Atlas / MCP servers / abhaybabbar / RetellAI

RetellAISAFE

Name: RetellAI
Author: abhaybabbar

mcp/abhaybabbar/retellai

MCP server by abhaybabbar · Audited 2026-10-08

⚑ Report / re-scan Source ↗

MCP server for retellai

Verdict

SAFE

Grade

Trust score

89 /100

Exposed tools

24 11r · 9w · 4d

Transport

stdio

License

—

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

This is a Model Context Protocol (MCP) server implementation for RetellAI, allowing AI assistants to interact with RetellAI's voice services.

Features

The RetellAI MCP server provides tools for:

Call Management: Create and manage phone calls and web calls
Agent Management: Create and manage voice agents with different LLM configurations
Phone Number Management: Provision and configure phone numbers
Voice Management: Access and use different voice options

Claude Desktop Setup

Open Claude Desktop and press CMD + , to go to Settings.
Click on the Developer tab.
Click on the Edit Config button.
This will open the claude_desktop_config.json file in your file explorer.
Get your Retell API key from the Retell dashboard ().
Add the following to your claude_desktop_config.json file. See here for more details.
Restart the Claude Desktop after editing the config file.

{
"mcpServers": {
"retellai-mcp-server": {
"command": "npx",
"args": ["-y", "@abhaybabbar/retellai-mcp-server"],
"env": {
"RETELL_API_KEY": ""
}
}
}
}

Troubleshooting: "No tools available"

If Claude Desktop shows the server but no tools, upgrade to the latest package version:

npx -y @abhaybabbar/retellai-mcp-server@latest

This issue is typically caused by dependency/version mismatch in older installs.

Example use cases:

List all the numbers I have in retellai
List all the agents I have
Tell me more about pizza delivery agent
Creating agent and calling example:
Create an agent that calls my local pizza shop, make sure to keep the conversation short and to the point.
Order a margeritta pizza
Payment will be done by cash on delivery
Send it to
The agent should pretend to be me. My nam

Read from source at commit 6d4648c169d7OBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add retellai-mcp-server --env RETELL_API_KEY=${RETELL_API_KEY} -- npx -y @abhaybabbar/[email protected]

claude-desktop

{
  "mcpServers": {
    "retellai-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@abhaybabbar/[email protected]"
      ],
      "env": {
        "RETELL_API_KEY": "${RETELL_API_KEY}"
      }
    }
  }
}

Exposed tools (24)

11 read · 9 write · 4 destructive. Blast radius: 4 tools can delete or overwrite — an agent that can be talked into calling a tool can be talked into calling this one.

Tool	Risk	Description
`create_agent`	write	Creates a new Retell agent
`create_phone_call`	write	Creates a new phone call
`create_phone_number`	write	Creates a new phone number
`create_retell_llm`	write	Creates a new Retell LLM
`create_web_call`	write	Creates a new web call
`delete_agent`	destructive	Deletes a Retell agent
`delete_call`	destructive	Deletes a call
`delete_phone_number`	destructive	Deletes a phone number
`delete_retell_llm`	destructive	Deletes a Retell LLM
`get_agent`	read	Gets a Retell agent by ID
`get_agent_versions`	read	Gets all versions of a Retell agent
`get_call`	read	Gets a call by ID
`get_phone_number`	read	Gets details of a specific phone number
`get_retell_llm`	read	Gets a Retell LLM by ID
`get_voice`	read	Gets details of a specific voice
`list_agents`	read	Lists all Retell agents
`list_calls`	read	Lists all calls
`list_phone_numbers`	read	Lists all Retell phone numbers
`list_retell_llms`	read	Lists all Retell LLMs
`list_voices`	read	Lists all available Retell voices
`update_agent`	write	Updates an existing Retell agent
`update_call`	write	Updates an existing call
`update_phone_number`	write	Updates a phone number
`update_retell_llm`	write	Updates an existing Retell LLM

Trust audit

SAFEgrade B · trust 89/100 Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	PASS
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	WARN
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (1 observation(s))
Network: none-observed
Shell: none-observed
Dependencies: not all pinned
Secrets in source: none-found

Findings (4)

MEDIUMFilesystem / path · mcp.destructive_tools · CWE-22, CWE-59

delete_agent, delete_call, delete_phone_number, delete_retell_llm

Why it matters. 4 tool(s) can delete or overwrite

Fix. prefer a read-only mode or scoped tokens; the page states the blast radius

LOWInventory / provenance · inv.hidden_file · CWE-1104

.env.sample

.env.sample

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose

LOWInventory / provenance · inv.no_license · CWE-1104

Why it matters. no LICENSE file and no repo licence

Fix. add a licence

LOWSupply chain · supply.unpinned · CWE-829, CWE-1357

package.json

@modelcontextprotocol/sdk, dotenv, retell-sdk, typescript

Why it matters. 4 dependency range(s) float

Fix. pin exact versions or ship a lockfile

Gates applied: no_behavioural_pass, no_license.

Audited 2026-10-08 · audit v0.4.1 · source sha 6d4648c169d7full audit observations/trust-audit/mcp-server/abhaybabbar__retellai.json · Report an issue / request a re-scan

Audit history

Every audit this server has had. A grade with a past is a grade somebody is still checking.

Date	Source	Verdict	Grade	Score	Change
2026-10-08	`6d4648c169d7`	SAFE	B	89	first audit

Questions

What is the RetellAI MCP server?

MCP server for retellai

What tools does RetellAI expose?

24 in total: 11 read-only, 9 that write, and 4 that can delete or overwrite (delete_agent, delete_call, delete_phone_number, delete_retell_llm). Every one is listed on this page with its risk.

Is RetellAI safe to connect to an agent?

The audit found nothing in the source that contradicts what it says it does, and graded it B (89/100). Grade A is held back for packages that have also passed a sandboxed behavioural run, which is why a clean server reads B. Separately from the audit: 4 of its tools can destroy data, so scope the token you give it to what you actually need.

What credentials does RetellAI need?

It reads RETELL_API_KEY from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.

How does RetellAI run?

It speaks stdio, so it runs as a local process your client starts. It is published on npm as @abhaybabbar/retellai-mcp-server at 1.0.4.

How current is this page?

The grade is for one exact copy of the source (6d4648c169d7), read on 2026-10-08. The repository is watched and re-audited when it changes.

Source	abhaybabbar/retellai-mcp-server
npm	`@abhaybabbar/retellai-mcp-server@1.0.4`
Transports	stdio
Credentials it reads	`RETELL_API_KEY`
Activity	pushed 181d ago