The MCP toolkit for AI agents. Voice MCP gives your AI a phone line through your own Twilio. Coder MCP gives it a memory across every Claude Code, Codex CLI, and Cursor session. One npm package, two capability modules, local SQLite, no SaaS in the middle.
The MCP toolkit for AI agents. Two MCPs in one npm package, sharing one local SQLite, installing into the same MCP-aware hosts you already use.
Local-first. Bring your own Twilio. Bring your own LLM. No SaaS in the middle.
npm i -g crixin
crixin install # writes BOTH MCPs (voice + coder) into Claude Desktop, Claude Code, Cursor, Codex CLI
Escape hatches if you want one half only:
crixin voice install # only the phone half
crixin coder install # only the memory half
For Voice MCP, set Twilio creds in the env your AI host launches from:
export TWILIO_ACCOUNT_SID=ACxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
export TWILIO_AUTH_TOKEN=your_auth_token
export TWILIO_PHONE_NUMBER=+15555550100
export DEEPGRAM_API_KEY=... # optional — needed for Voice Wrapped + Caller Archetype
Don't want to bring your own Twilio? Grab an API key from the Crixin dashboard and set it instead — all six voice tools route through Crixin's hosted platform:
CRIXIN_API_KEY=crx_live_... npx -y crixin voice mcp
No TWILIO_* vars, no DEEPGRAM_API_KEY (transcription runs server-side). CRIXIN_API_BASE overrides the API origin if you need to. The geo-gate still runs locally — strict-consent destinations (US/UK/EU/AU) require consented: true either way.
Verify before you dial:
crixin voice doctor # BYO: one GET against Twilio. Platform mode: checks your key + minute quota. No charges.
For Coder MCP, ingest your AI coding history:
crixin coder ingest # pulls Claude Code, Codex CLI, Cursor sessions → ~/.crixin/crixin.db
The same six voice tools are served over Streamable HTTP by the hosted platform. Point any MCP host at the endpoint with your crx_live_… key:
claude mcp add --transport http crixin-voice https://crixin-platform.vercel.app/api/mcp \
--header "Authorization: Bearer crx_live_..."
Cursor / VS Code: add an HTTP MCP server with the same URL and Authorization header. ChatGPT: Settings → Connectors → Developer mode → add the URL. The endpoint is stateless (POST only); tool names, arguments and results are identical to the local server.
crixin-voice| Tool | What it does |
|---|---|
make_call | Outbound voice call. to + prompt (assistant speaks it; recipient response recorded), or raw TwiML. |
get_call | Status / duration / price / timestamps for one Call SID. |
list_calls | Recent calls — filter by to / from / status / start_time_after. |
list_recordings | Recordings + auth-protected media URLs for a Call SID. |
transcribe_call | Run a recording through Deepgram. 30+ languages including Arabic. |
send_sms | SMS / MMS through Twilio. Messaging Service support. |
crixin-coder| Tool | What it does |
|---|---|
search_sessions | Full-text search across every ingested Claude Code / Codex / Cursor session. |
list_recent_sessions | Newest sessions first, with project + token counts. |
get_session | Pull a full session transcript by ID. |
stats | Aggregate counts across the local SQLite store. |
# Voice MCP
crixin voice doctor # live-probe Twilio (no charges)
crixin voice call <to> [prompt] # one-off call from the CLI
crixin voice sms <to> <body> # one-off SMS
crixin voice ingest # pull recent Twilio calls + Deepgram transcripts → local SQLite
crixin voice wrapped --year 2026 # annual recap (HTML) — heatmaps, archetype, top destinations
crixin voice archetype # caller archetype reveal (Quick Pitcher / Patient Listener / …)
crixin voice mcp # run as a stdio MCP server (used by AI hosts via npx)
# Coder MCP
crixin coder ingest # ingest AI coding sessions → ~/.crixin/crixin.db
crixin coder search <query> # CLI search across sessions
crixin coder dashboard # local Hono dashboard on 127.0.0.1
crixin coder wrapped --year 2026 # annual recap (HTML) — top projects, monthly bars, archetype
crixin coder archetype # 11 archetypes — 5 for you, 6 for your AI
crixin coder mcp # run as a stdio MCP server (used by AI hosts via npx)
# Sync (Pro) — one account, every machine, same session list
crixin sync status # device + link state + queue counts (works on Free)
crixin sync link # opens browser to approve this device
crixin sync push # send metadata to the server (manual, foreground)
crixin sync pull # fetch peer metadata into the local inbox
crixin sync inbox # latest pulled records from your other machines
Metadata only. Sync v1 shares the session index across your machines — never message bodies, transcripts, credentials, phone numbers, or free-text tags. Your code never leaves your disk.
# Claude Code
claude mcp add crixin-voice -- npx -y crixin voice mcp
claude mcp add crixin-coder -- npx -y crixin coder mcp
# Cursor — append to ~/.cursor/mcp.json
{
"mcpServers": {
"crixin-voice": { "command": "npx", "args": ["-y","crixin","voice","mcp"] },
"crixin-coder": { "command": "npx", "args": ["-y","crixin","coder","mcp"] }
}
}
# Codex CLI — append to ~/.codex/config.toml
[mcp_servers.crixin-voice]
command = "npx"
args = ["-y","crixin","voice","mcp"]
[mcp_servers.crixin-coder]
command = "npx"
args = ["-y","crixin","coder","mcp"]
Or just run crixin install and let it wire everything for you.
Both halves emit a self-contained HTML report.
crixin voice wrapped # → ./crixin-voice-wrapped-2026.html
crixin coder wrapped # → ./crixin-coder-wrapped-2026.html
Hour-of-day heatmaps, monthly bars, archetype reveal (Patient Listener / Hard Closer / Ducker / Cowboy / Architect / …), top destinations or top projects, top languages or top models. PII-stripped. Shareable as a screenshot. No upload.
DEEPGRAM_API_KEY).<Say>. (Polly.Joanna-Neural for en-US, Polly.Hala-Neural for ar-EG, Polly.Lucia-Neural for es-ES, etc.)~/.crixin/crixin.db. Tables: voice_calls, voice_recordings, sessions, messages.| Tier | Price | What you get |
|---|---|---|
| Open Source | Free forever | Both MCPs, all tools, all Wrapped, all archetypes. MIT-licensed. Bring your own Twilio. |
| Crixin Unlimited | $9.99/mo | Hosted calling with no Twilio account: unlimited calls, one monthly fee. Premium voice for the first 60 minutes each month, then standard, then basic — the call always gets made. One call at a time per account. Platform mode (CRIXIN_API_KEY) and the remote MCP run on this plan. |
Existing Coder Pro ($5/mo: hosted Wrapped + crixin sync) keeps working and is being folded into Unlimited.
api.twilio.com directly with your auth header.Full policy: https://crixin.com/legal/privacy (effective June 17, 2026). In short:
~/.crixin/crixin.db on your machine. Your AI host sees tool results the same way it sees any other tool.CRIXIN_API_KEY or the remote MCP): the Crixin platform stores call metadata (numbers, timestamps, duration, status), recordings and transcripts you request, and usage counters for billing. Calls are carried by Twilio; transcription runs on Deepgram; hosted voice calls use OpenAI, Deepgram and ElevenLabs models. We do not sell data.Outbound calls to strict-consent jurisdictions (US, Canada, UK, IE, FR, ES, IT, NL, AU, NZ) require an explicit --consented flag or consented: true in the MCP tool args. Permissive jurisdictions (Egypt, UAE, KSA, Jordan, Kuwait, Qatar, Bahrain, Oman, Lebanon, Nigeria, ZA) dial without the flag. Germany is blocked outright. Override with CRIXIN_VOICE_ALLOWED_CC.
Install · Voice MCP · Coder MCP · Wrapped · Archetype · Pricing · FAQ
MIT. Built by @Mrdopplereffekt.
FAQs
The MCP toolkit for AI agents. Voice MCP gives your AI a phone line through your own Twilio. Coder MCP gives it a memory across every Claude Code, Codex CLI, and Cursor session. One npm package, two capability modules, local SQLite, no SaaS in the middle.
The npm package crixin receives a total of 58 weekly downloads. As such, crixin popularity was classified as not popular.
We found that crixin demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
Lovable’s OJ rewrites Vite’s dev server in Rust, reducing memory use and preview times as AI lowers the cost of open source reimplementation.
Security News
It has been one year since Shai-Hulud made its first appearance on npm.
Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.