral code and earnings summary.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_disconnectSign out / unlink this ChatGPT conversation from Ucode.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Sign out / unlink this ChatGPT conversation from Ucode. Clears the MCP session only (not account deletion). Use when the user asks to sign out, log out, disconnect, or switch accounts. Shows the welcome card with **Connect** again.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
ucode_helpOptional natural-language help about Ucode features and flows.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Optional natural-language help about Ucode features and flows. Uses the OpenAI key from Panel (Settings → ChatGPT App) when set, else OPENAI_API_KEY on the MCP host. Respects the “AI help” toggle in Panel.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: true
- destructiveHint: false
ucode_instructionsFull product guide (read-only).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Full product guide (read-only). **Not for the first message** — use **ucode_welcome** first. If the user is not signed in, call **ucode_welcome** / **ucode_login_start** instead of answering rental questions. Official site https://ucode.uk.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_login_pollPoll after **ucode_login_start**.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Poll after **ucode_login_start**. Links the ChatGPT session when the user has finished in the browser — **call repeatedly** until complete; do not ask users to paste tokens or to type “done” as the only completion signal.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_login_startCreates a one-time browser sign-in URL.1 finding
Why it is in this group
- The name "ucode_login_start" says "start": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "ucode_login_start" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The name "ucode_login_start" says "start": a word for a change.
  What this check looks for
Description, as the server wrote it
Creates a one-time browser sign-in URL. Prefer the in-card **Connect** button (**ucode_connect**). Poll **ucode_login_poll(sessionId)** until linked.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_render_creditsOpens the **Add credits** card with the current wallet balance.1 finding
Why it is in this group
- The description's first verb is "open": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "ucode_render_credits" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The description's first verb is "open": a word for a change.
  What this check looks for
Description, as the server wrote it
Opens the **Add credits** card with the current wallet balance. Payments never happen in chat — the user taps through to **https://ucode.uk/app/credits**. After they add credits there, call **ucode_credits_status**. No payment details are collected in chat.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_render_home**Call on the first user message** in every new chat.1 finding
Why it is in this group
- The description's first verb is "call": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "ucode_render_home" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The description's first verb is "call": a word for a change.
  What this check looks for
Description, as the server wrote it
**Call on the first user message** in every new chat. Renders the interactive Ucode card with a **Connect Ucode account** button. Until linked, only welcome/connect/login tools — never rent or checkout.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_render_servicesOpens the **visual service picker** (popular apps + search).1 finding
Why it is in this group
- The description's first verb is "open": a word for a change.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Findings
- Warn
  The server marks "ucode_render_services" read-only (readOnlyHint: true), and its own name, description or input give the class "write".
  Matched text
  annotations: {"readOnlyHint":true,"destructiveHint":false,"openWorldHint":false}; The description's first verb is "open": a word for a change.
  What this check looks for
Description, as the server wrote it
Opens the **visual service picker** (popular apps + search). Call after sign-in or when the user wants a number — same data as **ucode_sms_summary** but optimized for the in-chat card.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_services_catalogPaginated Ucode service catalog with per-country availability from the Panel database.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Paginated Ucode service catalog with per-country availability from the Panel database.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_sign_outSame as **ucode_disconnect** — unlinks Ucode from this ChatGPT chat.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Same as **ucode_disconnect** — unlinks Ucode from this ChatGPT chat. Call for sign out, log out, or disconnect requests.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
ucode_sms_active_rentalsActive/received rentals with SMS snippets if already fetched.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Active/received rentals with SMS snippets if already fetched.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_sms_countriesRaw worldwide country id table — pairs with legacy APIs only.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Raw worldwide country id table — pairs with legacy APIs only. For renting, use **ucode_sms_summary** / **ucode_sms_service_detail** so users pick by country name + credits.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_sms_prices**Avoid for ChatGPT users.** Uses backend USD-ish snapshots; assistants must guide rentals via credits-only summaries (**ucode_sms_summary**, **ucode_sms_service_detail**) and **uc…No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
**Avoid for ChatGPT users.** Uses backend USD-ish snapshots; assistants must guide rentals via credits-only summaries (**ucode_sms_summary**, **ucode_sms_service_detail**) and **ucode_sms_rent_packages**. Responses are partially sanitized.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_sms_rent_packagesAfter user picks **serviceCode** + **country** (numeric id from summary/detail), list **credit-priced routes** only.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
After user picks **serviceCode** + **country** (numeric id from summary/detail), list **credit-priced routes** only. Same package picker as the app (rentalFlowVersion 2). Present **credits**, recommended badge, labels — never quote USD or backend provider names.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_sms_rent_provider_direct**Do not use for ChatGPT end users.** Legacy rental against upstream balances — skips normal credit UX and exposes provider-era assumptions.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
**Do not use for ChatGPT end users.** Legacy rental against upstream balances — skips normal credit UX and exposes provider-era assumptions. Only **ucode_sms_rent_with_credits** with packages.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: true
- destructiveHint: false
ucode_sms_rent_with_credits**Primary rental** — charges Ucode credits.1 finding
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Findings
- High
  The description contains "Never mention wholesale/provider IDs or dollar amounts to the user", an instruction to keep something from the user.
  Matched text
  description: "...e_sms_rent_packages** (matches mobile). Never mention wholesale/provider IDs or dollar amounts to the user."
  What this check looks for
Description, as the server wrote it
**Primary rental** — charges Ucode credits. Always use **rentalFlowVersion: 2** and **packageId** from **ucode_sms_rent_packages** (matches mobile). Never mention wholesale/provider IDs or dollar amounts to the user.
Annotations the server declares
- readOnlyHint: false
- openWorldHint: false
- destructiveHint: false
ucode_sms_service_detailLoad one service’s countries after you have its short **serviceCode** (from summary `service` field).No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Load one service’s countries after you have its short **serviceCode** (from summary `service` field). Matches opening that service in the iOS/Android app: availability, credits per country. Prefer over legacy `/prices` APIs.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_sms_servicesLow-level provider service codes — exposes internal naming.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Low-level provider service codes — exposes internal naming. Do NOT use for normal rentals; prefer **ucode_sms_summary** or **ucode_sms_service_detail** then credits-only packages.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_sms_summaryPrimary discovery: search by app/service name (e.g.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Primary discovery: search by app/service name (e.g. Telegram, WhatsApp). Returns services with countries, **credits** only (no provider names / no USD in assistant copy). Same idea as the app Services tab. Then **ucode_sms_service_detail** or go straight to **ucode_sms_rent_packages** once service + country are chosen.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_sms_transactionsProvider ledger audit trail — sanitized before ChatGPT.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Provider ledger audit trail — sanitized before ChatGPT. Prefer explaining rentals via **ucode_sms_active_rentals** for users.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_welcomeSame as **ucode_render_home** — product summary + sign-in card.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
- The server marks it read-only (readOnlyHint: true), but an annotation never lowers a class.
Description, as the server wrote it
Same as **ucode_render_home** — product summary + sign-in card. Prefer **ucode_render_home** on first message.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false

Only reads 6Looks things up and changes nothing.Claude Code: allow

ucode_credits_statusLinked wallet — **credits** are in-app points for renting numbers, not a bank balance.No findings
Why it is in this group
- The name "ucode_credits_status" says "status": a word for reading.
Description, as the server wrote it
Linked wallet — **credits** are in-app points for renting numbers, not a bank balance. Always say “you have X credits”. After the user adds credits on the dashboard, call this so the ChatGPT card refreshes. Never imply USD wallet unless discussing listed pack prices.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_find_numbersNo sign-in needed.No findings
Why it is in this group
- The name "ucode_find_numbers" says "find": a word for reading.
Description, as the server wrote it
No sign-in needed. Search which apps/services (Telegram, WhatsApp, Google, OpenAI…) have virtual numbers in stock, by country, with the price in Ucode credits. Use this first whenever someone asks for a number or a price. Then: signed-in humans rent with ucode_sms_rent_packages → ucode_sms_rent_with_credits; autonomous agents use ucode_agent_buy_credits / ucode_agent_rent.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_panel_pingPublic health check against Ucode Panel (no auth).No findings
Why it is in this group
- The name "ucode_panel_ping" says "ping": a word for reading.
Description, as the server wrote it
Public health check against Ucode Panel (no auth). Official downloads and info: https://ucode.uk — do not use unrelated domains (e.g. ucode.io).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_session_statusCheck whether this ChatGPT session is linked to Ucode.No findings
Why it is in this group
- The name "ucode_session_status" says "status": a word for reading.
Description, as the server wrote it
Check whether this ChatGPT session is linked to Ucode. Use at chat start; if connected is false, run **ucode_render_home** — do not process rental requests. If they already have a live number, the card shows it.
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_sms_get_codePoll latest SMS for a rental id (provider rental id string).No findings
Why it is in this group
- The name "ucode_sms_get_code" says "get": a word for reading.
Description, as the server wrote it
Poll latest SMS for a rental id (provider rental id string).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false
ucode_whoamiCurrent linked Ucode user (requires ucode_login_poll complete or ucode_authenticate).No findings
Why it is in this group
- The name "ucode_whoami" says "whoami": a word for reading.
Description, as the server wrote it
Current linked Ucode user (requires ucode_login_poll complete or ucode_authenticate).
Annotations the server declares
- readOnlyHint: true
- openWorldHint: false
- destructiveHint: false

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Install

Pinned to version 1.1.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http sms https://mcp.ucodesim.com/mcp

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__sms__ucode_session_status",
      "mcp__sms__ucode_panel_ping",
      "mcp__sms__ucode_whoami",
      "mcp__sms__ucode_credits_status",
      "mcp__sms__ucode_sms_get_code",
      "mcp__sms__ucode_find_numbers"
    ],
    "ask": [
      "mcp__sms__ucode_render_home",
      "mcp__sms__ucode_render_services",
      "mcp__sms__ucode_welcome",
      "mcp__sms__ucode_agent_billing",
      "mcp__sms__ucode_instructions",
      "mcp__sms__ucode_help",
      "mcp__sms__ucode_connect",
      "mcp__sms__ucode_login_start",
      "mcp__sms__ucode_login_poll",
      "mcp__sms__ucode_authenticate",
      "mcp__sms__ucode_disconnect",
      "mcp__sms__ucode_sign_out",
      "mcp__sms__ucode_render_credits",
      "mcp__sms__ucode_credit_packages",
      "mcp__sms__ucode_credit_gift_breakdown",
      "mcp__sms__ucode_credit_referral_stats",
      "mcp__sms__ucode_credit_referral_redeem",
      "mcp__sms__ucode_payments_stripe_prices",
      "mcp__sms__ucode_payments_stripe_create_checkout",
      "mcp__sms__ucode_payments_stripe_verify",
      "mcp__sms__ucode_payments_nowpayments_create",
      "mcp__sms__ucode_payments_nowpayments_status",
      "mcp__sms__ucode_credits_verify_app_store_purchase",
      "mcp__sms__ucode_services_catalog",
      "mcp__sms__ucode_sms_services",
      "mcp__sms__ucode_sms_countries",
      "mcp__sms__ucode_sms_prices",
      "mcp__sms__ucode_sms_summary",
      "mcp__sms__ucode_sms_service_detail",
      "mcp__sms__ucode_sms_rent_packages",
      "mcp__sms__ucode_sms_rent_with_credits",
      "mcp__sms__ucode_sms_rent_provider_direct",
      "mcp__sms__ucode_sms_active_rentals",
      "mcp__sms__ucode_sms_refund_expired",
      "mcp__sms__ucode_sms_transactions",
      "mcp__sms__ucode_app_init_snapshot",
      "mcp__sms__ucode_agent_quote",
      "mcp__sms__ucode_agent_buy_credits",
      "mcp__sms__ucode_agent_rent",
      "mcp__sms__ucode_agent_check_sms",
      "mcp__sms__ucode_agent_wallet",
      "mcp__sms__ucode_agent_use_api_key"
    ],
    "deny": [
      "mcp__sms__ucode_sms_cancel_rental",
      "mcp__sms__ucode_agent_cancel"
    ]
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as sms. Review it before you use it.

Keep track

Get told when this server's tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/uk.ucode/sms/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Anlyon alternative

44 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Compare with other servers for the same product.

Source: MCP Registry. Synced Oct 21, 2026, 18:55 UTC.

For agents: Markdown · JSON · report this listing