Phony

MCP Tools and AgentsFreeOpen Source

MCP enabling AI assistants to place voice calls and send SMS/MMS and manage group conversations via Twilio and OpenAI.

🛡️ AgentReady threat assessment

MAESTRO 7-layer threat model + OWASP AIVSS risk score for Phony, derived from its capabilities.

AIVSS 9.3 · Critical

These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology. Are you the vendor? Factual corrections are free.

Overview

Phony is an MCP server that lets AI assistants make voice calls, send SMS/MMS and manage group conversations using Twilio and OpenAI. Security surface: it holds Twilio and OpenAI credentials and can initiate real calls/texts (with optional call recording), so injection could drive unwanted or costly outbound communications.

Key features

Outbound voice calls via Twilio
SMS/MMS messaging
Group conversation management
Optional call recording

Use cases

Build a voice/SMS agent
Automate phone outreach from chat