{"generated_at":"2026-10-14T20:07:22+00:00","item":{"added_at":"2026-06-22","analysis_method":"independent_manual_review_2026-10-10","assessment_status":"provisional","auth_posture":"auth_required","category":"Web Connector","confidence":"medium","description":"Provides an unofficial connection to your VoIP.ms telephony account. Manage numbers and routing, send SMS or MMS, and inspect voicemail, calls and billing. Your API credentials and approved resource scopes control access, with read-only options for most areas.","did":"b0973639-198f-41d9-9fcc-e7e39ff2c114","documentation_url":"https://voipms-mcp.ecliptical.io/","editorial_description":{"extended_description":"Tools also handle fax, subaccounts, conferences, call recordings and emergency-address settings. Phone numbers can be ordered or canceled, and messages or account resources can be deleted. This independent connector is not built or endorsed by VoIP.ms.","schema_version":1,"summary":"Provides an unofficial connection to your VoIP.ms telephony account.\nManage numbers and routing, send SMS or MMS, and inspect voicemail, calls and billing.\nYour API credentials and approved resource scopes control access, with read-only options for most areas."},"homepage_url":"","icon":"https://voipms-mcp.ecliptical.io/logo-square.svg","id":"b0973639-198f-41d9-9fcc-e7e39ff2c114","installs":0,"last_scanned":"","license":"","long_description":"Tools also handle fax, subaccounts, conferences, call recordings and emergency-address settings. Phone numbers can be ordered or canceled, and messages or account resources can be deleted. This independent connector is not built or endorsed by VoIP.ms.","manual_assessment":"high","manual_review":{"all_findings":[{"evidence":"These tools incur charges or move funds in a telecom account.","reasoning":"They have direct financial consequences.","risk_type":"financial_transaction","severity":"high","title":"Adds payments/charges and orders phone/fax numbers","triggering_tools_or_skills":["add_payment","add_charge","order_did","order_fax_number","order_toll_free"]},{"evidence":"These tools communicate to real recipients as the account.","reasoning":"They are user-representative messaging.","risk_type":"messaging_as_user","severity":"high","title":"Sends SMS/MMS/faxes/voicemail emails and call-recording emails","triggering_tools_or_skills":["send_sms","send_mms","send_fax_message","send_voicemail_email","send_call_recording_email"]},{"evidence":"Many explicit tools remove durable communication/account state.","reasoning":"They can cause irreversible loss or service interruption.","risk_type":"data_deletion","severity":"high","title":"Deletes messages, recordings, numbers, accounts and routing resources","triggering_tools_or_skills":["delete_sms","delete_mms","del_recording","cancel_did","del_sub_account","del_voicemail"]},{"evidence":"These tools alter live telephony infrastructure.","reasoning":"They affect call delivery and emergency services.","risk_type":"deployment_infrastructure","severity":"high","title":"Configures routing, IVR, queues, forwarding and emergency calling","triggering_tools_or_skills":["set_did_routing","set_ivr","set_queue","set_forwarding","e911_provision"]},{"evidence":"The tools administer telecom account access.","reasoning":"They are privileged identity operations.","risk_type":"credential_admin","severity":"high","title":"Creates/deletes subaccounts/clients and configures access","triggering_tools_or_skills":["create_sub_account","del_sub_account","signup_client","del_client"]}],"assessment_status":"provisional","auth_and_scopes":"Authentication grants broad VoIP.ms telephony/billing/account administration.","blocked_missing_evidence":null,"confidence":"medium","displayed_risk":"high","evidence_completeness":"partial","manual_overall_risk":"high","official_sources":[{"accessed_at":"2026-10-10T20:24:37Z","url_or_path":"plutosecurity/plutonium@b749c8dc43536c794409be9805edd48063f045e2:app/data/conn/claudesec/b0973639-198f-41d9-9fcc-e7e39ff2c114.json","what_it_proves":"Candidate PR #125 record identity (name \"VoIP.ms (Unofficial)\", publisher, type web_connector) and 80 stored tool names (truncated vs Directory); no tool descriptions stored"},{"accessed_at":"2026-09-22T10:46:07Z","url_or_path":"https://api.anthropic.com/api/directory/servers?verified_tier=anthropic,partner,community (snapshot claude-directory-all-tiers-2026-09-22.json)","what_it_proves":"Official Claude Directory listing https://claude.ai/directory/b0973639-198f-41d9-9fcc-e7e39ff2c114: complete tool_names inventory (224 tools), remote streamable-http endpoint https://voipms-mcp.ecliptical.io/mcp, auth_posture auth_required, publisher-declared permissions text, declared sensitive data types, directory tier community"}],"primary_reason":"VoIP.ms exposes financial, messaging, destructive and live telephony administration.","provisional_risk":null,"publication_recommendation":"fix","requires_runtime_verification":true,"review_key":"claude:b0973639-198f-41d9-9fcc-e7e39ff2c114","reviewed_at":"2026-10-10","reviewer_notes":"Reviewed all 224 stored tools; packet is truncated but explicit High actions are sufficient.","risk_domains":{"arbitrary_network_access":"false","authz_ambiguity":"unknown","browser_control":"false","credential_or_admin_actions":"true","deletes_data":"true","deployment_or_infrastructure":"true","dynamic_hidden_actions":"false","filesystem_or_repo_access":"true","forwards_data_to_third_party":"true","modifies_data":"true","persistent_credentials":"true","prompt_injection_exposure":"true","provenance_uncertainty":"true","reads_private_data":"true","runs_code_or_queries":"false","sends_messages_as_user":"true","spends_or_moves_money":"true"},"tools_or_skills_reviewed":224,"tools_or_skills_total":224},"name":"VoIP.ms (Unofficial)","needs_runtime_verification":true,"plutonium_url":"https://plutonium.pluto.security/detail.html?planet=claudesec&did=b0973639-198f-41d9-9fcc-e7e39ff2c114&utm_source=plutonium_analysis_skill&utm_medium=claude_skill&utm_campaign=connector_risk_assessment","privacy_policy_url":"https://voipms-mcp.ecliptical.io/privacy","provisional_risk":null,"publication_recommendation":"fix","publisher":"Ecliptical Software Inc.","publisher_url":"https://eclipticalsoftware.com/","remote_url":"https://voipms-mcp.ecliptical.io/mcp","repository_url":"","risk":"high","risk_severity":"high","security_risks":[{"description":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They have direct financial consequences.","evidence":"Adds payments/charges and orders phone/fax numbers: These tools incur charges or move funds in a telecom account.","manual_risk_type":"financial_transaction","remediation":{"block_tool_categories":["financial"],"steps":["Set provider-side spending limits and require approval for every financial action.","Use a dedicated low-balance account and review transaction logs."]},"risk_type":"spends_money","severity":"high","title":"Adds payments/charges and orders phone/fax numbers","triggering_tools":["add_payment","add_charge","order_did","order_fax_number","order_toll_free"]},{"description":"This connector can publish or send messages and content using the connected identity. Review findings: They are user-representative messaging.","evidence":"Sends SMS/MMS/faxes/voicemail emails and call-recording emails: These tools communicate to real recipients as the account.","manual_risk_type":"messaging_as_user","remediation":{"block_tool_categories":["sends_externally"],"steps":["Require review before messages, posts, or publications are sent.","Restrict delivery to test or internal recipients where possible."]},"risk_type":"sends_messages_as_you","severity":"high","title":"Sends SMS/MMS/faxes/voicemail emails and call-recording emails","triggering_tools":["send_sms","send_mms","send_fax_message","send_voicemail_email","send_call_recording_email"]},{"description":"This connector can permanently remove data or resources. Review findings: They can cause irreversible loss or service interruption.","evidence":"Deletes messages, recordings, numbers, accounts and routing resources: Many explicit tools remove durable communication/account state.","manual_risk_type":"data_deletion","remediation":{"block_tool_categories":["destructive"],"steps":["Disable destructive tools unless deletion is an explicit workflow requirement.","Require human confirmation and verified backups before deletion."]},"risk_type":"deletes_data","severity":"high","title":"Deletes messages, recordings, numbers, accounts and routing resources","triggering_tools":["delete_sms","delete_mms","del_recording","cancel_did","del_sub_account","del_voicemail"]},{"description":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect call delivery and emergency services.","evidence":"Configures routing, IVR, queues, forwarding and emergency calling: These tools alter live telephony infrastructure.","manual_risk_type":"deployment_infrastructure","remediation":{"block_tool_categories":["code_execution","state_change"],"steps":["Default to a sandbox or staging environment.","Require code review, human approval, audit logging, and a tested rollback path for production changes."]},"risk_type":"code_deployment","severity":"high","title":"Configures routing, IVR, queues, forwarding and emergency calling","triggering_tools":["set_did_routing","set_ivr","set_queue","set_forwarding","e911_provision"]},{"description":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged identity operations.","evidence":"Creates/deletes subaccounts/clients and configures access: The tools administer telecom account access.","manual_risk_type":"credential_admin","remediation":{"block_tool_categories":["state_change"],"steps":["Use a test account or sandbox before allowing changes to production data.","Grant only the write permissions required for the intended workflow.","Require human confirmation for consequential state changes."]},"risk_type":"modifies_data","severity":"high","title":"Creates/deletes subaccounts/clients and configures access","triggering_tools":["create_sub_account","del_sub_account","signup_client","del_client"]}],"signature_status":"unknown","source_code_reviewed":false,"support_url":"support@eclipticalsoftware.com","tags":["accesses_messaging","code_deployment","deletes_data","modifies_data","network_access","oauth_required","sends_messages_as_you","spends_money","web_connector"],"tools":[{"description":"","name":"add_charge","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They have direct financial consequences."}},{"description":"","name":"add_lnp_file"},{"description":"","name":"add_lnp_port"},{"description":"","name":"add_member_to_conference"},{"description":"","name":"add_payment","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They have direct financial consequences."}},{"description":"","name":"assign_did_vpri"},{"description":"","name":"back_order_did_can"},{"description":"","name":"back_order_did_usa"},{"description":"","name":"cancel_did","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can cause irreversible loss or service interruption."}},{"description":"","name":"cancel_fax_number"},{"description":"","name":"connect_did"},{"description":"","name":"connect_fax"},{"description":"","name":"create_sub_account","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged identity operations."}},{"description":"","name":"create_voicemail"},{"description":"","name":"del_call_hunting"},{"description":"","name":"del_call_parking"},{"description":"","name":"del_call_recording"},{"description":"","name":"del_callback"},{"description":"","name":"del_caller_id_filtering"},{"description":"","name":"del_client","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged identity operations."}},{"description":"","name":"del_conference"},{"description":"","name":"del_conference_member"},{"description":"","name":"del_disa"},{"description":"","name":"del_email_to_fax"},{"description":"","name":"del_fax_folder"},{"description":"","name":"del_forwarding"},{"description":"","name":"del_ivr"},{"description":"","name":"del_location"},{"description":"","name":"del_member_from_conference"},{"description":"","name":"del_messages"},{"description":"","name":"del_music_on_hold"},{"description":"","name":"del_phonebook"},{"description":"","name":"del_phonebook_group"},{"description":"","name":"del_queue"},{"description":"","name":"del_recording","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can cause irreversible loss or service interruption."}},{"description":"","name":"del_ring_group"},{"description":"","name":"del_sip_uri"},{"description":"","name":"del_static_member"},{"description":"","name":"del_sub_account","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged identity operations."}},{"description":"","name":"del_time_condition"},{"description":"","name":"del_voicemail","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can cause irreversible loss or service interruption."}},{"description":"","name":"delete_fax_message"},{"description":"","name":"delete_mms","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can cause irreversible loss or service interruption."}},{"description":"","name":"delete_sms","risk":{"category":"destructive","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can permanently remove data or resources. Review findings: They can cause irreversible loss or service interruption."}},{"description":"","name":"e911_address_types"},{"description":"","name":"e911_cancel"},{"description":"","name":"e911_info"},{"description":"","name":"e911_provision","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect call delivery and emergency services."}},{"description":"","name":"e911_provision_manually"},{"description":"","name":"e911_update"},{"description":"","name":"e911_validate"},{"description":"","name":"get_allowed_codecs"},{"description":"","name":"get_auth_types"},{"description":"","name":"get_back_orders"},{"description":"","name":"get_balance"},{"description":"","name":"get_balance_management"},{"description":"","name":"get_call_accounts"},{"description":"","name":"get_call_billing"},{"description":"","name":"get_call_huntings"},{"description":"","name":"get_call_parking"},{"description":"","name":"get_call_recording"},{"description":"","name":"get_call_recordings"},{"description":"","name":"get_call_transcriptions"},{"description":"","name":"get_call_types"},{"description":"","name":"get_callbacks"},{"description":"","name":"get_caller_id_filtering"},{"description":"","name":"get_carriers"},{"description":"","name":"get_cdr"},{"description":"","name":"get_charges"},{"description":"","name":"get_client_packages"},{"description":"","name":"get_client_threshold"},{"description":"","name":"get_clients"},{"description":"","name":"get_conference"},{"description":"","name":"get_conference_members"},{"description":"","name":"get_conference_recording_file"},{"description":"","name":"get_conference_recordings"},{"description":"","name":"get_countries"},{"description":"","name":"get_deposits"},{"description":"","name":"get_device_types"},{"description":"","name":"get_did_countries"},{"description":"","name":"get_did_vpri"},{"description":"","name":"get_dids_can"},{"description":"","name":"get_dids_info"},{"description":"","name":"get_dids_international_geographic"},{"description":"","name":"get_dids_international_national"},{"description":"","name":"get_dids_international_toll_free"},{"description":"","name":"get_dids_usa"},{"description":"","name":"get_disas"},{"description":"","name":"get_dtmf_modes"},{"description":"","name":"get_email_to_fax"},{"description":"","name":"get_fax_folders"},{"description":"","name":"get_fax_message_pdf"},{"description":"","name":"get_fax_messages"},{"description":"","name":"get_fax_numbers_info"},{"description":"","name":"get_fax_numbers_portability"},{"description":"","name":"get_fax_provinces"},{"description":"","name":"get_fax_rate_centers_can"},{"description":"","name":"get_fax_rate_centers_usa"},{"description":"","name":"get_fax_states"},{"description":"","name":"get_forwardings"},{"description":"","name":"get_international_types"},{"description":"","name":"get_ip"},{"description":"","name":"get_ivrs"},{"description":"","name":"get_join_when_empty_types"},{"description":"","name":"get_languages"},{"description":"","name":"get_lnp_attach"},{"description":"","name":"get_lnp_attach_list"},{"description":"","name":"get_lnp_details"},{"description":"","name":"get_lnp_list"},{"description":"","name":"get_lnp_list_status"},{"description":"","name":"get_lnp_notes"},{"description":"","name":"get_lnp_status"},{"description":"","name":"get_locales"},{"description":"","name":"get_locations"},{"description":"","name":"get_lock_international"},{"description":"","name":"get_media_mms"},{"description":"","name":"get_mms"},{"description":"","name":"get_music_on_hold"},{"description":"","name":"get_nat"},{"description":"","name":"get_packages"},{"description":"","name":"get_phonebook"},{"description":"","name":"get_phonebook_groups"},{"description":"","name":"get_play_instructions"},{"description":"","name":"get_portability"},{"description":"","name":"get_protocols"},{"description":"","name":"get_provinces"},{"description":"","name":"get_queues"},{"description":"","name":"get_rate_centers_can"},{"description":"","name":"get_rate_centers_usa"},{"description":"","name":"get_rates"},{"description":"","name":"get_recording_file"},{"description":"","name":"get_recordings"},{"description":"","name":"get_registration_status"},{"description":"","name":"get_report_estimated_hold_time"},{"description":"","name":"get_reseller_balance"},{"description":"","name":"get_reseller_cdr"},{"description":"","name":"get_reseller_mms"},{"description":"","name":"get_reseller_sms"},{"description":"","name":"get_ring_groups"},{"description":"","name":"get_ring_strategies"},{"description":"","name":"get_routes"},{"description":"","name":"get_servers_info"},{"description":"","name":"get_sip_uris"},{"description":"","name":"get_sms"},{"description":"","name":"get_states"},{"description":"","name":"get_static_members"},{"description":"","name":"get_sub_accounts"},{"description":"","name":"get_termination_rates"},{"description":"","name":"get_time_conditions"},{"description":"","name":"get_timezones"},{"description":"","name":"get_transaction_history"},{"description":"","name":"get_voicemail_attachment_formats"},{"description":"","name":"get_voicemail_folders"},{"description":"","name":"get_voicemail_message_file"},{"description":"","name":"get_voicemail_messages"},{"description":"","name":"get_voicemail_setups"},{"description":"","name":"get_voicemail_transcriptions"},{"description":"","name":"get_voicemails"},{"description":"","name":"get_vpris"},{"description":"","name":"mail_fax_message_pdf"},{"description":"","name":"mark_listened_voicemail_message"},{"description":"","name":"mark_urgent_voicemail_message"},{"description":"","name":"move_fax_message"},{"description":"","name":"move_folder_voicemail_message"},{"description":"","name":"order_did","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They have direct financial consequences."}},{"description":"","name":"order_did_international_geographic"},{"description":"","name":"order_did_international_national"},{"description":"","name":"order_did_international_toll_free"},{"description":"","name":"order_did_virtual"},{"description":"","name":"order_fax_number","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They have direct financial consequences."}},{"description":"","name":"order_toll_free","risk":{"category":"financial","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can spend money, consume paid credits, or change financially consequential resources. Review findings: They have direct financial consequences."}},{"description":"","name":"order_vanity"},{"description":"","name":"remove_did_vpri"},{"description":"","name":"search_dids_can"},{"description":"","name":"search_dids_usa"},{"description":"","name":"search_fax_area_code_can"},{"description":"","name":"search_fax_area_code_usa"},{"description":"","name":"search_toll_free_can_us"},{"description":"","name":"search_toll_free_usa"},{"description":"","name":"search_vanity"},{"description":"","name":"send_call_recording_email","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They are user-representative messaging."}},{"description":"","name":"send_fax_message","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They are user-representative messaging."}},{"description":"","name":"send_mms","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They are user-representative messaging."}},{"description":"","name":"send_sms","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They are user-representative messaging."}},{"description":"","name":"send_voicemail_email","risk":{"category":"sends_externally","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can publish or send messages and content using the connected identity. Review findings: They are user-representative messaging."}},{"description":"","name":"set_call_hunting"},{"description":"","name":"set_call_parking"},{"description":"","name":"set_callback"},{"description":"","name":"set_caller_id_filtering"},{"description":"","name":"set_client"},{"description":"","name":"set_client_threshold"},{"description":"","name":"set_conference"},{"description":"","name":"set_conference_member"},{"description":"","name":"set_did_billing_type"},{"description":"","name":"set_did_info"},{"description":"","name":"set_did_pop"},{"description":"","name":"set_did_routing","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect call delivery and emergency services."}},{"description":"","name":"set_did_voicemail"},{"description":"","name":"set_disa"},{"description":"","name":"set_fax_folder"},{"description":"","name":"set_fax_number_email"},{"description":"","name":"set_fax_number_info"},{"description":"","name":"set_fax_number_url_callback"},{"description":"","name":"set_forwarding","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect call delivery and emergency services."}},{"description":"","name":"set_ivr","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect call delivery and emergency services."}},{"description":"","name":"set_location"},{"description":"","name":"set_music_on_hold"},{"description":"","name":"set_phonebook"},{"description":"","name":"set_phonebook_group"},{"description":"","name":"set_queue","risk":{"category":"code_execution","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can deploy code or change infrastructure and production environments. Review findings: They affect call delivery and emergency services."}},{"description":"","name":"set_recording"},{"description":"","name":"set_ring_group"},{"description":"","name":"set_sip_uri"},{"description":"","name":"set_sms"},{"description":"","name":"set_sub_account"},{"description":"","name":"set_time_condition"},{"description":"","name":"set_voicemail"},{"description":"","name":"signup_client","risk":{"category":"state_change","level":"high","recommendation":"Follow the connector-level remediation and require approval for consequential actions.","why":"This connector can create, update, configure, or otherwise change connected resources. Review findings: They are privileged identity operations."}},{"description":"","name":"unconnect_did"},{"description":"","name":"unconnect_fax"},{"description":"","name":"create_email_to_fax"},{"description":"","name":"update_email_to_fax"},{"description":"","name":"create_static_member"},{"description":"","name":"update_static_member"}],"tools_count":224,"transport":"streamable-http","type":"web_connector","url":"https://claude.ai/directory/b0973639-198f-41d9-9fcc-e7e39ff2c114","uuid":"c4baf502-1781-5db9-8ab3-fc552754de99","verification_tier":"community","version":""},"query_key":"ecliptical software inc voip ms unofficial","schema_version":1,"status":"match"}