
Security News
Agent Baseline Publishes Security Reference Architecture for Software Factories
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.
Free SMS gateway CLI — send SMS and OTP verification codes from your terminal through your own Android phone. No Twilio, no per-message fees, no A2P 10DLC. Built on the SMS8 platform.
sms8 is a zero-dependency CLI that sends SMS, generates and verifies OTP codes, and reads your SMS inbox — routed through your own Android phone instead of Twilio. One command. No CPaaS account. No A2P 10DLC paperwork. $29/month flat for unlimited messages.
npx sms8-cli send +14155550100 "Welcome aboard!"
That's it. The SMS leaves your real mobile number and arrives in the recipient's regular SMS app.
sms8-cli# One-off use
npx sms8-cli send +14155550100 "Hello"
# Or install globally
npm install -g sms8-cli
sms8 send +14155550100 "Hello"
Node 18 or newer.
Set it once:
export SMS8_API_KEY=sk_xxx
# or
sms8 config set api_key=sk_xxx
sms8 send +14155550100 "Order #1234 shipped — track at example.com/t/1234"
sms8 otp send +14155550100
# → 6-digit code arrives on the user's phone
sms8 otp verify +14155550100 482937
# → { "verified": true }
CODE=$(sms8 otp wait +14155550100 --timeout=120)
echo "Got code: $CODE"
sms8 inbox --limit=10
sms8 inbox --received --limit=20
sms8 inbox --sent --limit=20
sms8 devices
sms8 balance
sms8 setup
read -p "Phone (E.164): " PHONE
sms8 otp send "$PHONE"
read -p "Code: " CODE
if sms8 otp verify "$PHONE" "$CODE" | grep -q '"verified": true'; then
echo "Welcome!"
else
echo "Wrong code."
fi
# Trigger a transactional SMS in your app
curl -X POST https://your.app/trigger-otp -d 'phone=+14155550100'
# Wait for the code to arrive on the test SIM
CODE=$(sms8 otp wait +14155550100 --timeout=180)
echo "Code received: $CODE"
# Submit it to your app
curl -X POST https://your.app/verify -d "phone=+14155550100&code=$CODE"
Your Android phone runs the free SMS8 app and stays online. Each sms8 command POSTs to the SMS8 cloud, which queues the message; your phone polls, sends the SMS over its real SIM, and reports back. Round-trip is typically under 4 seconds.
Want your AI assistant to send SMS directly? Use the companion package sms8-mcp — it exposes the same tools to any Model Context Protocol client.
{
"mcpServers": {
"sms8": {
"command": "npx",
"args": ["-y", "sms8-mcp"],
"env": { "SMS8_API_KEY": "sk_xxx" }
}
}
}
Full docs at mcp.sms8.io.
MIT
FAQs
Twilio alternative for developers. Send SMS, OTP codes, and verification messages from your terminal through your own Android phone. Free 5-day trial at sms8.io, then $29/mo unlimited. No per-SMS fees, no A2P 10DLC, no markups. CLI for scripts, cron, CI,
The npm package sms8-cli receives a total of 15 weekly downloads. As such, sms8-cli popularity was classified as not popular.
We found that sms8-cli demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.

Security News
Agent Baseline’s new reference architecture shows how to secure software factories with four boundaries enforced outside the AI agent.

Security News
arXiv now limits authors to two submissions a month as AI slop overwhelms moderators, delays good papers, and sparks debate over applying the limit to everyone.

Research
/Security News
A new GhostAction wave hits hundreds of GitHub repos, expanding CI/CD secret theft to cloud and AI credentials in source code and git history.