thunderphone
Advanced tools
npx thunderphone login
npx thunderphone agents list --json
npx thunderphone init my-agent
npx thunderphone mcp setup --client cursor --api-key-env THUNDERPHONE_API_KEY
Node 18.18+. See thunderphone --help and command --help for options.
Documentation: https://thunderphone.com/docs/guides/cli
API errors exit nonzero and print the API error body on stderr. --json emits
JSON on stdout for success. Credential fields are redacted. Login prints only
organization/profile metadata on stdout; verification instructions go to stderr.
Secrets are stored in a mode-0600 credentials file under the platform-independent
~/.config/thunderphone directory (or XDG_CONFIG_HOME / THUNDERPHONE_CONFIG_DIR).
THUNDERPHONE_API_KEY takes precedence over profiles. THUNDERPHONE_PROFILE and
--profile select a stored profile; THUNDERPHONE_API_BASE_URL and
--api-base-url override the API URL. A stored token is never forwarded to a
different configured API URL. Logout removes local credentials, not the server grant.
Agent updates write drafts; deploy explicitly. Number assignment is inbound.
Outbound calls need --from or THUNDERPHONE_FROM_NUMBER set to your connected
carrier number. Scenario tests require --consent-to-charge because the API
requires explicit billing consent. Imports accept a vendor JSON export path;
inspect with imports get, then explicitly imports commit the returned UUID.
FAQs
ThunderPhone thunderphone command line tools
The npm package thunderphone receives a total of 184 weekly downloads. As such, thunderphone popularity was classified as not popular.
We found that thunderphone demonstrated a healthy version release cadence and project activity because the last version was released less than a year ago. It has 1 open source maintainer collaborating on the project.
Security News
Two compromised GitHub Actions were re-enabled with malicious tags intact, exposing thousands of downstream repositories to Mini Shai-Hulud.
Research
/Security News
A malicious Firefox extension fetches its payload after installation to evade detection, steal Google session cookies, and automate account takeover.
Research
/Security News
The compromise affects MemTensor's MemOS, an open source memory framework for large language models (LLMs) and AI agents. Both npm package @memtensor/memos-cloud-openclaw-plugin and the PyPI package MemoryOS are compromised. They drop cross-platform Go binaries that exfiltrate developer secrets.