
Security News
Happy Birthday, Shai-Hulud
It has been one year since Shai-Hulud made its first appearance on npm.
ictdialer-mcp
Advanced tools
Model Context Protocol server for ICTDialer. Lets AI assistants monitor outbound auto-dialer campaigns and, with writes enabled, start and stop them.
A Model Context Protocol server for ICTDialer — the cloud auto-dialer and predictive-dialer platform from ICT Innovations. ICTDialer.com is the hosted edition of ICTContact and runs the same engine, so this server speaks that API.
It lets an AI assistant monitor outbound campaigns — list them, check status, read summaries and per-call results — and, only when you turn writes on, start and stop them.
npx -y ictdialer-mcp # no install
npm install -g ictdialer-mcp
Requires Node.js 18 or newer.
| Variable | Required | Default | |
|---|---|---|---|
ICTDIALER_BASE_URL | yes | Server base URL, without the /rest suffix, e.g. https://your-ictdialer | |
ICTDIALER_USERNAME | yes | API account username | |
ICTDIALER_PASSWORD | yes | Password for that account | |
ICTDIALER_MCP_ALLOW_WRITE | no | false | Unlock start/stop campaign (see Safety) |
ICTDIALER_TIMEOUT_MS | no | 30000 | Per-request timeout |
ICTDIALER_TLS_INSECURE | no | false | Skip TLS verification — self-signed test servers only |
{
"mcpServers": {
"ictdialer": {
"command": "npx",
"args": ["-y", "ictdialer-mcp"],
"env": {
"ICTDIALER_BASE_URL": "https://your-ictdialer",
"ICTDIALER_USERNAME": "admin",
"ICTDIALER_PASSWORD": "your-password"
}
}
}
}
Read tools are always available:
| Tool | What it does |
|---|---|
ictdialer_list_campaigns | List campaigns (id and name) |
ictdialer_campaign_status | Live status of a campaign (running, stopped) |
ictdialer_campaign_summary | Totals: answered, failed, human vs machine |
ictdialer_campaign_result | Per-call results (contact, response, AMD, DNC) |
Write tools appear only when ICTDIALER_MCP_ALLOW_WRITE=true:
| Tool | What it does |
|---|---|
ictdialer_start_campaign | Launch a campaign — begins live outbound calling |
ictdialer_stop_campaign | Stop a running campaign |
The server is read-only by default. Starting a campaign begins live outbound
calling and can cost real money, so ictdialer_start_campaign and
ictdialer_stop_campaign are not registered at all unless you set
ICTDIALER_MCP_ALLOW_WRITE=true.
ICTDialer exposes a form-encoded RPC API at {base}/rest/<Method>. Each call carries
the account username and password; the server sends those for you. There is no separate
token to provision.
Built by Tahir Almas at ICT Innovations — the team behind ICTDialer, ICTContact, ICTBroadcast, ICTFax and ICTPBX. Learn more at ictdialer.com.
MIT licensed. Issues and PRs welcome at github.com/ictinnovations/ictdialer-mcp.
FAQs
Model Context Protocol server for ICTDialer. Lets AI assistants monitor outbound auto-dialer campaigns and, with writes enabled, start and stop them.
The npm package ictdialer-mcp receives a total of 24 weekly downloads. As such, ictdialer-mcp popularity was classified as not popular.
We found that ictdialer-mcp demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
It has been one year since Shai-Hulud made its first appearance on npm.

Research
/Security News
Operators behind PolinRider used a compromised GitHub account to plant malware in four development versions of a Packagist package with 700,000+ downloads.

Security News
GitHub Actions now supports cache-mode, a least-privilege control on the Actions cache aimed at the cache poisoning technique behind recent compromises.