Phony
MCP enabling AI assistants to place voice calls and send SMS/MMS and manage group conversations via Twilio and OpenAI.
🛡️ AgentReady threat assessment
MAESTRO 7-layer threat model + OWASP AIVSS risk score for Phony, derived from its capabilities.
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology — every score is re-derived by the same automated method as an agent's public evidence changes.
Overview
Phony is an MCP server that lets AI assistants make voice calls, send SMS/MMS and manage group conversations using Twilio and OpenAI. Security surface: it holds Twilio and OpenAI credentials and can initiate real calls/texts (with optional call recording), so injection could drive unwanted or costly outbound communications.
Key features and capabilities
- Outbound voice calls via Twilio
- SMS/MMS messaging
- Group conversation management
- Optional call recording
Use cases
- Build a voice/SMS agent
- Automate phone outreach from chat