voicemode

Overview

From the repository's own README, as read at the audited commit.

# VoiceMode> Natural voice conversations with Claude Code (and other MCP capable agents)[![PyPI Downloads](https://static.pepy.tech/badge/voice-mode)](https://pepy.tech/project/voice-mode)[![PyPI Downloads](https://static.pepy.tech/badge/voice-mode/month)](https://pepy.tech/project/voice-mode)[![PyPI Downloads](https://static.pepy.tech/badge/voice-mode/week)](https://pepy.tech/project/voice-mode)VoiceMode enables natural voice conversations with Claude Code. Voice isn't about replacing typing - it's about being available when typing isn't.**Perfect for:**- Walking to your next meeting- Cooking while debugging- Giving your eyes a break after hours of screen time- Holding a coffee (or a dog)- Any moment when your hands or eyes are busy## See It In Action[![VoiceMode Demo](https://img.youtube.com/vi/cYdwOD_-dQc/maxresdefault.jpg)](https://www.youtube.com/watch?v=cYdwOD_-dQc)## Quick Start**Requirements:** Computer with microphone and speakers### Option 1: Claude Code Plugin (Recommended)The fastest way for Claude Code users to get started:```bash# Add the VoiceMode marketplaceclaude plugin marketplace add mbailey/voicemode# Install VoiceMode pluginclaude plugin install voicemode@voicemode## Install dependencies (CLI, Local Voice Services)/voicemode:install# Start talking!/voicemode:converse```### Option 2: Python installer packageInstalls dependencies and the VoiceMode Python package.```bash# Install UV package manager (if needed)curl -LsSf https://astral.sh/uv/install.sh | sh# Run the installer (sets up dependencies and local voice services)uvx voice-mode-install# Add to Claude Codeclaude mcp add --scope user voicemode -- uvx --refresh --from voice-mode voicemode-mcp-launcher# Optional: Add OpenAI API key as fallback for local servicesexport OPENAI_API_KEY=your-openai-key# Start a conversationclaude converse```For manual setup, see the [Getting Started Guide](docs/tutorials/getting-started.md).## Features- **Natural conversations** - speak naturally, hear responses im

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude mcp add voice-mode --env OPENAI_API_KEY=${OPENAI_API_KEY} -- None voice-mode==8.12.0

Exposed tools (25) 17 read · 4 write · 4 destructive

Blast radius: 4 tools can delete or overwrite. An agent that can be talked into calling a tool can be talked into calling this one.

Details

Source

mbailey/voicemode

PyPI

voice-mode

Transports

stdio · streamable-http

Credentials it reads

CARTESIA_API_KEYOPENAI_API_KEYVOICEMODE_CREDENTIAL_STOREVOICEMODE_MCP_TOKENVOICEMODE_SERVE_SECRETVOICEMODE_SERVE_TOKEN

License

MIT

Stars

1,364 · pushed 0d ago

Trust audit

Do not install this without reading the findings. The audit found something that could harm you or your machine.

What the source does

Filesystem

declared (5 observation(s))

Network

declared (1 observation(s))

Shell

declared (9 observation(s))

Dependencies

pinned

Secrets in source

none-found

Findings (25)

@CURRENT_VERSION=$$(uv run python -c "exec(open('voice_mode/__version__.py').read()); print(__version__)") && \

os.environ.copy() ... curl

.claude/scripts/voicemode-hook-receiver

install.sh

importlib.import_module(f".{module_name}", package=__name__)

importlib.import_module(f".{module_name}", package=__name__)

importlib.import_module(f".{tool_name}", package=__name__)

importlib.import_module(module_path, package=__name__)

| `VOICEMODE_MLX_AUDIO_BASE_URL`   | `http://127.0.0.1:8890/v1`                    | OpenAI-compatible mlx-audio endpoint                 |

sys.settrace(trace_calls)

- **UV** - Python package manager (install: `curl -LsSf https://astral.sh/uv/install.sh | sh`)

config_reload, kokoro_uninstall, voice_statistics_reset, whisper_uninstall

AGENTS.md

result = _run(_handler("../../etc/passwd"))

result = _run(_handler("../../etc/passwd"))

- `VOICEMODE_MLX_AUDIO_BASE_URL` (default `http://127.0.0.1:8890/v1`) -- OpenAI-compatible mlx-audio endpoint.

curl http://127.0.0.1:8880/docs

curl http://127.0.0.1:8880/openapi.json

curl http://127.0.0.1:8880/v1/models

src: url('data:font/woff2;base64,d09GMgABAAAAAAKgAA0AAAAAB8AAAAJOAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAABmAAgkIKgmSCFgsGAAE2AiQDCAQgBQYHLBttA8geh7HbZEkXzVA+8hE8v9bK9/v7cMBIgJBqYiTZU2BNROgoCXWqVuUE2BwBVW/MzP5

yield base64.b64decode(data_b64)

- **[Full permissions guide](../../../../docs/guides/permissions.md)** — permission levels (voice-only, voice+service, all-with-denies), security notes on what each tool can do, common JSON mistakes.

- Security concerns from running npm with elevated privileges

**Generate JWT tokens** for API access using development credentials:

- [Manage personal access tokens](https://docs.github.com/en/authentication/keeping-your-account-and-data-secure/managing-your-personal-access-tokens): You can use a personal access token in place of 

Gates applied: no_behavioural_pass.

Audited 2026-09-15 · audit v0.4.0 · source sha 41f91d5d341f · full audit: observations/trust-audit/mcp-server/mbailey__voicemode.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions