
Company News
AWS Security Hub Adds Socket for Supply Chain Security
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.
@mosadd/voice-truthgate-mcp
Advanced tools
MCP server for Voice Truthgate by mosADD — enrol a voice and verify a call clip with an honest authenticity verdict, from any AI agent.
Give any AI agent an honest "is this really my contact, on this call?" check. This MCP server wraps the Voice Truthgate market API as three tools:
| tool | what it does |
|---|---|
voice_truthgate_enroll | enrol a subject's voiceprint from 1+ clean clips (consent required) |
voice_truthgate_verify | verify a clip against a subject → honest verdict + confidence + clone caution |
voice_truthgate_list_subjects | list the subjects enrolled under your key |
The engine key and the biometric never touch this process — it only forwards your customer
X-API-Key.
{
"mcpServers": {
"voice-truthgate": {
"command": "npx",
"args": ["-y", "@mosadd/voice-truthgate-mcp"],
"env": { "VTG_API_KEY": "vtg_live_your_key_here" }
}
}
}
Optional VTG_API_URL overrides the endpoint (defaults to the hosted API). Needs Node ≥ 20.
"Verify the caller against subject
acme-ceo— the clip is at/tmp/call.wav."
The agent calls voice_truthgate_verify({ subject_id: "acme-ceo", audio_path: "/tmp/call.wav" })
and gets back e.g.:
{ "verdict": "likely_same_person", "score": 0.81, "confidence_band": "high",
"synthetic_caution": true, "synthetic_note": "A cloned/synthetic voice can also produce this match ..." }
A match is a supporting signal, not proof of a live human — in our own testing a targeted clone of an enrolled person was accepted ~63% of the time. For high-stakes actions (payments, access), combine this with an identity check and a liveness/challenge step. Voiceprints are biometric data; enrol only with the subject's consent and in line with applicable law.
FAQs
MCP server for Voice Truthgate by mosADD — enrol a voice and verify a call clip with an honest authenticity verdict, from any AI agent.
We found that @mosadd/voice-truthgate-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Did you know?

Socket for GitHub automatically highlights issues in each pull request and monitors the health of all your open source dependencies. Discover the contents of your packages and block harmful activity before you install or update your dependencies.

Company News
Socket is now in the AWS Security Hub Extended plan. Adopt it through AWS, apply committed spend, and block malicious open source packages.

Research
/Security News
Popular npm packages keyv and cacheable compromised.

Security News
A misconfiguration gave three Anthropic models internet access, and one, believing it was in a simulation, shipped a credential-stealing package to PyPI.