Atlas / MCP servers / robdmac / Talkito

TalkitoBLOCK

Name: Talkito
Author: robdmac

mcp/robdmac/talkito

MCP server by robdmac · bolt new · claude · claude ai · Audited 2026-10-08

TalkiTo lets developers interact with AI systems through speech across multiple channels (terminal, API, phone). It can be used as both a command-line tool and a Python library.

Verdict

BLOCK

Grade

Trust score

54 /100

Exposed tools

36 21r · 15w · 0d

Transport

sse · stdio · streamable-http

License

AGPL-3.0

Stars

Overview

From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.

[](https://github.com/robdmac/talkito/stargazers) [](https://github.com/robdmac/talkito/network/members) [](https://github.com/robdmac/talkito/blob/main/LICENSE) [](https://discord.gg/WbP58Tym)

TalkiTo lets developers talk, slack and whatsapp with Claude Code and OpenAI Codex. It can be used as a command-line tool, a web extension, and as a Python library.

🚀 Quick Install

Option 1: One-liner Install Script (Recommended)

curl -sSL https://raw.githubusercontent.com/robdmac/talkito/main/install.sh | bash

Option 2: PyPI

pip install talkito

Then just run:

talkito claude

Install for End Users

From Source (Stable)

# Clone the repository
git clone https://github.com/robdmac/talkito.git
cd talkito

# Create and activate virtual environment (recommended)
python3 -m venv venv
source venv/bin/activate

# Install system dependencies (macOS)
brew install portaudio

# Install package (normal install - gets updates via git pull)
pip install .

# Run this in a directory you want to use claude with
talkito claude

Install for Developers

Editable Install (Development)

# Clone the repository
git clone https://github.com/robdmac/talkito.git
cd talkito

# Create and activate virtual environment (recommended)
python3 -m venv venv
source venv/bin/activate

# Install system dependencies (macOS)
brew install portaudio

# Install in development mode (editable install)
pip install -e .

# Run this in a directory you want to use claude with
talkito claude

or for the web extension run as

talkito --m

Read from source at commit 304e05cedea5OBSERVED · 2026-10-08

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.

claude-code

claude mcp add vite-react-typescript-starter --env ASSEMBLYAI_API_KEY=${ASSEMBLYAI_API_KEY} --env AZURE_SPEECH_KEY=${AZURE_SPEECH_KEY} --env BING_KEY=${BING_KEY} --env DEEPGRAM_API_KEY=${DEEPGRAM_API_KEY} -- npx -y [email protected]

claude-desktop

{
  "mcpServers": {
    "vite-react-typescript-starter": {
      "command": "npx",
      "args": [
        "-y",
        "[email protected]"
      ],
      "env": {
        "ASSEMBLYAI_API_KEY": "${ASSEMBLYAI_API_KEY}",
        "AZURE_SPEECH_KEY": "${AZURE_SPEECH_KEY}",
        "BING_KEY": "${BING_KEY}",
        "DEEPGRAM_API_KEY": "${DEEPGRAM_API_KEY}"
      }
    }
  }
}

Exposed tools (36)

21 read · 15 write · 0 destructive.

Tool	Risk	Description
`change_asr`	read
`change_tts`	read
`configure_asr`	read
`configure_communication`	read
`configure_tts`	read
`cycle_tts_voice`	read
`disable_asr`	write
`disable_tts`	write
`enable_asr`	write
`enable_tts`	write
`get_communication_status`	read
`get_dictated_text`	read
`get_messages`	read
`get_slack_mode_status`	read
`get_speech_status`	read
`get_talkito_status`	read
`get_talkito_version`	read	Get the current version of talkito
`get_whatsapp_mode_status`	read
`list_tts_voices`	read
`randomize_tts_voice`	read
`send_slack`	write
`send_whatsapp`	write
`set_asr_mode`	write
`set_tts_mode`	write	Set TTS mode
`skip_current_speech`	read
`speak_text`	read
`start_notification_stream`	write
`start_slack_mode`	write
`start_whatsapp_mode`	write
`stop_all_speech`	write
`stop_slack_mode`	write
`stop_voice_input`	write
`stop_whatsapp_mode`	write
`turn_off`	read
`turn_on`	read
`wait_for_speech_completion`	read

Trust audit

BLOCKgrade F · trust 54/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.

Layer	What it checks	Result
L0	Provenance & inventory	PASS
L1	Static analysis of the code	FAIL
L2	Instruction surface (what it tells the agent)	PASS
L3	Class-specific surface	PASS
L4	Behavioural (sandbox)	SKIPPED

What the source does

Filesystem: declared (4 observation(s))
Network: declared (9 observation(s))
Shell: declared (1 observation(s))
Dependencies: not all pinned
Secrets in source: found

Findings (18)

CRITICALHard-coded secrets · secret.slack · CWE-798, CWE-321

.env.example:43

# SLACK_BOT_TOKEN=xoxb-your-slack-bot-token

CRITICALHard-coded secrets · secret.slack · CWE-798, CWE-321

talkito/templates.py:81

# SLACK_BOT_TOKEN=xoxb-your-slack-bot-token

HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59

talkito/asr.py:1982

aws_note = "Requires AWS credentials (env vars, ~/.aws/credentials, or IAM role)"

Why it matters. touches a credential store

HIGHFilesystem / path · fs.credential_store · CWE-22, CWE-59

talkito/tts.py:1643

polly_note = "Requires AWS credentials (env vars, ~/.aws/credentials, or IAM role)"

Why it matters. touches a credential store

MEDIUMCode injection · code.dynamic_import · CWE-78, CWE-94, CWE-95

talkito/asr.py:383

importlib.import_module(module_name.split('.')[0])