← Back to Skills Marketplace
danecodes

botcall-mcp

by Dane Hesseldahl · GitHub ↗ · v0.1.1 · MIT-0
cross-platform ✓ Security Clean
98
Downloads
0
Stars
0
Active Installs
1
Versions
Install in OpenClaw
/install botcall-mcp
Description
Give your AI agent a real phone number for SMS verification. Provisions numbers, receives SMS, and extracts verification codes via the botcall API. Requires...
README (SKILL.md)

botcall-mcp

An MCP server that gives AI agents real phone numbers. Provision a number, receive SMS, and extract verification codes — all through tool calls.

Setup

Install the MCP server:

claude mcp add botcall -- npx -y botcall-mcp

Then set your API key:

export BOTCALL_API_KEY="bs_live_..."

Or add to Claude Desktop config (~/Library/Application Support/Claude/claude_desktop_config.json):

{
  "mcpServers": {
    "botcall": {
      "command": "npx",
      "args": ["-y", "botcall-mcp"],
      "env": {
        "BOTCALL_API_KEY": "bs_live_..."
      }
    }
  }
}

Get an API Key

Sign up at botcall.io, pick a plan, and grab your key from Dashboard → API Keys.

Tools

Tool Description
provision_number Provision a new phone number (optional: area code, country)
list_numbers List your provisioned phone numbers
release_number Release a phone number
get_inbox Get recent SMS messages
get_code Wait for an SMS and extract the verification code (long-polls up to 30s)
get_usage Get your plan, limits, and usage stats

Example Workflow

  1. Call provision_number to get a phone number
  2. Use the number to sign up for a service that requires SMS verification
  3. Call get_code — it waits for the SMS and returns the extracted code
  4. Enter the code to complete verification

Environment Variables

Variable Description
BOTCALL_API_KEY Required. Your API key from botcall.io
BOTCALL_API_URL API base URL (default: https://api.botcall.io)

Resources

Usage Guidance
This skill appears to do what it says, but take these precautions before installing: 1) Review the npm package and GitHub repo (botcall-mcp) yourself—inspect the code before running it with npx. 2) Prefer installing locally (clone + audit) rather than blindly running `npx` to avoid executing unreviewed remote code. 3) Store BOTCALL_API_KEY securely (avoid putting it in shared plaintext config). 4) Use an account/key with minimal privileges and monitor usage (Botcall access lets the service provision numbers and read SMS). 5) Understand costs and terms on botcall.io and consider using ephemeral/test keys where available. If you cannot review the package or are uncomfortable storing the key in your agent config, treat this skill as higher risk and do not install.
Capability Analysis
Type: OpenClaw Skill Name: botcall-mcp Version: 0.1.1 The skill is a standard MCP (Model Context Protocol) server wrapper for the botcall.io service, which provides virtual phone numbers for SMS verification. The documentation in SKILL.md and metadata in _meta.json describe legitimate functionality for provisioning numbers and retrieving messages, with no evidence of malicious intent, data exfiltration, or prompt injection.
Capability Assessment
Purpose & Capability
The skill claims to provision phone numbers and receive SMS via the Botcall API and the SKILL.md requires a BOTCALL_API_KEY and refers to botcall.io/npm/github resources—these are appropriate and expected for this functionality.
Instruction Scope
Instructions are focused on adding an MCP server (via npx botcall-mcp) and setting BOTCALL_API_KEY (env or in Claude Desktop config). This is within scope, but the guide explicitly asks you to place your API key into ~/Library/Application Support/Claude/claude_desktop_config.json which stores a long-lived secret in plaintext; that persistence and the recommendation to run remote code deserve caution.
Install Mechanism
No registry install spec exists in metadata, but the SKILL.md directs use of `npx -y botcall-mcp`. npx will fetch and execute code from the npm registry at runtime (arbitrary remote code execution risk). The skill points to an npm package and GitHub repo, which helps with verification, but executing via npx without first auditing the package is a moderate risk.
Credentials
Only BOTCALL_API_KEY (required) and optional BOTCALL_API_URL are requested—this is proportionate to the stated purpose. However, that API key grants access to provision numbers and read SMS (sensitive capabilities), so consider the security of how/where you store it (avoid shared or world-readable configs).
Persistence & Privilege
always:false and normal autonomous invocation are fine. The setup instructs adding an MCP server entry to the agent's desktop config (persisting the API key and an automatic command run), which is expected for an MCP but increases persistence and blast radius if the key is compromised—this is not inherently malicious but should be done consciously.
How to Use
  1. Make sure OpenClaw is installed (local or Docker)
  2. Run the install command in chat: /install botcall-mcp
  3. After installation, invoke the skill by name or use /botcall-mcp
  4. Provide required inputs per the skill's parameter spec and get structured output
Version History
v0.1.1
botcall-mcp v0.1.1 - Initial release: Provision real phone numbers, receive SMS, and extract verification codes via the botcall API. - Supports phone number management (provision, list, release). - Includes tools for retrieving SMS inbox and verification codes. - Usage stats and environment variable setup documented. - Requires a BOTCALL_API_KEY from botcall.io to operate.
Metadata
Slug botcall-mcp
Version 0.1.1
License MIT-0
All-time Installs 0
Active Installs 0
Total Versions 1
Frequently Asked Questions

What is botcall-mcp?

Give your AI agent a real phone number for SMS verification. Provisions numbers, receives SMS, and extracts verification codes via the botcall API. Requires... It is an AI Agent Skill for Claude Code / OpenClaw, with 98 downloads so far.

How do I install botcall-mcp?

Run "/install botcall-mcp" in the OpenClaw or Claude Code chat to install it in one step — no extra setup required.

Is botcall-mcp free?

Yes, botcall-mcp is completely free, licensed under MIT-0. You can download, install and use it at no cost.

Which platforms does botcall-mcp support?

botcall-mcp is cross-platform and runs anywhere OpenClaw / Claude Code is available (cross-platform).

Who created botcall-mcp?

It is built and maintained by Dane Hesseldahl (@danecodes); the current version is v0.1.1.

💬 Comments