DialMCP Connector
Give your AI agent a phone.
Open-source connector for DialMCP — the hosted MCP server that lets AI agents place real phone calls from your own verified number.
What this is
DialMCP is a remote MCP server at https://mcp.dialmcp.com/mcp. Any client that speaks
Streamable HTTP with OAuth can connect to
it directly — no install, no API keys. You do not need this package for those clients.
This repository exists for two reasons:
- A stdio bridge for clients that only support local servers. Some MCP clients still can't talk to
remote servers.
dialmcp-connector launches a local stdio server that proxies to the hosted endpoint and
handles the OAuth browser flow for you.
- The open, canonical documentation of the DialMCP integration — tool schemas, client configs, the
server.json registry manifest, and the safety model — in one auditable place.
The hosted calling service itself is closed-source. This connector is MIT-licensed and contains no
proprietary logic: it is a thin transport shim over a public endpoint.
Quick start
Direct connection (preferred)
If your client supports remote MCP servers, skip this package entirely:
URL: https://mcp.dialmcp.com/mcp
Transport: Streamable HTTP
Auth: OAuth 2.1 (sign in with your phone number)
Claude Code
claude mcp add --transport http dialmcp https://mcp.dialmcp.com/mcp
Codex — ~/.codex/config.toml
[mcp_servers.dialmcp]
url = "https://mcp.dialmcp.com/mcp"
claude.ai / Claude Desktop
Settings → Connectors → Add custom connector → paste https://mcp.dialmcp.com/mcp.
Gamut
Settings → Connectors → Add MCP server → paste the URL (HTTP / OAuth) → complete SMS verification.
On first connect a browser window opens for sign-in. Verify your phone number with an SMS code — that
number becomes your caller ID.
Via this connector (stdio-only clients)
npx dialmcp-connector
Or in an MCP client config:
{
"mcpServers": {
"dialmcp": {
"command": "npx",
"args": ["-y", "dialmcp-connector"]
}
}
}
See examples/ for ready-to-paste configs.
Tools
place_call | Start an outbound phone call to a US or Canadian number with a stated objective. Returns immediately with a call ID — the call runs asynchronously. |
get_call | Fetch the current state of a call: status, live progress, and once finished the transcript, recording link, and structured resolution. Poll this after place_call. |
end_call | Hang up an in-progress call immediately. |
list_calls | List recent calls for the authenticated user with their statuses and outcomes. |
The API is async by design: place_call returns instantly with a call ID and your agent polls
get_call, so a multi-minute call never trips a client's tool timeout.
When a call completes, get_call returns a structured resolution — achieved, partially_achieved, or
not_achieved — with a summary, any commitments the other party made, suggested follow-ups, a
turn-by-turn transcript, and a signed link to the audio recording.
During the call the service presses keys through automated phone trees, waits silently through hold music,
and detects voicemail — hanging up rather than leaving a message.
Safety model
Every protection is enforced server-side, not as model instructions the agent could talk itself out of.
- Disclosure. Every call opens by stating it's an AI assistant, who it's calling for, and that the line
is recorded — before the ask. Compliance is independently verified against each transcript and logged. The
agent never denies being an AI, and ends the call if the callee objects.
- Your real number. Calls present your own SMS-verified caller ID. Nothing is spoofed, and recipients
can call you back.
- Rate limits. 1 concurrent call · 3/hour · 10/day · max 2/day to the same destination · 6-minute
default and 10-minute hard cap, watchdog-enforced. Bulk calling is impossible by construction.
- Time and place. 8:00–21:00 destination local time (TCPA-aligned), US and Canada only. Unknown time
zones are treated conservatively.
- Non-bypassable blocklist. Emergency services (911), premium-rate lines (900/976), and high-fraud
ranges can never be dialed.
- Permanent opt-outs. Do-not-call requests are confirmed on the call, caught by a second independent
transcript review, stored permanently, and enforced platform-wide across every user. Public self-serve
opt-out at https://mcp.dialmcp.com/opt-out — no account needed.
- Objective screening. An independent reviewer screens each call's stated objective for harassment,
deception, or fraud before dialing. The agent states only facts supplied in the task.
- Prohibited uses. Telemarketing, cold outreach, robocalling, surveys, lead generation, debt
collection, and political outreach are barred by the Terms.
Full detail: https://dialmcp.com/safety.html
Requirements
- Node.js 18 or newer (only if you use the stdio bridge)
- A US or Canadian mobile number for SMS verification
- Users must be 18 or older
Links
Contributing
Issues and pull requests are welcome for the connector, docs, and client configs. Bugs in the hosted
service itself are best sent to support@dialmcp.com. Please read SECURITY.md before
reporting anything security-related.
License
MIT © Datawizz Inc. See LICENSE.