Loading…
Telecom platform MCP server for SMS, voice, 2FA, SIP trunking, number management, and CDRs.
Do not connect
A critical issue was found. Do not connect this server as-is.
Scanned 26 days ago Due for re-check
A server can change after it's graded. Re-run the automated scan to refresh this report.
This grade is deterministic and reproducible: the same server surface always yields the same grade under a given algorithm version. It is a real automated assessment computed by the MCPGrade engine from what the probe actually observed — not a fabricated or opinion score. It is not a manual human pentest, so it can miss context-specific risks.
Every signal below was measured directly by the automated probe. The grade is derived only from evidence like this — nothing is assumed.
The Wavix API MCP (1.0) MCP server exposes 122 tools, focused primarily on communication and filesystem capabilities. Its published description reads: "Telecom platform MCP server for SMS, voice, 2FA, SIP trunking, number management, and CDRs". It communicates over Streamable HTTP using the 2025-06-18 protocol revision, and does not require authorization to connect. MCPGrade currently rates Wavix API MCP (1.0) F — a critical issue was found and the server should not be connected as-is. Its most notable findings include "Cross-tool shadowing" and "Cross-tool shadowing". This report is a deterministic, reproducible automated assessment: the same observed surface always yields the same grade under a given algorithm version, and it is refreshed as new scans arrive and free to read — but it is not a substitute for a manual human security review. Always re-check Wavix API MCP (1.0)'s advertised tools, transport security, and authorization posture before connecting an autonomous agent or sharing sensitive context with it.
Add Wavix API MCP (1.0) to an MCP client using the endpoint below. Review the grade and findings above before granting an autonomous agent access.
MCP endpoint
https://mcp.wavix.com/mcpStreamable HTTP transport. This is the MCP endpoint, not a website — paste it into your MCP client server list rather than a browser.
Captured passively during the read-only scan. Click any value to find servers that match it.
The tools this server advertises via tools/list — names, purposes, and the parameters each accepts, exactly as enumerated read-only.
Get a download URL for a call recording audio file. Returns ``{download_url, content_type, status_code, note}`` instead of the binary audio stream. Fetch ``download_url`` to obtain the MP3.
Get a download URL for a billing invoice PDF. Returns ``{download_url, content_type, status_code, note}`` instead of the binary PDF stream. Fetch ``download_url`` to obtain the file.
Get a download URL for a speech-analytics audio file. Returns ``{download_url, content_type, status_code, note}`` instead of the binary audio stream (WAV/MP3/MP4). Fetch ``download_url`` to obtain the
Sorted worst-first. Each finding shows its severity, what it means, its OWASP MCP Top-10 mapping, and a recommended fix — the check id links to the exact methodology row that produced it.
tool: call_recording_get
A tool description tries to alter the model’s use of another tool.
tead of the binary audio stream. Fetch ``download_url`` to obtain the MP3.RecommendationDescriptions must describe only their own tool.
tool: billing_invoices_download
A tool description tries to alter the model’s use of another tool.
the binary PDF stream. Fetch ``download_url`` to obtain the file.RecommendationDescriptions must describe only their own tool.
tool: speech_analytics_file_get
A tool description tries to alter the model’s use of another tool.
the binary audio stream (WAV/MP3/MP4). Fetch ``download_url`` to obtain tRecommendationDescriptions must describe only their own tool.
tool: ten_dlc_brand_evidence_get
A tool description tries to alter the model’s use of another tool.
the binary file stream. Fetch ``download_url`` to obtain the file.RecommendationDescriptions must describe only their own tool.
tool: api_keys_create
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
api_keys_create Creates an API key. Optional IP restrictRecommendationRemove side-channel parameters; constrain tool inputs.
tool: sip_trunks_create
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
e":"My trunk"},"password":{"type":"string","description":"Password set fRecommendationRemove side-channel parameters; constrain tool inputs.
tool: sip_trunks_create
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "password"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: sip_trunks_update
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
e":"My trunk"},"password":{"type":"string","description":"Password set fRecommendationRemove side-channel parameters; constrain tool inputs.
tool: sip_trunks_update
The input schema declares a parameter that asks the caller to hand over a password, key, token, or other secret — a credential-harvest / token-passthrough risk. (Bare pagination `token` params are excluded.)
parameter "password"RecommendationNever pass secrets as tool arguments; authenticate out-of-band and remove credential parameters from the schema.
tool: my_numbers_update
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "sms_relay_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: my_numbers_destinations_update
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "sms_relay_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: my_numbers_papers_upload
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
Files can't be password protected - PDF files must not contain digitalRecommendationRemove side-channel parameters; constrain tool inputs.
tool: cdrs_retranscribe
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "webhook_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: speech_analytics_create
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
iption":"Binary file content. Maximum size is 25 MB. Wavix supports WAV, MP3RecommendationRemove side-channel parameters; constrain tool inputs.
tool: speech_analytics_retranscribe
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "callback_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: call_webhooks_create
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: call_control_create
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "callback_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: call_control_answer
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "stream_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: call_control_streams_create
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "stream_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: sms_and_mms_messages_send
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "callback_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: ten_dlc_brand_evidence_delete
Tools that execute commands / write files / make arbitrary requests are exposed without annotations or guards.
evidence_delete Deletes a 10DLC Brand evidence file. {"type":"object","properties":{"brand_id":{"tyRecommendationAnnotate destructive tools and require human approval.
tool: ten_dlc_subscriptions_create
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: number_validator_create_bulk
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
true, returns a token to poll for results. {"type":"object","propertiRecommendationRemove side-channel parameters; constrain tool inputs.
tool: link_shortener_create
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "fallback_url"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: two_fa_verification_create
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
ends a one-time password (OTP) to the destination phone number. Before uRecommendationRemove side-channel parameters; constrain tool inputs.
tool: profile_update
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
parameter "default_short_link_endpoint"RecommendationRemove side-channel parameters; constrain tool inputs.
tool: (server instructions)
A tool exposes a free-text/webhook/feedback parameter with no honest purpose — a classic exfil channel.
he user's Wavix API key as a Bearer token. Do not ask the user for credRecommendationRemove side-channel parameters; constrain tool inputs.
tool: (server instructions)
A tool description tries to alter the model’s use of another tool.
c filters (e.g. my_numbers_list, sms_and_mms_messages_list). 2. Use '*_get' tRecommendationDescriptions must describe only their own tool.
The server accepts tool enumeration (and likely invocation) with no authentication.
RecommendationRequire OAuth 2.1 authorization for any server exposing non-public tools.
tool: api_keys_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "api_keys_create"RecommendationScope tools to the minimum needed.
tool: api_keys_delete
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "api_keys_delete"RecommendationScope tools to the minimum needed.
tool: sip_trunks_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "sip_trunks_create"RecommendationScope tools to the minimum needed.
tool: sip_trunks_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "sip_trunks_update"RecommendationScope tools to the minimum needed.
tool: sip_trunks_delete
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "sip_trunks_delete"RecommendationScope tools to the minimum needed.
tool: cart_remove
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "cart_remove"RecommendationScope tools to the minimum needed.
tool: my_numbers_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "my_numbers_update"RecommendationScope tools to the minimum needed.
tool: my_numbers_destinations_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "my_numbers_destinations_update"RecommendationScope tools to the minimum needed.
tool: my_numbers_papers_upload
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "my_numbers_papers_upload"RecommendationScope tools to the minimum needed.
tool: call_recording_delete
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "call_recording_delete"RecommendationScope tools to the minimum needed.
tool: speech_analytics_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "speech_analytics_create"RecommendationScope tools to the minimum needed.
tool: speech_analytics_create
Role tokens or delimiter abuse steer the model rather than describe the tool.
Callback body: ```json { "request_id": "e865ea07-25af-4RecommendationWrite neutral, descriptive tool metadata.
tool: call_webhooks_list
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "call_webhooks_list"RecommendationScope tools to the minimum needed.
tool: call_webhooks_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "call_webhooks_create"RecommendationScope tools to the minimum needed.
tool: call_webhooks_delete
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "call_webhooks_delete"RecommendationScope tools to the minimum needed.
tool: call_control_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "call_control_update"RecommendationScope tools to the minimum needed.
tool: webrtc_tokens_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "webrtc_tokens_create"RecommendationScope tools to the minimum needed.
tool: webrtc_tokens_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "webrtc_tokens_update"RecommendationScope tools to the minimum needed.
tool: webrtc_tokens_delete
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "webrtc_tokens_delete"RecommendationScope tools to the minimum needed.
tool: sms_and_mms_sender_ids_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "sms_and_mms_sender_ids_create"RecommendationScope tools to the minimum needed.
tool: sms_and_mms_sender_ids_delete
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "sms_and_mms_sender_ids_delete"RecommendationScope tools to the minimum needed.
tool: sms_and_mms_opt_outs_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "sms_and_mms_opt_outs_create"RecommendationScope tools to the minimum needed.
tool: sms_and_mms_messages_send
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "sms_and_mms_messages_send"RecommendationScope tools to the minimum needed.
tool: ten_dlc_brands_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "ten_dlc_brands_update"RecommendationScope tools to the minimum needed.
tool: ten_dlc_brands_delete
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "ten_dlc_brands_delete"RecommendationScope tools to the minimum needed.
tool: ten_dlc_brand_evidence_upload
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "ten_dlc_brand_evidence_upload"RecommendationScope tools to the minimum needed.
tool: ten_dlc_brand_evidence_delete
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "ten_dlc_brand_evidence_delete"RecommendationScope tools to the minimum needed.
tool: ten_dlc_brand_campaigns_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "ten_dlc_brand_campaigns_update"RecommendationScope tools to the minimum needed.
tool: ten_dlc_brand_campaigns_delete
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "ten_dlc_brand_campaigns_delete"RecommendationScope tools to the minimum needed.
tool: ten_dlc_subscriptions_delete
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "ten_dlc_subscriptions_delete"RecommendationScope tools to the minimum needed.
tool: ten_dlc_campaign_numbers_link
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "ten_dlc_campaign_numbers_link"RecommendationScope tools to the minimum needed.
tool: link_shortener_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "link_shortener_create"RecommendationScope tools to the minimum needed.
tool: two_fa_verification_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "two_fa_verification_create"RecommendationScope tools to the minimum needed.
tool: two_fa_verification_cancel
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "two_fa_verification_cancel"RecommendationScope tools to the minimum needed.
tool: profile_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "profile_update"RecommendationScope tools to the minimum needed.
tool: sub_accounts_create
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "sub_accounts_create"RecommendationScope tools to the minimum needed.
tool: sub_accounts_update
The server advertises open-world / broadly-scoped capabilities.
no annotations on write-capable tool "sub_accounts_update"RecommendationScope tools to the minimum needed.
Vantaj uptime monitoring via MCP — manage monitors, heartbeats, incidents, and status pages.
Unified gateway to Algeria's TKAWEN ecosystem: commerce, certification, and AI tools.
Provides access to the Cohereon Doctrine AI safety framework with governance components, tiered access, and agent onboarding.
Agentic rails for complex workflows with receipts, fees, and MCP tool access.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Structural TC39 spec lookup for ECMA-262 and ECMA-402 in AI agents, SHA-pinned and offline-first.
Get a download URL for a 10DLC brand evidence file. Returns ``{download_url, content_type, status_code, note}`` instead of the binary file stream. Fetch ``download_url`` to obtain the file.
Returns a list of API keys.
Creates an API key. Optional IP restrictions can be configured to limit access.
Deletes an API key. This action is permanent.
Activates an API key. Once activated, the API key can be used for authentication again.
Deactivates an API key. Once deactivated, the API key cannot be used for authentication.
Returns a paginated list of SIP trunks. Results are limited to 25 records per page by default. Use `page` and `per_page` to navigate results.
Creates a SIP trunk.
Returns a SIP trunk configuration.
Updates a SIP trunk configuration.
Deletes a SIP trunk.
Returns a list of countries where phone numbers are available.
Returns a list of regions (states or provinces) for countries where `has_provinces_or_states` is `true`.
Returns a list of cities for countries where `has_provinces_or_states` is `false`.
Returns a list of cities in the specified region for countries where `has_provinces_or_states` is `true`.
Returns a paginated list of phone numbers available for purchase.
Returns the cart.
Adds phone numbers to the cart.
Removes phone numbers from the cart.
Checks out the cart. Activation and monthly fees are deducted from the account balance.
Returns a paginated list of phone numbers on the account. Results are limited to 25 records per page by default. Use `page` and `per_page` to navigate results.
Releases phone numbers back to stock.
Returns a phone number.
Updates a phone number.
Enables or disables inbound SMS support for a phone number.
Updates inbound call routing for phone numbers.
Uploads a document for one or more phone numbers. Uploaded files must meet the following requirements: - Allowed formats: PNG, JPG, JPEG, TIFF, BMP, or PDF - Maximum file size: 10 MB - Files can't be
Returns a paginated list of CDRs.
Searches call transcriptions for specific keywords or phrases.
Transcribes a recorded call.
Returns a recorded call transcription.
Returns call details.
Returns CDRs in NDJSON format for bulk export.
Returns a paginated list of call recordings.
Deletes a call recording.
Uploads an audio file for transcription. Wavix sends a POST callback to the specified callback URL when the transcription is complete. Callback body: ```json { "request_id": "e865ea07-25af-4fdd-876e-0
Returns a transcription.
Retranscribes an uploaded file.
Returns a list of configured call webhooks. Wavix sends POST callbacks for `on-call` and `post-call` events.
Creates a call webhook. Wavix sends POST callbacks for `on-call` and `post-call` events.
Deletes a call webhook.
Returns a list of active calls.
Starts an outbound call.
Returns a call.
Ends an active call.
Updates an active call. Only the `tag` field can be modified.
Answers an inbound call. Optionally initiate media streaming upon answering.
Starts call media streaming.
Stops call media streaming.
Plays audio in an active call.
Stops audio playback in an active call.
Collects DTMF input in an active call.
Returns a paginated list of active Wavix Embeddable widget tokens. Results are limited to 25 records per page by default. Use `page` and `per_page` to navigate results.
Creates a Wavix Embeddable widget token.
Returns a Wavix Embeddable widget token configuration.
Updates the payload for a Wavix Embeddable widget token.
Deletes a Wavix Embeddable widget token. After deletion, the token can't be used to authenticate widget sessions, and any active session associated with it is terminated.
Returns a list of Sender IDs.
Creates a Sender ID. Use the 10DLC API to create Sender IDs in the US.
Returns a Sender ID.
Deletes a Sender ID.
Returns a paginated list of opted-out phone numbers. Results are limited to 25 records per page by default. Use `page` and `per_page` to navigate results.
Creates an opt-out for a Sender ID, 10DLC campaign, or all outbound messages.
Returns a paginated list of SMS and MMS messages.
Sends SMS or MMS messages. MMS is supported for U.S. numbers only. **Rate limit**: 20 messages per phone number in 24 hours.
Returns a message.
Returns SMS and MMS messages in newline-delimited JSON (NDJSON) format.
Returns a paginated list of 10DLC brands. Filter results by date, name, legal name, and status. Results are limited to 25 records per page by default. Use `page` and `per_page` to navigate results.
Registers a 10DLC Brand. TCR automatically verifies the brand identity. Only brands with `VERIFIED` or `VETTED_VERIFIED` identity status can register 10DLC Campaigns.
Returns a 10DLC Brand.
Updates a 10DLC brand. Updating identity-related parameters, including `ein_taxid`, `ein_taxid_country`, and `entity_type`, resets the Brand status to `UNVERIFIED` and triggers automatic re-submission
Deletes a 10DLC Brand. Brands with active campaigns cannot be deleted.
Returns a list of brand identity verification appeals.
Submits an appeal for 10DLC brand identity verification. Provide any additional documentation to support the appeal. Use `appeal_category` to specify the appeal type: - `VERIFY_TAX_ID` — Use if the br
Use this method to list previously uploaded Brand appeal evidence.
Uploads 10DLC Brand evidence. Supported formats include .jpg, .png, .pdf, and more. File size must be under 10MB.
Deletes a 10DLC Brand evidence file.
Returns a list of external vettings for a 10DLC Brand.
Imports an existing external vetting for a 10DLC Brand.
Requests external vetting for a 10DLC Brand. Supported providers: `AEGIS`, `CV`, `WMC`. Supported classes: `STANDARD`, `ENHANCED`.
Returns a list of external vetting appeals for a 10DLC Brand.
Submits an appeal for a 10DLC Brand external vetting.
Returns the qualification results for a 10DLC Brand use case. Includes MNO-specific attributes, restrictions, and fees.
Returns a paginated list of 10DLC Campaigns. Filter results by date, status, and use case. Results are limited to 25 records per page by default. Use `page` and `per_page` to navigate results.
Returns 10DLC Campaigns associated with a Brand. Results are limited to 25 records per page by default. Use `page` and `per_page` to navigate results.
Registers a 10DLC Campaign.
Returns a 10DLC Campaign.
Updates a 10DLC Campaign.
Deletes a 10DLC Campaign. Associated phone numbers cannot be used as Sender IDs once the Campaign is deleted.
Returns a list of 10DLC event subscriptions.
Subscribes to Wavix 10DLC event callbacks.
Deletes a 10DLC event subscription.
Links a phone number to a 10DLC Campaign. Wavix automatically creates a Sender ID once the number is approved.
Unlinks a phone number from a 10DLC Campaign. The associated Sender ID is also deleted.
Returns a list of phone numbers associated with a 10DLC Campaign.
Requests action on a pending or rejected 10DLC Campaign. Use `nudge_intent` to specify the action: - `REVIEW`: Request review for a pending Campaign. - `APPEAL_REJECTION`: Appeal a rejected Campaign.
Returns details for a phone number.
Returns details for multiple phone numbers. If `async` is true, returns a token to poll for results.
Returns asynchronous validation results.
Triggers an outbound call based on a pre-configured scenario.
Returns a specific voice campaign.
Creates a short link.
Returns short link metrics.
Creates a new 2FA Verification and sends a one-time password (OTP) to the destination phone number. Before using this endpoint, create a 2FA Service in the Wavix portal. The service is created once an
Returns a list of 2FA verifications. Filter by service or date.
Resends the verification code using the specified channel. Previously sent codes are invalidated.
Validates the verification code.
Cancels a 2FA verification. After cancellation, no additional codes are sent, and previously sent codes can no longer be validated. You must create a new verification to send another code.
Returns a list of events for a specific 2FA Verification.
Returns a paginated list of financial transactions.
Returns a paginated list of financial statements.
Returns the account profile and billing details.
Updates the account profile and billing details.
Returns the account balance and configuration details.
Returns a paginated list of sub-accounts. Results are limited to 25 records per page by default. Use `page` and `per_page` to navigate results.
Creates a sub-account.
Returns a specific sub-account. Results are limited to 25 records per page by default. Use `page` and `per_page` to navigate results.
Updates a sub-account's configuration.
Returns a paginated list of transactions for a specific sub-account. Filter by date range and type. Results are paginated with 25 records per page by default. Use `page` and `per_page` to navigate res