botcall

Phone numbers for AI agents. Provision numbers, receive SMS, extract verification codes. Use when you need to sign up for services, receive 2FA codes, or han...

Security Scan

The skill's requests and instructions align with its stated purpose: it needs the botcall CLI and a BOTCALL_API_KEY to provision numbers and read SMS verification codes.

Purpose & Capability

Name/description, required binary (botcall), required env var (BOTCALL_API_KEY), and the npm install entry all directly match the stated functionality of provisioning numbers and receiving SMS. No unrelated services, binaries, or credentials are requested.

Instruction Scope

SKILL.md only instructs the agent to run the botcall CLI commands (provision, inbox, get-code, release, billing, etc.) and to place the API key in the environment or MCP config. It does not instruct the agent to read unrelated files, system secrets, or transmit data to unexpected endpoints. Note: the agent will be used to perform external signups using provisioned numbers (expected for this use case).

Install Mechanism

Install is via an npm package named 'botcall' that creates a 'botcall' binary — this is a standard, traceable package install from the public registry. Installing npm packages executes third-party code, so review the package and its maintainers if you require higher assurance.

Credentials

Only a single API credential (BOTCALL_API_KEY) is required and is declared as the primary credential. This is proportionate to the skill's purpose, but that key grants access to phone numbers and received SMS (which may contain sensitive verification codes), so limit scope/rotation as appropriate.

Persistence & Privilege

The skill does not request always:true or any elevated persistent privileges. Model invocation is allowed (platform default). Be aware that any agent with access to this skill can request numbers and read SMS while the API key is available.

Assessment

This skill appears to be what it says: it installs a botcall CLI and uses a BOTCALL_API_KEY to provision phone numbers and read SMS codes. Before installing: (1) verify the npm package and vendor (botcall.io) and inspect the package if you need high assurance; (2) create and use a limited-scope API key and rotate/revoke it if compromised; (3) be aware that the key lets the skill read incoming SMS (which can include sensitive 2FA codes) and may incur billing charges — monitor usage and billing; (4) avoid putting a high-privilege or shared secret into plain MCP configs or shared files; (5) if you do not want the agent to autonomously request numbers or read SMS, restrict skill invocation or require confirmation before use.

botcall - Phone Numbers for AI Agents

Provision phone numbers and receive SMS verification codes.

Setup

1. Get an API key at https://botcall.io
2. Authenticate:

botcall auth login --api-key bs_live_YOUR_KEY

Commands

Check your plan and usage

botcall usage

Provision a phone number

botcall provision
botcall provision --area-code 206  # Seattle area code

List your numbers

botcall list

View received messages

botcall inbox
botcall inbox --limit 20

Wait for verification code

botcall get-code              # Wait up to 120s
botcall get-code --timeout 60 # Custom timeout

Returns just the code (e.g., 847291) for easy parsing.

Release a number

botcall release <number-id>

Upgrade plan

botcall upgrade starter  # $9/mo - 1 number, 100 SMS
botcall upgrade pro      # $29/mo - 5 numbers, 500 SMS

Manage billing

botcall billing  # Opens Stripe portal

Example: Sign up for a service

# 1. Get a number
botcall provision --area-code 415
# Output: [phone]

# 2. Use number to sign up (your agent does this)

# 3. Wait for verification code
CODE=$(botcall get-code --timeout 120)
echo "Code received: $CODE"

# 4. Enter code to complete signup

MCP Integration

For Claude Desktop/Cursor, add to your MCP config:

{
  "mcpServers": {
    "botcall": {
      "command": "npx",
      "args": ["@botcallio/mcp"],
      "env": {
        "BOTCALL_API_KEY": "bs_live_YOUR_KEY"
      }
    }
  }
}

Pricing

• Free: No numbers (signup only)
• Starter ($9/mo): 1 number, 100 SMS
• Pro ($29/mo): 5 numbers, 500 SMS

Links

• Website: https://botcall.io
• npm CLI: https://www.npmjs.com/package/botcall
• MCP: https://www.npmjs.com/package/@botcallio/mcp