Skip to main content
Glama
Sealjay

mcp-signal

by Sealjay

mcp-signal

Python uv MCP License: MIT GitHub issues GitHub stars Sealjay/mcp-signal MCP server

signal-export를 통해 로컬 암호화 데이터베이스에서 Signal Desktop 기록을 읽고, signal-cli를 통해 메시지를 발송하는 로컬 MCP(Model Context Protocol) 서버입니다.

mcp-signal은 개인 Signal 자동화를 위한 핵심 워크플로우(채팅 목록 조회, 메시지 읽기, 메시지 검색, 그룹 검사, 개인 또는 그룹 채팅으로 메시지 전송)에 중점을 둡니다. 모든 작업은 로컬에서 실행되며, 네트워크 리스너 없이 stdio 전송을 사용합니다.

참고 — 혼합 백엔드. 읽기/검색은 로컬 Signal Desktop 데이터베이스에서 수행됩니다. 전송은 별도로 설치 및 Signal 계정에 연결되어야 하는 signal-cli를 사용합니다. signal-cli를 사용할 수 없는 경우에도 읽기/검색 기능은 작동하지만 전송 도구는 작동하지 않습니다.

기능

  • Signal Desktop의 개인 및 그룹 채팅 목록 조회

  • 채팅의 최근 메시지 읽기

  • 특정 채팅 내 또는 전체 채팅에서 메시지 검색

  • 아웃바운드용 signal-cli 그룹 ID와 함께 그룹 채팅 목록 조회

  • 메시지 전송 대상:

    • 전화번호를 통한 개인 수신자

    • 그룹 ID를 통한 그룹

    • 정확한 채팅 이름을 통한 채팅 (중복 확인 포함)

  • 전적으로 사용자 기기에서 실행; 네트워크 리스너 없는 stdio 전송

Related MCP server: Signal MCP

설정

필수 조건

  • Python 3.13+

  • uv

  • 기존 로컬 메시지 데이터베이스가 있는 Signal Desktop

  • 아웃바운드 전송을 원하는 경우 설치 및 연결된 signal-cli

설치

  1. 저장소 복제

    git clone https://github.com/Sealjay/mcp-signal.git
    cd mcp-signal
  2. 의존성 설치

    uv sync
  3. signal-cli 설치 (선택 사항 — 아웃바운드 전송에만 필요)

    macOS의 경우 Homebrew를 사용하는 것이 가장 간단합니다:

    brew install signal-cli

아웃바운드 전송 구성

서버는 저장소 루트에 .env.local 파일이 있으면 자동으로 로드합니다. 이 파일은 gitignore 처리되며 기기 로컬 구성을 위한 권장 위치입니다.

cat > .env.local <<'EOF'
SIGNAL_ACCOUNT="+441234567890"
EOF

선택적 환경 변수:

변수

목적

SIGNAL_CLI_PATH

signal-cli 바이너리 경로 재정의

SIGNAL_DATA_DIR

Signal Desktop 데이터 디렉토리 재정의

SIGNAL_DB_PASSWORD

필요한 경우 암호화된 데스크톱 DB용 비밀번호

SIGNAL_DB_KEY

필요한 경우 암호화된 데스크톱 DB용 원시 키

셸에 설정된 환경 변수가 .env.local보다 우선합니다.

signal-cli 연결 (최초 실행 시에만)

mcp-signal은 연결 자체를 관리하지 않습니다. 먼저 로컬 signal-cli 장치를 연결하세요:

signal-cli link -n "signal-mcp"

Signal 모바일 앱에서 QR 코드를 스캔하세요 (설정 → 연결된 기기 → 새 기기 연결).

현재 signal-cli 버전에서는 link에 -a / --account를 전달하지 마세요. 새 보조 기기를 연결할 때는 전화번호가 필요하지 않습니다.

QR 코드가 승인된 후, 연결된 계정이 보이는지 확인하세요:

signal-cli listAccounts

해당 계정은 .env.local의 SIGNAL_ACCOUNT 값과 일치해야 합니다.

signal-cli는 연결된 계정 상태를 자체 로컬 데이터 디렉토리(macOS/Linux에서는 일반적으로 ~/.local/share/signal-cli/data)에 저장합니다. 이 상태는 이 저장소 외부에 존재하며 mcp-signal에 의해 커밋되지 않습니다.

모든 것이 연결되었는지 확인하세요:

uv run signal-mcp smoke

MCP 클라이언트 구성

모든 클라이언트는 stdio를 통해 동일한 방식으로 서버를 실행합니다. macOS에서는 uv의 절대 경로가 필요할 수 있습니다. 아래 macOS: uv PATH를 참조하세요.

Claude Code

가장 빠른 방법은 CLI를 사용하는 것입니다:

claude mcp add --transport stdio signal --scope user -- uv run --directory /absolute/path/to/mcp-signal signal-mcp serve

또는 프로젝트 루트의 .mcp.json(또는 사용자 범위 서버의 경우 ~/.claude.json)에 추가하세요:

{
  "mcpServers": {
    "signal": {
      "type": "stdio",
      "command": "uv",
      "args": ["run", "--directory", "/absolute/path/to/mcp-signal", "signal-mcp", "serve"]
    }
  }
}

파일을 직접 수정하는 경우, Claude Code 세션을 다시 시작하여 변경 사항을 적용하세요.

Claude Desktop

~/Library/Application Support/Claude/claude_desktop_config.json(macOS)에 추가하세요:

{
  "mcpServers": {
    "signal": {
      "command": "uv",
      "args": ["run", "--directory", "/absolute/path/to/mcp-signal", "signal-mcp", "serve"]
    }
  }
}

Claude Desktop을 다시 시작하세요. signal이 사용 가능한 통합 항목으로 나열되어야 합니다.

Cursor

~/.cursor/mcp.json에 추가하세요:

{
  "mcpServers": {
    "signal": {
      "command": "uv",
      "args": ["run", "--directory", "/absolute/path/to/mcp-signal", "signal-mcp", "serve"]
    }
  }
}

Cursor를 다시 시작하세요.

macOS: uv PATH

GUI 앱(Claude Desktop, Cursor)은 대화형 터미널의 PATH를 항상 상속받지 않으므로 uv가 spawn uv ENOENT 오류와 함께 실패할 수 있습니다. command에 uv의 절대 경로를 사용하여 해결하세요:

  • Homebrew — /opt/homebrew/bin/uv (Apple Silicon) 또는 /usr/local/bin/uv (Intel)

  • 수동 설치 — 터미널에서 which uv를 실행하여 경로를 찾으세요

예시:

{
  "mcpServers": {
    "signal": {
      "command": "/opt/homebrew/bin/uv",
      "args": ["run", "--directory", "/absolute/path/to/mcp-signal", "signal-mcp", "serve"]
    }
  }
}

아키텍처

구성 요소

설명

MCP 서버

Python/FastMCP, stdio 전송

읽기 경로

로컬 Signal Desktop 데이터베이스를 읽는 signal-export

전송 경로

요청 시 실행되는 signal-cli JSON-RPC

상태

별도의 캐시 없음; Signal Desktop 데이터에서 직접 읽음

데이터 흐름

  1. MCP 클라이언트가 stdio를 통해 signal-mcp serve를 실행합니다.

  2. 읽기/검색 도구가 로컬 Signal Desktop 데이터베이스에 대해 signal-export를 호출합니다.

  3. 그룹 목록 조회 및 아웃바운드 전송이 signal-cli -a ACCOUNT jsonRpc를 호출합니다.

  4. 결과가 구조화된 JSON으로 반환됩니다.

프로젝트 구조

mcp-signal/
  src/mcp_signal/
    config.py
    main.py
    reader.py
    server.py
    signal_cli.py
  tests/
  CLAUDE.md
  LICENSE
  README.md
  SECURITY.md

도구

도구

목적

list_chats

Signal Desktop의 개인 및 그룹 채팅 목록 조회

read_messages

특정 채팅의 메시지 읽기

search_messages

특정 채팅 내 또는 전체 채팅에서 메시지 검색

list_groups

그룹 ID를 포함한 signal-cli의 그룹 목록 조회

send_message

개인 수신자 또는 그룹으로 텍스트 메시지 전송

get_status

데스크톱 DB / signal-cli / 계정 준비 상태 표시

개인정보 보호 및 보안

  • 클라우드 릴레이 없음. 네트워크 리스너 없음. 모든 데이터는 사용자 기기에 유지됩니다.

  • 읽기/검색은 로컬 Signal Desktop 데이터만 사용합니다.

  • 전송 작업에는 로컬로 구성된 signal-cli 계정이 필요합니다.

  • .env.local은 SIGNAL_ACCOUNT와 같은 로컬 비밀 정보를 위한 것이며 커밋되지 않습니다.

  • signal-cli 연결된 기기 상태는 이 저장소 외부의 자체 로컬 앱 데이터 디렉토리에 저장되며 커밋되지 않습니다.

취약점 보고 방법은 SECURITY.md를 참조하세요.

제한 사항

  • 프롬프트 주입 위험: 많은 MCP 서버와 마찬가지로 이 서버도 the lethal trifecta의 대상이 될 수 있습니다. 악의적인 수신 메시지가 에이전트에게 다른 메시지를 유출하도록 지시할 수 있습니다. 도구 표면을 적절히 다루고 아웃바운드 작업을 승인하기 전에 검토하세요.

  • 혼합 백엔드: 채팅 기록은 Signal Desktop에서 가져오고, 아웃바운드 전송은 signal-cli에서 수행됩니다.

  • 첨부 파일 없음: 텍스트 전송만 가능합니다.

  • 실시간 알림 없음: 폴링/읽기 전용입니다.

  • MCP 인스턴스당 단일 계정.

  • 그룹 전송 시 signal-cli 필요: 로컬 DB 읽기만으로는 그룹으로 안전하게 전송할 수 있는 충분한 정보가 제공되지 않습니다.

개발

uv sync
uv run signal-mcp smoke
uv run pytest
uv run ruff check .

문제 해결

  • signal-cli를 찾을 수 없음 — signal-cli가 PATH에 있는지 확인하거나 .env.local에서 SIGNAL_CLI_PATH를 설정하세요. macOS에서는 brew install signal-cli가 가장 간단합니다.

  • 읽기/검색은 되지만 전송이 실패함 — signal-cli가 연결되지 않았거나 SIGNAL_ACCOUNT가 설정되지 않았습니다. signal-cli listAccounts를 실행하여 확인한 후 .env.local을 확인하세요.

  • signal-cli link가 멈추거나 실패함 — 현재 버전에서는 link에 -a / --account를 전달하지 마세요. signal-cli link -n "signal-mcp"를 실행하고 휴대폰으로 QR을 스캔하세요.

  • MCP 클라이언트가 서버를 실행할 수 없음 — args에는 상대 경로가 아닌 저장소의 절대 경로가 포함되어야 합니다. uv 자체가 spawn uv ENOENT 오류로 실패하면 macOS: uv PATH를 참조하세요.

  • 메시지가 반환되지 않음 — Signal Desktop이 설치되어 있고 메시지 기록이 있는지 확인하세요. 읽기 경로는 로컬 Signal Desktop 데이터베이스를 직접 쿼리합니다.

기여

풀 리퀘스트를 통한 기여를 환영합니다. 다음을 수행하세요:

  • 푸시하기 전에 uv run ruff check .를 실행하세요.

  • uv run pytest가 통과하는지 확인하세요.

전체 개발 워크플로우는 CLAUDE.md를 참조하세요.

라이선스

MIT 라이선스 — LICENSE를 참조하세요.

Available Tools

8 tools
chat_activityA

List Signal chats ranked by recent activity, showing last message date, last reply date, and count of unanswered inbound messages.

Read-only with no side effects. Use this to identify chats that need a response. Use list_chats instead for a general chat directory with message previews.

ParametersJSON Schema
NameRequiredDescriptionDefault
limitNoMaximum number of chats to return, between 1 and 200.

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Explicitly declares 'Read-only with no side effects.' Since no annotations are provided, the description adequately covers behavioral transparency. However, it lacks details on sorting or time window for 'recent activity,' which would be beneficial.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, each serving a purpose: first conveys functionality, second declares safety, third provides usage guidance. No wasted words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

With one parameter and an output schema, the description covers purpose, behavior, and usage guidance comprehensively. No gaps remain for this complexity level.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Only one parameter (limit) with 100% schema description coverage. The tool description adds no extra meaning beyond the schema's explanation of the limit range and default. Baseline score 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the tool lists Signal chats ranked by recent activity with specific fields (last message date, last reply date, count of unanswered inbound messages). Differentiates from sibling list_chats by specifying its unique output.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use this tool ('identify chats that need a response') and when to use the alternative ('Use list_chats instead for a general chat directory with message previews').

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

decrypt_attachmentA

Decrypt a locally stored Signal attachment and return the path to the decrypted file.

The encrypted_path and local_key values come from attachment metadata in read_messages or search_messages results. Read-only on Signal data; writes a decrypted copy to a temporary directory. Use this after reading messages that contain attachments.

ParametersJSON Schema
NameRequiredDescriptionDefault
encrypted_pathYesAbsolute filesystem path to the encrypted attachment file, as returned in the 'encrypted_path' field of message attachment metadata.
local_keyYesBase64-encoded 64-byte key (32-byte AES-CBC + 32-byte HMAC-SHA256), from the 'local_key' field of attachment metadata.

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations provided, so description bears full burden. Discloses that it is read-only on Signal data and writes a decrypted copy to a temporary directory. Adds important safety and side-effect information beyond basic decryption.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences covering purpose, parameter source, and usage context. No redundancy, well-structured, and front-loaded with the core action.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's moderate complexity (2 parameters, output schema exists), the description covers purpose, parameter sourcing, safety behavior, and usage timing. No obvious gaps for an agent to correctly select and invoke the tool.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with detailed descriptions. Description adds context on the origin and nature of the parameters (from attachment metadata, base64-encoded key structure), which aids correct invocation beyond schema alone.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states verb ('Decrypt'), resource ('locally stored Signal attachment'), and outcome ('return the path to the decrypted file'). Distinct from siblings which involve chat activity, status, lists, and messages.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states where the input parameters come from ('encrypted_path and local_key values come from attachment metadata in read_messages or search_messages') and advises using it after reading messages with attachments. No explicit exclusions, but context is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

get_statusA

Check whether the Signal MCP server can read local messages and send outbound messages.

Returns boolean fields: source_dir_exists, signal_cli_available, signal_account_configured, read_available, send_available. Read-only with no side effects. Call this before read or send operations to verify the server is correctly configured.

ParametersJSON Schema
NameRequiredDescriptionDefault

No parameters

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations, but description states 'Read-only with no side effects' and lists return fields, fully disclosing behavior.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, front-loaded with purpose, no wasted words. Efficient and clear.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Tool is simple with no parameters. Description covers purpose, return fields, and usage context. Output schema exists for further detail, making this complete.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

No parameters; schema coverage 100%. Description adds value by explaining return fields, which is sufficient for a zero-parameter tool.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states the tool checks server ability to read and send messages, with specific verb and resource. Distinct from sibling tools like read_messages or send_message.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly recommends calling before read or send operations, providing clear context. No need for alternatives as this is a single-purpose health check.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_chatsA

List direct and group Signal chats from the local desktop database, sorted by most recent message.

Each result includes name, phone number, message count, and a preview of the last message. Read-only with no side effects. Use this to discover exact chat names before calling read_messages or search_messages. Use list_groups instead when you need group_id values for send_message.

ParametersJSON Schema
NameRequiredDescriptionDefault
queryNoCase-insensitive substring to filter by chat name or phone number. Empty string returns all chats.
limitNoMaximum number of chats to return, between 1 and 200.

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Declares read-only with no side effects, and mentions data source and sorting. Without annotations, this provides sufficient behavioral context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three efficient sentences: purpose, output details, and usage guidelines. No unnecessary words.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 2 simple parameters with full schema, no annotations, and an output schema present, the description fully covers what the agent needs: purpose, output format, and when to use.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% with detailed parameter descriptions. The description adds no extra meaning beyond the schema, so baseline 3 is appropriate.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states it lists direct and group Signal chats from local desktop database, sorted by most recent message. Differentiates from list_groups by specifying when to use each.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly advises to use this tool to discover chat names before calling read_messages or search_messages, and to use list_groups for group_id values needed for send_message.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

list_groupsA

List Signal groups with group_id, name, description, members, and admin lists, sorted alphabetically.

Read-only with no side effects. Queries signal-cli when available; falls back to the local desktop database (without group_id). Use this to obtain group_id values needed by send_message. Use list_chats instead for a combined view of both direct and group chats.

ParametersJSON Schema
NameRequiredDescriptionDefault
queryNoCase-insensitive substring to filter group names. Empty string returns all groups.
limitNoMaximum number of groups to return, between 1 and 200.

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description carries full burden. It declares 'Read-only with no side effects' and explains the fallback from signal-cli to local desktop database (noting that group_id is missing in fallback). This is good but could be improved by mentioning any rate limits or error conditions.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three sentences, each serving a distinct purpose: purpose and output fields, safety and fallback, usage guidance and sibling differentiation. No wasted words, and critical information is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

The description covers all essential aspects: purpose, output fields, sorting, read-only safety, fallback behavior, when to use, and alternative tools. With an output schema available, return values are handled by schema. No gaps identified.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Input schema has 100% description coverage and describes both parameters well. The description adds value by stating the output is sorted alphabetically, which is not in the schema. Baseline is 3; the sorting detail justifies a 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the verb ('List'), resource ('Signal groups'), and the specific fields returned (group_id, name, description, members, admin lists). Also distinguishes from sibling 'list_chats' by noting that list_chats provides a combined view of direct and group chats.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly states when to use this tool: 'to obtain group_id values needed by send_message'. Also provides an alternative for a different use case: 'Use list_chats instead for a combined view'. Additionally, describes fallback behavior, giving clear context on data availability.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

read_messagesA

Read messages from a single Signal chat, returned newest-first.

Each message includes sender, date, body text, reactions, and attachment metadata. Read-only with no side effects. Requires an exact chat name from list_chats. Use search_messages instead to find messages by keyword across chats.

ParametersJSON Schema
NameRequiredDescriptionDefault
chat_nameYesExact chat name as returned by list_chats (case-sensitive).
limitNoMaximum number of messages to return, between 1 and 200.
offsetNoNumber of messages to skip from the most recent, for pagination (0-10000).
afterNoISO 8601 datetime; only return messages sent after this time, e.g. '2025-01-15T00:00:00'.
beforeNoISO 8601 datetime; only return messages sent before this time, e.g. '2025-02-01T00:00:00'.

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.3/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

States 'Read-only with no side effects', and describes what each message includes. No annotations provided, so description carries full burden; it adequately discloses read-only nature and output detail.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Four concise sentences with no wasted words. Front-loads purpose and immediately gives key details.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given 5 parameters with full schema coverage and output schema present, the description covers purpose, output format, prerequisite, and alternative tool sufficiently without needing to repeat schema details.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, so baseline is 3. The description adds minimal extra meaning beyond the schema (e.g., chat_name must be exact from list_chats), but does not significantly enhance parameter understanding.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Description clearly states 'Read messages from a single Signal chat' with verb and resource, and distinguishes from sibling 'search_messages' which finds messages by keyword across chats.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides prerequisite ('Requires an exact chat name from list_chats') and an alternative ('Use search_messages instead'), but does not explicitly exclude other inappropriate use cases.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

search_messagesA

Search Signal message bodies for a keyword, within one chat or across all chats, returned newest-first.

Read-only with no side effects. Use this to find messages by content. Use read_messages instead to browse a specific chat chronologically.

ParametersJSON Schema
NameRequiredDescriptionDefault
queryYesCase-insensitive substring to search for within message bodies.
chat_nameNoExact chat name to restrict the search to a single chat. Omit to search across all chats.
limitNoMaximum number of matching messages to return, between 1 and 200.

Output Schema

ParametersJSON Schema
NameRequiredDescription
resultYes

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Declares 'Read-only with no side effects', which covers safety. No annotations exist, so description carries full burden. Could mention search scope (message bodies only) but is adequate.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences only, no wasted words. Front-loaded with purpose and scope.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given output schema exists, description is comprehensive: covers usage scope, safety, sorting, and links to alternative. Only minor omission is pagination details, but acceptable.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3. Description adds value by explaining scope ('within one chat or across all chats') and sort order ('newest-first'), enhancing what schema provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

Clearly states the tool searches message bodies by keyword, within one chat or all, and returns newest-first. Distinguishes from sibling read_messages by specifying its use for content search versus chronological browsing.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly tells when to use ('to find messages by content') and when not to ('use read_messages instead to browse a specific chat chronologically'), with a direct sibling alternative.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

send_messageA

Send a text message via Signal to a direct recipient or group.

This is a write operation that delivers a real message through signal-cli. Exactly one of phone_number, group_id, or chat_name must be supplied; providing zero or more than one raises an error. Rate-limited to 1 message per recipient per second and 10 messages per 60-second window globally. Requires signal-cli and SIGNAL_ACCOUNT to be configured — call get_status first to verify send_available is true. Returns target_type, target identifier, and timestamp on success.

ParametersJSON Schema
NameRequiredDescriptionDefault
messageYesThe text message content to send.
phone_numberNoRecipient phone number in E.164 format (e.g. '+441234567890'). Mutually exclusive with group_id and chat_name.
group_idNoTarget group ID as returned by list_groups. Mutually exclusive with phone_number and chat_name.
chat_nameNoExact chat name from list_chats; auto-resolves to the matching phone_number or group_id. Mutually exclusive with the other two recipient fields.

Output Schema

ParametersJSON Schema
NameRequiredDescription

No output parameters

TDQS

A4.7/5.0
Behavior5/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

No annotations are present, so the description fully disclosures behavioral traits: it is a write operation, rate-limited (1/s per recipient, 10/60s globally), requires signal-cli and SIGNAL_ACCOUNT, and hints at the return structure. This covers all necessary behavioral context.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is concise, with the main purpose front-loaded, followed by essential rules and constraints in a logical order. Every sentence adds value, and there is no redundant or extraneous content.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (4 params, 1 required, mutual exclusivity, rate limits, prerequisites, and output schema), the description covers all necessary aspects: how to specify recipient, error conditions, rate limits, preconditions, and return format. It is fully sufficient for correct agent usage.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, and each parameter has a clear description in the schema (including mutual exclusivity). The tool description restates the exclusivity rule but adds no new semantic details about the parameters themselves beyond what the schema already provides.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description begins with 'Send a text message via Signal to a direct recipient or group,' which clearly identifies the action and resource. It further distinguishes itself from sibling tools (e.g., read_messages, get_status) by stating it is a write operation that delivers a real message.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit when-to-use guidance: exactly one recipient field must be supplied, and it warns against providing zero or multiple. It also specifies prerequisites (call get_status first) and rate limits, giving clear boundaries for safe invocation.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 16 tool updatesv0.1.3
    • Addedchat_activity
    • Addeddecrypt_attachment
    • Changedlist_chats2 fields changed
      • addedInput schema / properties / limit / description
        Added value: +"Maximum number of chats to return, between 1 and 200."
      • addedInput schema / properties / query / description
        Added value: +"Case-insensitive substring to filter by chat name or phone number. Empty string returns all chats."
    • Changedlist_groups2 fields changed
      • addedInput schema / properties / limit / description
        Added value: +"Maximum number of groups to return, between 1 and 200."
      • addedInput schema / properties / query / description
        Added value: +"Case-insensitive substring to filter group names. Empty string returns all groups."
    • Changedread_messages5 fields changed
      • addedInput schema / properties / after / description
        Added value: +"ISO 8601 datetime; only return messages sent after this time, e.g. '2025-01-15T00:00:00'."
      • addedInput schema / properties / before / description
        Added value: +"ISO 8601 datetime; only return messages sent before this time, e.g. '2025-02-01T00:00:00'."
      • addedInput schema / properties / chat_name / description
        Added value: +"Exact chat name as returned by list_chats (case-sensitive)."
      • addedInput schema / properties / limit / description
        Added value: +"Maximum number of messages to return, between 1 and 200."
      • addedInput schema / properties / offset / description
        Added value: +"Number of messages to skip from the most recent, for pagination (0-10000)."
    • Changedsearch_messages3 fields changed
      • addedInput schema / properties / chat_name / description
        Added value: +"Exact chat name to restrict the search to a single chat. Omit to search across all chats."
      • addedInput schema / properties / limit / description
        Added value: +"Maximum number of matching messages to return, between 1 and 200."
      • addedInput schema / properties / query / description
        Added value: +"Case-insensitive substring to search for within message bodies."
    • Changedsend_message4 fields changed
      • addedInput schema / properties / chat_name / description
        Added value: +"Exact chat name from list_chats; auto-resolves to the matching phone_number or group_id. Mutually exclusive with the other two recipient fields."
      • addedInput schema / properties / group_id / description
        Added value: +"Target group ID as returned by list_groups. Mutually exclusive with phone_number and chat_name."
      • addedInput schema / properties / message / description
        Added value: +"The text message content to send."
      • addedInput schema / properties / phone_number / description
        Added value: +"Recipient phone number in E.164 format (e.g. '+441234567890'). Mutually exclusive with group_id and chat_name."
    • Removedsignal_chat_activity
    • Removedsignal_get_chat_messages
    • Removedsignal_get_status
    • Removedsignal_list_chats
    • Removedsignal_list_groups
    • Removedsignal_read_messages
    • Removedsignal_search_chat
    • Removedsignal_search_messages
    • Removedsignal_send_message
  2. 15 tool updatesv0.1.2
    • First observedget_status
    • First observedlist_chats
    • First observedlist_groups
    • First observedread_messages
    • First observedsearch_messages
    • First observedsend_message
    • First observedsignal_chat_activity
    • First observedsignal_get_chat_messages
    • First observedsignal_get_status
    • First observedsignal_list_chats
    • First observedsignal_list_groups
    • First observedsignal_read_messages
    • First observedsignal_search_chat
    • First observedsignal_search_messages
    • First observedsignal_send_message

TDQS

A4.6/5.0

Scored across 8 tools

Disambiguation5/5

Each tool has a distinct purpose: chat_activity for unanswered messages, list_chats for directory, list_groups for group IDs, read_messages for browsing, search_messages for keyword search, send_message for sending, decrypt_attachment for attachments, get_status for configuration. No overlaps or ambiguity.

Naming Consistency4/5

Most tools follow verb_noun pattern (e.g., decrypt_attachment, list_chats), but chat_activity uses noun_noun. Overall consistent and clear, minor deviation.

Tool Count5/5

8 tools is well-scoped for a Signal messaging server: listing, reading, searching, sending, decrypting, and status checking. Not too few or too many.

Completeness5/5

Covers key operations: list chats/groups, read/search messages, send messages, decrypt attachments, check status. Missing features like message deletion or editing are likely out of scope for a read-only/send server.

Maintenance

ActivityStale
ResponsivenessSlow

Related MCP Connectors

Related MCP Servers

  • F
    license
    Not graded
    quality
    C
    maintenance
    MCP server for Signal via signal-cli that enables sending and receiving messages, managing contacts and groups, and reacting over stdio.
    2 npm
    -
  • A
    license
    Not graded
    quality
    A
    maintenance
    MCP server for a local-first messaging workspace that integrates Google Messages, WhatsApp, and Signal. It enables reading, sending, searching messages, and managing conversations through MCP tools.
    55
    -