Atlas / MCP servers / gerkensm / Callcenter.js

Callcenter.jsBLOCK

Name: Callcenter.js
Author: gerkensm

mcp/gerkensm/callcenter-js

MCP server by gerkensm · Audited 2026-10-10

⚑ Report / re-scan Source ↗

Callcenter.JS AI Voice Agent VOIP Connector, MCP + CLI

Verdict

BLOCK

Grade

Trust score

69 /100

Exposed tools

2 2r · 0w · 0d

Transport

—

License

NOASSERTION

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://deepwiki.com/gerkensm/callcenter.js-mcp)

An MCP Server, CLI tool, and API that makes phone calls on your behalf using VoIP.

Just tell Claude what you want to accomplish, and it will call and handle the conversation for you. This is essentially an MCP Server that bridges between OpenAI's Real-Time Voice API and your VoIP connection to call people on your behalf.

⚠️ Vibe-coded side project! Please do not use this in any kind of professional context. This is a side project coded in a weekend. There are no guard rails. Your MCP client can call any number with this, even if you don't ask it to. In fact, it has done so during testing - it called a random number during the night "for testing" and played back scary low-pitched noises - then claimed it called MY number. So YMMV, no warranties. See disclaimer below.

📞 Example: Order Pizza with Claude

You: "Can you call Tony's Pizza and order a large pepperoni pizza for delivery to 123 Main St? My name is John and my number is 555-0123."

Claude automatically calls the restaurant:

⏺ mcp__callcenter_js__simple_call(phone_number: "+15551234567", 
brief: "Call Tony's Pizza and order a large pepperoni pizza for delivery to 123 Main St. Customer name is John, phone number 555-0123", 
caller_name: "John")
⎿ # Simple Call Result

**Status:** ✅ Success  
**Duration:** 3 minutes 24 seconds
**Call ID:** abc123xyz

## Call Transcript

[14:23:15] 🎤 HUMAN: Tony's Pizza, how can I help you?
[14:23:15] 🤖 ASSISTANT: Hi! I'm calling on behalf of John to place a delivery order.
[14:23:20] 🎤 HUMAN: Sure! What would you like?
[14:23:20] 🤖 ASSISTANT: I'd like to order one large pepperoni pizza for delivery please.
[14:23:25] 🎤 HUMAN: Large pepperoni, got it. What's the delivery address

Read from source at commit 39db7944b43bOBSERVED · 2026-10-10

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add ai-voice-agent --env OPENAI_API_KEY=${OPENAI_API_KEY} --env SIP_PASSWORD=${SIP_PASSWORD} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "ai-voice-agent": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "OPENAI_API_KEY": "${OPENAI_API_KEY}",
        "SIP_PASSWORD": "${SIP_PASSWORD}"
      }
    }
  }
}

Exposed tools (2)

2 read · 0 write · 0 destructive.

Tool	Risk	Description
`end_call`	read	End the phone call immediately when requested or when conversation is complete
`simple_call`	read	Make an AI-powered phone call with automatic instruction generation. Requires a brief description, your name, and phone number. The system will use OpenAI

Trust audit

BLOCKgrade D · trust 69/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	WARN
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (5 observation(s))
Network: declared (7 observation(s))
Shell: declared (2 observation(s))
Dependencies: not all pinned
Secrets in source: none-found

Findings (14)

HIGHNetwork egress · net.tls_off · CWE-200, CWE-319

dist/sip-client.js:291

tls: this.config.tlsOptions || { rejectUnauthorized: false }

Why it matters. certificate verification is disabled

Fix. leave verification on

HIGHNetwork egress · net.tls_off · CWE-200, CWE-319

src/sip-client.ts:348

tls: this.config.tlsOptions || { rejectUnauthorized: false }

Why it matters. certificate verification is disabled

Fix. leave verification on

MEDIUMInventory / provenance · inv.binary · CWE-1104

dist/codecs/g722_wasm.wasm

g722_wasm.wasm

Why it matters. a compiled or binary member cannot be reviewed from source

Fix. ship source, or explain the binary in the README

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532

dist/cli.js:268

logger.info(`  - SIP username and password for your Fritz Box`);

MEDIUMInformation disclosure · disclose.log_secret · CWE-209, CWE-532

src/cli.ts:299

logger.info(`  - SIP username and password for your Fritz Box`);

LOWInventory / provenance · inv.hidden_file · CWE-1104

.claudeignore

.claudeignore

Why it matters. hidden member outside the usual dotfiles

Fix. review its purpose