botcall-mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited botcall-mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP server that gives AI agents real phone numbers. Provision a number, receive SMS, and extract verification codes — all through tool calls.
Install the MCP server:
claude mcp add botcall -- npx -y botcall-mcpThen set your API key:
export BOTCALL_API_KEY="bs_live_..."Or add to Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json):
{
"mcpServers": {
"botcall": {
"command": "npx",
"args": ["-y", "botcall-mcp"],
"env": {
"BOTCALL_API_KEY": "bs_live_..."
}
}
}
}Sign up at botcall.io, pick a plan, and grab your key from Dashboard → API Keys.
| Tool | Description |
|---|---|
provision_number | Provision a new phone number (optional: area code, country) |
list_numbers | List your provisioned phone numbers |
release_number | Release a phone number |
get_inbox | Get recent SMS messages |
get_code | Wait for an SMS and extract the verification code (long-polls up to 30s) |
get_usage | Get your plan, limits, and usage stats |
provision_number to get a phone numberget_code — it waits for the SMS and returns the extracted code| Variable | Description |
|---|---|
BOTCALL_API_KEY | Required. Your API key from botcall.io |
BOTCALL_API_URL | API base URL (default: https://api.botcall.io) |
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.