Bond-OpenAI — voice actions for every software agent

One local MCP server. Any compatible agent. One phone task completed.

Bond-OpenAI gives Bond, Codex and other MCP-compatible software a safe telephone action. Clone the repository, bootstrap once, connect the MCP, and let the agent turn a task such as “call the restaurant and reserve a table” into a real consented conversation.

The product

Bond task / Codex prompt
        ↓
Local Bond-OpenAI MCP
  classify → clarify → preview → call
        ↓
Fredo phone runtime
  Twilio verified caller + Deepgram voice agent
        ↓
Structured result returned to the originating task

Bond finds the work. Codex understands the intent. Fredo makes the call.

Related MCP server: Twilio Call Service MCP Server

Quick start

git clone https://github.com/Caezarr/Bond-OpenAI.git
cd Bond-OpenAI
./scripts/bootstrap.sh
uv run bond-mcp doctor
uv run bond-mcp serve

The first run installs pinned dependencies and local tools. The user never copies shell commands from an agent response and never puts a secret in a task. For the public demo, provider credentials stay in the operator relay and the user only needs the public demo/profile.json configuration. A local .env is required only when running the provider directly.

MCP tools

bond.classify_task(task_text, context)
bond.create_phone_task(task_input, idempotency_key)
bond.get_phone_task_status(call_id)
bond.cancel_phone_task(call_id)

The same contract works from Bond, Codex, an IDE agent, or any MCP client. The adapter is local and provider-neutral; Fredo is the default phone executor.

See docs/MCP.md for the two-click client setup. See docs/DEMO-RELAY.md for the no-credential jury flow.

Safety by default

• explicit consent is required;

• E.164 destinations and Fredo's exact allowlist are enforced;

• only a verified caller identity is used;

• a human confirmation happens before dialing;

• one active call and a 180-second cap;

• recording is disabled;

• the agent discloses its synthetic voice and no recording;

• duplicate requests are idempotent;

• raw audio, secrets and full phone numbers stay out of logs.

Rejecting the preview means zero carrier call.

Project goals

• GOAL-BOND-MCP.md — software and MCP contract.

• GOAL-BOND-DESIGN.md — website, deck and visual system.

• GOAL-BOND-VOICE.md — goal index.

Current runtime boundary

The current phone engine uses Twilio for PSTN access and Deepgram for hosted speech recognition, dialogue and text-to-speech. The MCP itself runs locally. This repository does not claim local inference, recording, voice cloning or unattended bulk calling.