
Security News
Ruby's Bundler 4.0.18 Extends Cooldown to bundle lock and bundle cache
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.
@chamade/mcp-server
Advanced tools
MCP server for Chamade — voice gateway for AI agents. Join Discord, Teams, Meet, Telegram, SIP, Zoom meetings and interact via speech and text. Supports Claude Code channel mode for push events.
MCP (Model Context Protocol) server for Chamade — a voice gateway that lets your AI agent join voice meetings and phone calls on Discord, Microsoft Teams, Google Meet, Telegram, SIP, Zoom, Nextcloud Talk, and WhatsApp.
Your agent only deals with text. Chamade handles the audio layer: joining the meeting, transcribing what people say (STT), speaking replies aloud (TTS), and relaying chat messages.
Beta / early access — Chamade is currently free during early access, no credit card required. Sign up and get an API key in one minute.
npx @chamade/mcp-server
Requires CHAMADE_API_KEY env var. Get one at https://chamade.io/dashboard.
{
"agents": {
"list": [{
"id": "main",
"mcp": {
"servers": [{
"name": "chamade",
"command": "npx",
"args": ["-y", "@chamade/mcp-server"],
"env": {
"CHAMADE_API_KEY": "chmd_..."
}
}]
}
}]
}
}
~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": {
"chamade": {
"command": "npx",
"args": ["-y", "@chamade/mcp-server"],
"env": {
"CHAMADE_API_KEY": "chmd_..."
}
}
}
}
.mcp.json at the root of your project:
{
"mcpServers": {
"chamade": {
"command": "npx",
"args": ["-y", "@chamade/mcp-server", "--channel"],
"env": {
"CHAMADE_API_KEY": "chmd_..."
}
}
}
}
Then launch Claude Code with channels enabled:
claude --dangerously-load-development-channels server:chamade --continue
This is required every session. The --dangerously-load-development-channels flag is standard Claude Code naming for loading third-party channels not yet on the official allowlist — it is not dangerous. --continue resumes the current conversation.
With channel mode, transcripts, messages, and incoming calls are pushed to the agent in real-time — no polling needed.
.cursor/mcp.json or .windsurf/mcp.json — same format as Claude Desktop.
| Tool | Description |
|---|---|
chamade_call_join | Join a voice meeting (platform + meeting_url). |
chamade_call_say | Speak text aloud via TTS in the meeting. |
chamade_call_chat | Send a text chat message in the meeting. |
chamade_call_status | Get call state and new transcript lines (delta pattern). |
chamade_call_accept | Answer a ringing inbound call (SIP, etc.). |
chamade_call_refuse | Refuse/reject a ringing inbound call. |
chamade_call_typing | Send a typing indicator in meeting chat. |
chamade_call_leave | Hang up and leave the meeting. |
chamade_call_list | List all active calls. |
chamade_inbox | Check DM conversations (Discord, Telegram, Teams, WhatsApp, Slack). |
chamade_dm_chat | Send a DM message by platform. |
chamade_dm_typing | Send a typing indicator in DM by platform. |
chamade_account | Check account status, plan, credit/quota, and platform readiness. |
| URI template | Description |
|---|---|
chamade://calls/{call_id}/transcript | Live transcript. Subscribe for notifications/resources/updated push on each new line. Each read returns only new lines since last read. |
| Variable | Required | Default | Description |
|---|---|---|---|
CHAMADE_API_KEY | Yes | — | API key (chmd_*) from chamade.io/dashboard |
CHAMADE_URL | No | https://chamade.io | Chamade API base URL |
⚠️ Google Meet voice — beta limitation. Real-time audio capture on Meet relies on Google's Meet Media API, which is currently in Developer Preview. Every meeting participant must be individually enrolled in Google's program — if anyone isn't, audio capture fails. In practice, audio capture is not usable in real meetings with non-enrolled colleagues or external clients. Calendar integration and in-meeting chat work normally for everyone. For production voice use cases, prefer Teams, Discord, Nextcloud Talk, or SIP.
Agent (OpenClaw, Claude, ...)
│ MCP (stdio JSON-RPC)
▼
@chamade/mcp-server (runs locally)
│ HTTPS + WSS
▼
Chamade API (chamade.io)
│ HTTP + WS
▼
Maquisard bridge (handles audio, STT/TTS)
│
▼
Discord / Teams / Meet / ...
The MCP server is a thin client. It calls the Chamade REST API to create/manage calls and poll transcripts. Transcripts are exposed as an MCP resource with a delta-read pattern (only new lines since last read).
In channel mode (Claude Code and other clients that support MCP notifications), the server opens WebSocket connections to Chamade and pushes events directly to the agent — no polling loop needed. Transcripts, chat messages, incoming calls, and DMs all arrive as real-time notifications.
npm install
npm run dev # runs with tsx (hot reload)
npm run build # compiles to dist/
npm test # mock chamade server + JSON-RPC test client
MIT — see LICENSE.
FAQs
MCP server for Chamade — voice and chat gateway for AI agents. Joins Teams, Meet, Discord, Zoom, Telegram, WhatsApp, Slack, NC Talk, and SIP calls. Hosted STT/TTS with bring-your-own-key (ElevenLabs, Deepgram, OpenAI, Cartesia) — Chamade runs the full spe
The npm package @chamade/mcp-server receives a total of 90 weekly downloads. As such, @chamade/mcp-server popularity was classified as not popular.
We found that @chamade/mcp-server demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Security News
The supply chain control that delays freshly published gems now covers lockfile generation and gem vendoring in Ruby projects.

Security News
During a UK cyber test, a Mythos 5 agent used sockpuppets, social engineering, and prompt injection to try to get a maintainer to merge malware.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.