Skip to main content
Glama

pbx-mcp

pbx-mcp MCP server Documentation Status

An MCP server that lets an AI assistant inspect and control Asterisk and FreeSWITCH.

Ask "which extensions are offline right now?" or "why is my SIP trunk not registering?" and get a real answer from the live switch, not a guess.

Developed by Tahir Almas at ICT Innovations, the team behind ICTCore, ICTContact, ICTDialer, ICTFax and ICTPBX. The AMI and ESL clients in this repo are the same protocol groundwork those products run on.

Why

Debugging a PBX means memorising two very different command sets. Asterisk speaks AMI and a CLI with hundreds of verbs. FreeSWITCH speaks ESL with its own vocabulary. If you run both, you're context switching all day.

pbx-mcp puts a single, well described tool surface in front of both, so your assistant can go from "calls are failing" to sofia status gateway without you spelling out each step.

New here? The user guide walks through PBX setup, client config, worked examples and troubleshooting. This README is the quick reference.

Related MCP server: VoIPbin MCP Server

What your assistant sees

Twelve read-only tools, six per engine, each one described well enough that the model picks the right one without being told. This is the server running under the MCP Inspector:

pbx-mcp tools listed in the MCP Inspector

The four write tools, asterisk_originate, asterisk_hangup, freeswitch_originate and freeswitch_hangup, stay hidden until you set PBX_MCP_ALLOW_WRITE=true.

Install

npm install -g pbx-mcp

Or run it straight from npx, which is what most MCP client configs do:

npx -y pbx-mcp

You need Node 18 or newer.

Docker

There's a prebuilt image if you'd rather not put Node on the machine that talks to your PBX.

docker run -i --rm \
  -e ASTERISK_AMI_HOST=10.0.0.10 \
  -e ASTERISK_AMI_USERNAME=mcp \
  -e ASTERISK_AMI_PASSWORD=change-me \
  ghcr.io/ictinnovations/pbx-mcp

The same image is on Docker Hub as ictinnovations/pbx-mcp if that registry is an easier pull for you.

Three things to know:

  • -i is not optional. The server speaks MCP over stdio, so without stdin attached the container starts and then sits there saying nothing, which looks exactly like a broken server.

  • There is no port to publish. Nothing listens.

  • Your PBX has to be reachable from inside the container. If Asterisk runs on the Docker host itself, swap the IP above for host.docker.internal on Mac and Windows, or add --network host on Linux.

The image runs as a non-root user and, like every other way of running this, starts read only.

Configure

Everything comes from environment variables. Set the Asterisk block, the FreeSWITCH block, or both. The server only registers tools for what you've actually configured, so an Asterisk-only shop never sees a FreeSWITCH tool.

Asterisk

Variable

Default

Notes

ASTERISK_AMI_HOST

(required to enable)

Hostname or IP of the Asterisk box

ASTERISK_AMI_PORT

5038

AMI port from manager.conf

ASTERISK_AMI_USERNAME

AMI user

ASTERISK_AMI_PASSWORD

AMI secret

ASTERISK_AMI_TLS

false

Set true if tlsenable=yes

Your manager.conf user needs at least read = system,call,command and write = command. Add originate only if you plan to turn on write mode.

[mcp]
secret = change-me
read = system,call,command
write = command

FreeSWITCH

Variable

Default

Notes

FREESWITCH_ESL_HOST

(required to enable)

Hostname or IP of the switch

FREESWITCH_ESL_PORT

8021

Inbound ESL port

FREESWITCH_ESL_PASSWORD

ClueCon

From event_socket.conf.xml

Shared

Variable

Default

Notes

PBX_MCP_ALLOW_WRITE

false

Unlocks call control. Read the safety section first

PBX_MCP_TIMEOUT_MS

10000

Per command timeout

Provisioning (Asterisk only, opt-in)

Variable

Default

Notes

PBX_MCP_ALLOW_PROVISION

false

Registers the six trunk and extension tools. Independent of PBX_MCP_ALLOW_WRITE

PBX_MCP_TRUNK_ALLOW

(unset)

Comma-separated IPv4 CIDRs and hostnames a trunk may point at. Unset means asterisk_trunk_create is refused

PBX_MCP_CONTEXT_ALLOW

(unset)

Comma-separated dialplan contexts new objects may use. Unset means every create is refused

PBX_MCP_PJSIP_FILE

pjsip_mcp.conf

The one include file provisioning writes to. A bare pjsip_*.conf name (never pjsip.conf, manager.conf or any other file)

Claude Desktop

Add this to claude_desktop_config.json:

{
  "mcpServers": {
    "pbx": {
      "command": "npx",
      "args": ["-y", "pbx-mcp"],
      "env": {
        "ASTERISK_AMI_HOST": "10.0.0.10",
        "ASTERISK_AMI_USERNAME": "mcp",
        "ASTERISK_AMI_PASSWORD": "change-me",
        "FREESWITCH_ESL_HOST": "10.0.0.11",
        "FREESWITCH_ESL_PASSWORD": "ClueCon"
      }
    }
  }
}

The same shape works for any MCP client that speaks stdio. There's a copy in examples/claude_desktop_config.json.

To run the container instead of npx, keep the env block and point command at Docker:

{
  "mcpServers": {
    "pbx": {
      "command": "docker",
      "args": [
        "run", "-i", "--rm",
        "-e", "ASTERISK_AMI_HOST",
        "-e", "ASTERISK_AMI_USERNAME",
        "-e", "ASTERISK_AMI_PASSWORD",
        "ghcr.io/ictinnovations/pbx-mcp"
      ],
      "env": {
        "ASTERISK_AMI_HOST": "10.0.0.10",
        "ASTERISK_AMI_USERNAME": "mcp",
        "ASTERISK_AMI_PASSWORD": "change-me"
      }
    }
  }
}

Each -e NAME with no value forwards that variable from env into the container, which keeps the secrets out of the argument list.

Tools

Asterisk

Tool

What it does

asterisk_status

Version, uptime, active calls and calls processed

asterisk_channels

Every live channel with caller ID, state, bridge, duration and dialplan position. Optional substring filter

asterisk_endpoints

PJSIP endpoints with device state and contact count. Falls back to chan_sip peers on older installs

asterisk_dialplan

Dumps a context, or one extension inside a context

asterisk_cli

Any CLI command, subject to the safety policy below

asterisk_hangup_preview

Shows which live channels a hangup would drop, without dropping them

asterisk_originate

Places a call. Write mode only

asterisk_hangup

Kills a channel by name. Write mode only

FreeSWITCH

Tool

What it does

freeswitch_status

Version, uptime, current and maximum sessions

freeswitch_channels

Every live call leg from show channels. Optional substring filter that keeps the header row

freeswitch_registrations

Registered users on a Sofia profile, with contact URI, user agent and expiry

freeswitch_sofia_status

Every SIP profile and gateway, including whether trunks are registered upstream

freeswitch_api

Any API command, subject to the safety policy below

freeswitch_hangup_preview

Shows which live legs a hangup would drop, without dropping them

freeswitch_originate

Places a call. Write mode only

freeswitch_hangup

uuid_kill on a channel UUID. Write mode only

Safety

A PBX is not a scratch pad. Reloading a profile drops registrations, and an originate spends real money on a live trunk. So the default posture is read-only and the guards are layered:

Read-only by default. asterisk_cli accepts an allow list of inspection prefixes (core show, pjsip show, dialplan show, queue show and friends). freeswitch_api accepts the same kind of list (status, show, sofia status, db list and friends), matched on the start of the command so the subcommand counts.

The FreeSWITCH list allows subcommands, it does not deny scary words. sofia status reads, sofia profile internal restart isn't on the list, so it's refused. This used to work the other way around, scanning each word against a list of state changing verbs, and that only ever catches the words somebody thought of. conference 3001 kick all walked straight through it. Reported by Electrical-Place-458 on r/mcp.

Write tools aren't registered at all in read-only mode. asterisk_originate and the other three never appear in tools/list unless you set PBX_MCP_ALLOW_WRITE=true. A model can't call a tool it can't see.

The hangup preview tools are always available. asterisk_hangup_preview and freeswitch_hangup_preview show which live channels a hangup would drop without touching them, so you can see the blast radius before setting the write flag, or catch a typo in a channel name before running the real thing. They're read-only by contract but exercise the same matching the write path uses.

Shell metacharacters are rejected on both transports before a command is sent.

AMI header injection is blocked. Every field that lands in an AMI action is checked for carriage returns and newlines, so a caller ID string can't smuggle in an extra header.

Output is clamped to 20,000 characters. One show channels on a busy switch won't flood the context window.

Even with all that, give the AMI user the narrowest permission set that answers your questions, and put the PBX behind a firewall rather than on the public internet.

Provisioning trunks and extensions (Asterisk, opt-in)

Six more tools create, list and delete PJSIP trunks and SIP extensions through AMI UpdateConfig. They are registered only when PBX_MCP_ALLOW_PROVISION=true, and they are separate from write mode: enabling one does not enable the other.

Tool

What it does

asterisk_trunk_create

IP-authenticated trunk: endpoint, aor and identify. Fields: name, host, port (5060), transport (udp, tcp, tls), codecs, context, dry_run

asterisk_trunk_list / asterisk_trunk_delete

List or remove trunks this server created

asterisk_extension_create

A SIP endpoint phones register to (endpoint, aor, auth), not a dialplan extension. Fields: number, context, codecs, dry_run. The generated password is returned once

asterisk_extension_list / asterisk_extension_delete

List or remove extensions this server created. Passwords are never listed

Codecs are ulaw, alaw, g722, g729, opus. Names and numbers match ^[A-Za-z0-9_-]{1,32}$.

One-time setup

  1. Create the managed file, empty, beside pjsip.conf (a missing include is an error), and let Asterisk write to it:

    touch /etc/asterisk/pjsip_mcp.conf
  2. Add this single line at the end of pjsip.conf. Nothing else in pjsip.conf is ever touched:

    #include pjsip_mcp.conf
  3. Give the AMI user the extra permissions provisioning needs. config is for UpdateConfig/GetConfig, command for the reload and verify steps, originate only if you also use write mode:

    [mcp]
    secret = change-me
    deny = 0.0.0.0/0.0.0.0
    permit = 192.0.2.0/24
    read = system,call,command
    write = command,originate,config
  4. Trunks reference a transport named transport-udp, transport-tcp or transport-tls; define the ones you will use in pjsip.conf.

How it works

  • Everything goes into the managed file with UpdateConfig (NewCat, Append, RenameCat, DelCat), then module reload res_pjsip.so, then pjsip show endpoint mcp-<name>. If Asterisk does not report the endpoint, the change is removed again and the call returns an error.

  • Every object is named mcp-<name>. List and delete only act on mcp- sections of the managed file, and a trunk cannot be deleted as an extension or the other way round.

  • Create refuses a name that already exists. dry_run=true returns the exact config block and makes no AMI calls; for an extension the password is shown as a placeholder.

  • All provisioning calls are serialized in-process, because UpdateConfig is read-modify-write. Run only one pbx-mcp provisioner per managed file.

  • An extension registers as mcp-<number>, not the bare number. PJSIP matches the endpoint and its AOR by the registering username, and every object has to carry the mcp- prefix. The create response states the username.

  • The password is 24 random URL-safe characters from crypto.randomBytes. It is returned only in the create response, which is the only place it is ever shown or logged; it does exist in the managed file on the PBX, as any SIP password must.

Toll fraud: read this before enabling

A SIP trunk lets calls leave your PBX, and a registrable extension with a context that reaches an outbound route lets anyone who learns the password do the same. Stolen SIP credentials are a leading cause of large telephony bills.

  • Point PBX_MCP_CONTEXT_ALLOW at contexts that cannot dial out to the PSTN unless you really mean it. The context is the only thing that decides what a registered phone or trunk may call.

  • Keep PBX_MCP_TRUNK_ALLOW as narrow as you can. Hostnames are compared literally and never resolved, so DNS cannot widen the list. IPv6 is not supported.

  • An empty allowlist refuses everything: provisioning fails closed.

  • Treat the assistant that holds these tools as holding the ability to change who can reach your PBX. Review what it creates (*_list, or dry_run first), and do not expose SIP (5060) or AMI (5038) to the internet.

  • Prefer a lab or staging PBX when trying this out.

Example flow

Using documentation addresses (RFC 5737) only. Environment:

PBX_MCP_ALLOW_PROVISION=true
PBX_MCP_TRUNK_ALLOW=192.0.2.0/24,198.51.100.0/24
PBX_MCP_CONTEXT_ALLOW=from-trunk,from-internal
  1. Preview a trunk with asterisk_trunk_create and dry_run=true:

    { "name": "carrier1", "host": "192.0.2.10", "port": 5060, "transport": "udp",
      "codecs": ["ulaw", "alaw"], "context": "from-trunk", "dry_run": true }

    which returns

    [mcp-carrier1]
    type=endpoint
    transport=transport-udp
    context=from-trunk
    disallow=all
    allow=ulaw,alaw
    aors=mcp-carrier1
    
    [mcp-carrier1]
    type=aor
    contact=sip:192.0.2.10:5060
    
    [mcp-carrier1]
    type=identify
    endpoint=mcp-carrier1
    match=192.0.2.10
  2. Run it again without dry_run. A host outside the allowlist, for example 203.0.113.5, is refused.

  3. Create an extension: { "number": "1001", "context": "from-internal" }. The reply gives the SIP username mcp-1001 and the password, once.

  4. Point a phone at the PBX with those credentials, then check it with asterisk_endpoints.

  5. asterisk_extension_list and asterisk_trunk_list show what exists; asterisk_extension_delete with 1001 and asterisk_trunk_delete with carrier1 remove it again.

Tested against Asterisk 22 (certified 22.8). The PJSIP options used (identify, max_contacts, remove_existing, auth_type=userpass) and the UpdateConfig features (RenameCat, catfilter) are standard, but re-check them on other Asterisk versions. TCP and TLS trunks are generated but were not exercised against a live peer.

Build from source

git clone https://github.com/ictinnovations/pbx-mcp.git
cd pbx-mcp
npm install
npm run build
npm start

The AMI and ESL clients have no third party dependencies. Both protocols are just framed text over TCP, and hand rolling them keeps the install small and the behaviour predictable. The only runtime dependencies are the MCP SDK and Zod.

The protocol clients, on their own

If you want to talk to a PBX from your own Node code and don't need MCP at all, the two clients underneath this server are published separately. Same protocol work, no MCP SDK, no Zod, nothing:

  • asterisk-ami-node - Asterisk Manager Interface client. npm install asterisk-ami-node

  • freeswitch-esl-node - FreeSWITCH Event Socket client, inbound mode. npm install freeswitch-esl-node

Both are zero dependency, TypeScript, ESM and CommonJS, Node 18 or newer, and tested against mock switches so you can run the suite without a PBX.

Layout

src/
  index.ts          entry point, config to transport wiring
  ami.ts            Asterisk Manager Interface client
  esl.ts            FreeSWITCH Event Socket Layer client
  config.ts         environment config and the command safety policy
  tools/
    asterisk.ts     Asterisk tool definitions
    freeswitch.ts   FreeSWITCH tool definitions
    format.ts       text table and truncation helpers

Contributing

Issues and pull requests are welcome. If you're adding a tool, describe it the way you'd describe it to a colleague who has never seen your dialplan. The model picks tools from those descriptions, so a vague one is a broken one.

About

Built and maintained by Tahir Almas, founder of ICT Innovations.

ICT Innovations has shipped open source and commercial telephony since 2005. If pbx-mcp is useful to you, the wider stack behind it might be too:

  • ICTCore - open source telephony framework, the base for the products below

  • ICTPBX - white label multi tenant IP PBX, with a free community edition on GitHub

  • ICTContact - contact center and unified communications

  • ICTDialer - auto and predictive dialer

  • ICTFax - open source fax server

  • asterisk-ami-node and freeswitch-esl-node - the protocol clients from this repo, published on their own

Questions about the commercial products go through the ICT Innovations support portal. Questions about pbx-mcp itself belong in GitHub issues, where everyone can read the answer.

License

MIT. See LICENSE.

Available Tools

12 tools
asterisk_channelsList active Asterisk channelsA
Read-only

Every channel currently up on the PBX, with caller ID, state, bridge, duration and the dialplan location it is sitting in. This is the tool for 'what calls are live right now'.

NameRequiredDescriptionDefault
filterNoCase-insensitive substring to match against any field, for example an extension or caller ID.

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=true, so safety and external-state dependence are covered. The description usefully adds that results are a live snapshot of channels that are "currently up" and what each row contains, but says nothing about truncation, latency, or whether the read touches the switch in a way that could be slow on large PBXs.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, no redundancy, and the returned-field list comes first with the usage cue last. Every clause carries information an agent can act on.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a no-parameter, read-only list tool with no output schema, the description does the necessary work by naming the returned fields and framing the result as a current snapshot. It stops short of noting whether the list can be very large or how errors from an unreachable PBX surface.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the single filter parameter is documented as a case-insensitive substring match against any field. The description never mentions filtering at all, so it adds nothing beyond the schema; baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names a specific resource (live channels on the Asterisk PBX) and enumerates the fields it surfaces (caller ID, state, bridge, duration, dialplan location), which tells an agent exactly what it gets back. It does not explicitly contrast with freeswitch_channels, relying on the platform in the name to separate the two siblings.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The line "This is the tool for 'what calls are live right now'" gives a clear triggering question, which is stronger than most list tools. However it states no exclusions or follow-on routing (e.g. to asterisk_hangup_preview before dropping a call, or to freeswitch_channels for the other platform).

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

asterisk_cliRun an Asterisk CLI commandB
Read-only

Run a command through the Asterisk CLI and return its raw output. In the default read-only mode only inspection commands such as 'core show', 'pjsip show' and 'queue show' are permitted. Set PBX_MCP_ALLOW_WRITE=true to lift that restriction.

NameRequiredDescriptionDefault
commandYesThe CLI command, for example 'pjsip show endpoints' or 'queue show support'.

TDQS

B3.4/5.0
Behavior1/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

The annotations declare readOnlyHint=true and destructiveHint=false, but the description says setting PBX_MCP_ALLOW_WRITE=true lifts the read-only restriction, permitting write commands. That conditional write capability contradicts the static read-only and non-destructive annotations.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is three sentences, front-loaded with the core action and output behavior, then the default permission restriction and override. Every sentence adds useful context with no filler.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter tool with full schema coverage, the description covers the action, raw output, and permission modes. It is adequate, though it could say more about invalid-command behavior, output size, and when generic CLI use is preferable to a specialized sibling.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, and the schema itself already documents the single command parameter with examples. The description adds permitted-command examples but does not add syntax, format, or semantic details beyond what the schema provides, so the baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description states a specific verb and resource: running an Asterisk CLI command and returning raw output. It does not distinguish this generic escape hatch from more targeted siblings such as asterisk_channels, asterisk_endpoints, or asterisk_status, so it falls short of a 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

It gives clear operational context: default read-only mode, permitted inspection command families, and the PBX_MCP_ALLOW_WRITE override. However, it does not explicitly say when to prefer specialized sibling tools over this generic CLI tool, leaving alternative selection to inference.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

asterisk_dialplanShow dialplanA
Read-only

Dump the dialplan for a context, or for one extension within a context. Useful for tracing where a call would go before placing it.

NameRequiredDescriptionDefault
contextYesDialplan context, for example 'from-internal' or 'default'.
extensionNoOptional single extension to narrow the output.

TDQS

A4/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=true, so the safety profile is covered. The description adds the purpose (call-path tracing) but says nothing about output volume or shape, which matters for a "dump" operation that can return a large dialplan; no pagination or truncation behavior is disclosed.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two short sentences, zero filler, with the primary scoping behavior front-loaded and the use case trailing as supporting context.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only, two-parameter inspection tool with full schema coverage and no output schema, the description covers what the agent needs to select and call it. A brief note on expected output size for large contexts would close the remaining gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100%, with both `context` and `extension` documented including an example context value. The description only restates that extension narrows the output, so it adds no semantics beyond the schema; baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb (dump) and resource (dialplan) and immediately clarifies the two scoping modes: whole context or a single extension within a context. That precision is enough to distinguish it from every sibling, which all target entirely different resources (channels, endpoints, registrations, status).

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a concrete use case — tracing where a call would go before placing it — which tells the agent when this tool is the right choice. It stops short of naming alternatives or stating exclusions, so it is clear context without full routing guidance.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

asterisk_endpointsList PJSIP endpoints and registration stateA
Read-only

PJSIP endpoints with their device state and how many contacts are registered. Use this to answer 'is extension 1001 registered' or 'which phones are offline'. Falls back to chan_sip peers on older installations.

NameRequiredDescriptionDefault
filterNoCase-insensitive substring to match against the endpoint name.

TDQS

A4.1/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint and openWorldHint, so the safety profile is covered. The description adds genuinely non-obvious behavior: it falls back to chan_sip peers on older installations, which changes what the returned data means. It does not describe result ordering or volume, which is a minor gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences: what it returns, when to use it, and the fallback caveat. Every sentence earns its place and the payload description is front-loaded.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a read-only, single-optional-parameter listing tool with no output schema, the description covers the returned fields, the intended question types, and a platform-variance caveat. Nothing needed to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the single optional 'filter' parameter is already documented as a case-insensitive substring match. The description never mentions filtering, so it adds nothing beyond the schema, but the baseline of 3 applies when the schema carries the parameter semantics.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names a concrete resource (PJSIP endpoints) and the attributes returned (device state, registered contact count), so the agent knows exactly what comes back. It differentiates itself from asterisk_channels implicitly via the registration/device-state framing, but never names a sibling tool to contrast with.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Provides two concrete question templates ('is extension 1001 registered', 'which phones are offline') that map cleanly onto the tool, which is strong contextual usage guidance. It stops short of saying when NOT to use it or which sibling (e.g. freeswitch_registrations, asterisk_channels) to pick instead.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

asterisk_hangup_previewPreview what a hangup would dropA
Read-only

Show which live channels a hangup would affect, without touching them. Takes the same channel argument as asterisk_hangup and reports the exact match plus any near misses, so you can see the blast radius before dropping a call. Always available, including in read-only mode.

NameRequiredDescriptionDefault
channelYesChannel name, exact or partial, for example 'PJSIP/1001-0000000a' or just '1001'.

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, so the non-mutating nature is partly redundant, but the description adds real value: it explains the matching behavior (exact match plus near misses) and the read-only-mode availability, which annotations do not convey. It stops short of describing output shape or limits on the near-miss list.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences, front-loaded with the core action, then the blast-radius rationale, then the availability caveat. No filler and nothing buried mid-sentence.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter read-only preview with no output schema, the description covers what it does, what it returns at a high level (exact match plus near misses), and its availability constraints. Nothing an agent needs in order to call it correctly is missing.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, so baseline is 3, but the description adds matching-resolution semantics — that the single channel argument yields an exact match plus near misses — which the schema does not state. It also pins the argument as identical to asterisk_hangup's, which helps an agent reuse a known value.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource: 'Show which live channels a hangup would affect, without touching them.' The preview-vs-execute distinction from the sibling asterisk_hangup is explicit, so an agent can pick between them without inspecting schemas.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicitly routes usage: 'see the blast radius before dropping a call,' and names asterisk_hangup as the tool it mirrors ('takes the same channel argument as'). It also states the precondition-free case ('Always available, including in read-only mode'), leaving little to infer.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

asterisk_statusAsterisk statusA
Read-only

Core status of the Asterisk server: version, uptime, active calls and calls processed. Use this first to confirm the PBX is reachable before running other Asterisk tools.

NameRequiredDescriptionDefault

No parameters

TDQS

A4.5/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations indicate readOnlyHint=true and openWorldHint=true. The description adds context by listing the specific status fields and the reachability use case, which goes beyond the annotations. It does not contradict the read-only nature, and no negative side effects are mentioned, which is consistent with a status read.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is two sentences, front-loaded with the return content, and the second sentence provides actionable guidance. Every word earns its place; there is no redundancy or fluff.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple status tool with no params, no output schema, and readOnly annotations, the description fully covers what the tool returns, how to use it, and its role among sibling tools. It is complete and self-sufficient.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters, so the baseline is 4. The description does not need to explain parameter semantics, and the schema is fully covered. There is no missing parameter information.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description specifies the resource ('Core status of the Asterisk server') and the exact fields returned ('version, uptime, active calls and calls processed'), making it clear this is a server-level status tool. It distinguishes itself from siblings like asterisk_channels and asterisk_endpoints by focusing on core server health rather than specific subsystems.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides explicit usage guidance: 'Use this first to confirm the PBX is reachable before running other Asterisk tools.' This tells the agent when to use it, but it does not explicitly name alternatives or state when not to use it, though the implication is clear.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

freeswitch_apiRun a FreeSWITCH API commandA
Read-only

Run a command through the FreeSWITCH event socket and return its raw output. In the default read-only mode only inspection commands such as 'status', 'show' and 'sofia status' are permitted. Set PBX_MCP_ALLOW_WRITE=true to lift that restriction.

NameRequiredDescriptionDefault
commandYesThe API command, for example 'show calls' or 'sofia status gateway mytrunk'.

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations cover the safety profile, but the description adds the conditional write-gate behavior (env var opt-in) that the static readOnlyHint cannot express, plus the fact that output is raw/unparsed. It does not mention error formats or payload size limits, which keeps it below a 5.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences, zero waste, with the core action and return value front-loaded ahead of the permission caveat. Every sentence earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single open-ended string parameter with no output schema, the description covers the essential unknowns: it is a pass-through to the event socket, output is raw, and a permission gate may cause rejection. Only the failure/timeout behavior is left unaddressed.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the schema already supplies concrete examples ('show calls', 'sofia status gateway mytrunk'), so the description need not document the single parameter. It adds nothing about the command string's syntax or quoting that the schema lacks, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Run a command through the FreeSWITCH event socket') plus the return characteristic ('raw output'). It is distinguishable from the narrower siblings like freeswitch_status or freeswitch_channels as the generic escape hatch, though it never names them explicitly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Adds a real usage rule: in the default read-only mode only inspection commands such as 'status', 'show', 'sofia status' are permitted, and PBX_MCP_ALLOW_WRITE=true lifts the restriction. That tells the agent when a call will be rejected, but it doesn't route the agent to the specific-purpose siblings when those would be more appropriate.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

freeswitch_channelsList active FreeSWITCH channelsA
Read-only

Every call leg currently up on the switch, as returned by 'show channels'. This is the tool for 'what calls are live right now' on FreeSWITCH.

NameRequiredDescriptionDefault
filterNoCase-insensitive substring to match against the row, for example a number or a UUID.

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=true, so safety and openness are covered. The description adds that output mirrors 'show channels' and is a live snapshot rather than historical, but says nothing about output shape, volume, or refresh cadence.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no filler, and the identifying characteristic (live call legs) comes first. Every clause carries information an agent can act on.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

A one-parameter, read-only listing tool with full schema coverage and annotations needs little more than this. Only the absence of any note on result size or relationship to the other FreeSWITCH status tools keeps it from a 5.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema description coverage is 100% and the single optional 'filter' parameter is fully documented in the schema, including substring-matching semantics. The description adds nothing about parameters, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific resource and scope: 'every call leg currently up on the switch', qualified as FreeSWITCH and tied to the 'show channels' source. This implicitly separates it from the Asterisk siblings (asterisk_channels), though it never names them directly.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a clear selection rule: 'the tool for what calls are live right now'. It stops short of exclusions — it doesn't say when to prefer freeswitch_status, freeswitch_sofia_status, or freeswitch_registrations instead.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

freeswitch_hangup_previewPreview what a hangup would dropA
Read-only

Show which live call legs a hangup would affect, without touching them. Takes the same UUID argument as freeswitch_hangup and reports the matching channel plus the leg it is bridged to, so you can see the blast radius first. Always available, including in read-only mode.

NameRequiredDescriptionDefault
uuidYesChannel UUID, or part of one, as reported by freeswitch_channels.

TDQS

A4.2/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true, and the description reinforces this with 'without touching them' and the read-only-mode note, then adds genuinely new behavioral detail: it reports the matching channel plus the leg it is bridged to. It does not describe behavior when the UUID matches nothing or how ambiguous partial matches are resolved, which is the remaining gap.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Three short sentences, zero waste. The non-destructive nature and blast-radius framing are front-loaded, and the availability note is placed last where it belongs as a caveat.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a one-parameter read-only preview with no output schema, the description covers purpose, safety, return content ('the matching channel plus the leg it is bridged to'), and availability. The one missing piece is what the caller sees when nothing matches or when the partial UUID is ambiguous, which matters for a preview tool whose whole job is reporting.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the schema already documents the single uuid parameter, including partial-match support ('or part of one'). The description adds only that it is the 'same UUID argument as freeswitch_hangup', which is a useful consistency cue but not new semantics. Baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

States a specific verb and resource ('Show which live call legs a hangup would affect') and immediately distinguishes itself from the mutating sibling by noting it does so 'without touching them' and takes 'the same UUID argument as freeswitch_hangup'. An agent can tell it apart from freeswitch_hangup without opening either schema.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives clear context for when to reach for it: 'so you can see the blast radius first', i.e. before calling freeswitch_hangup, plus an availability note ('Always available, including in read-only mode') that tells an agent it can call this even under restrictive conditions. It stops short of explicitly naming when not to use it or naming the asterisk_hangup_preview sibling as the alternative for the other stack.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

freeswitch_registrationsList SIP registrationsA
Read-only

Registered SIP users on a Sofia profile, with contact URI, user agent and expiry. Use this to answer 'is this extension registered' or 'which devices dropped off'.

NameRequiredDescriptionDefault
profileNoSofia profile name, usually 'internal' or 'external'.internal

TDQS

A3.8/5.0
Behavior3/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=true, so the safety profile is covered. The description adds the returned field set, which is valuable given there is no output schema, but it says nothing about whether the snapshot is live, how staleness is handled, or how large the result set can be.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two tight sentences with zero filler; the returned-field summary comes first and the use-case framing second, so the agent gets the essentials immediately.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-parameter read tool with no output schema, the description does the important work of naming the return fields. Minor gaps remain around result ordering, pagination, and liveness, which matter for a registration list an agent may need to reason about.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the profile parameter is fully documented in the schema, including its default. The description's phrase "on a Sofia profile" merely restates the filter without adding semantics such as what happens when an unknown profile is supplied, so baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description names a specific resource (registered SIP users on a Sofia profile) and enumerates the fields returned (contact URI, user agent, expiry), so the agent knows exactly what comes back. It does not, however, differentiate itself from the closest sibling, freeswitch_sofia_status, leaving ambiguity about which to pick.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Two concrete example questions ("is this extension registered", "which devices dropped off") give a clear picture of the situations this tool serves. There are no explicit exclusions or named alternatives, so the agent must infer when to prefer freeswitch_sofia_status or asterisk_endpoints instead.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

freeswitch_sofia_statusSofia SIP profile and gateway statusA
Read-only

State of every Sofia SIP profile and gateway, including whether trunks are registered upstream. This is where to look when outbound calls fail but the switch itself is healthy.

NameRequiredDescriptionDefault
profileNoOptional profile name for a detailed view instead of the summary.

TDQS

A4/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint and openWorldHint, so safety is covered. The description adds real value beyond that by previewing the returned content (profile/gateway state plus upstream registration) and framing the failure scenario it diagnoses, which matters since there is no output schema.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two sentences, no filler, with the resource and the diagnostic use case both front-loaded. Every clause earns its place.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness4/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a single-optional-parameter read tool with annotations and no output schema, the description covers purpose, returned content, and diagnostic context. Only the shape of the detailed (per-profile) view is left unstated, a minor gap.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters3/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100% and the single optional 'profile' parameter is fully documented there, including the summary-vs-detailed distinction. The description says nothing about the parameter, so it neither adds nor detracts; baseline 3 applies.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose4/5

Does the description clearly state what the tool does and how it differs from similar tools?

Names a specific resource (every Sofia SIP profile and gateway) and a concrete state (upstream trunk registration), which is more precise than the sibling freeswitch_status. It differentiates implicitly via the 'switch itself is healthy' framing rather than naming the sibling, so it falls just short of 5.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Gives a clear diagnostic trigger: 'where to look when outbound calls fail but the switch itself is healthy.' That condition also implies when not to use it (generic switch problems belong elsewhere), though no sibling is named explicitly.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

freeswitch_statusFreeSWITCH statusA
Read-only

Core status of the FreeSWITCH server: version, uptime, current and maximum sessions. Use this first to confirm the switch is reachable before running other FreeSWITCH tools.

NameRequiredDescriptionDefault

No parameters

TDQS

A4.7/5.0
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

Annotations already declare readOnlyHint=true and openWorldHint=true, so the description adds value by listing the specific status fields and noting the reachability check role. No behavioral surprises or omissions beyond what annotations cover.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness5/5

Is the description appropriately sized, front-loaded, and free of redundancy?

Two concise sentences—one listing the returned fields, one providing usage guidance. No fluff or repetition.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness5/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

For a simple, no-parameter status tool, the description fully covers what it returns and when to use it. The absence of an output schema is compensated by listing the exact fields. Sibling context is well handled.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

The tool has zero parameters and the schema is empty with 100% coverage. With no params to describe, the description does not need to add parameter details; baseline for zero-param tools is 4.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description clearly states the tool provides 'Core status of the FreeSWITCH server' with specific fields (version, uptime, sessions), distinguishing it from sibling tools like freeswitch_channels or asterisk_status. The intent to check server reachability is explicit.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines5/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

Explicit guidance: 'Use this first to confirm the switch is reachable before running other FreeSWITCH tools.' This tells when to use and implies alternatives for more specific checks.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

  1. 10 tool updatesv0.1.4
    • Changedasterisk_channels1 field changed
      • removedInput schema / additionalProperties
        Removed value: -false
    • Changedasterisk_cli1 field changed
      • removedInput schema / additionalProperties
        Removed value: -false
    • Changedasterisk_dialplan1 field changed
      • removedInput schema / additionalProperties
        Removed value: -false
    • Changedasterisk_endpoints1 field changed
      • removedInput schema / additionalProperties
        Removed value: -false
    • Addedasterisk_hangup_preview
    • Changedfreeswitch_api1 field changed
      • removedInput schema / additionalProperties
        Removed value: -false
    • Changedfreeswitch_channels1 field changed
      • removedInput schema / additionalProperties
        Removed value: -false
    • Addedfreeswitch_hangup_preview
    • Changedfreeswitch_registrations1 field changed
      • removedInput schema / additionalProperties
        Removed value: -false
    • Changedfreeswitch_sofia_status1 field changed
      • removedInput schema / additionalProperties
        Removed value: -false
  2. 10 tool updatesv0.1.1
    • First observedasterisk_channels
    • First observedasterisk_cli
    • First observedasterisk_dialplan
    • First observedasterisk_endpoints
    • First observedasterisk_status
    • First observedfreeswitch_api
    • First observedfreeswitch_channels
    • First observedfreeswitch_registrations
    • First observedfreeswitch_sofia_status
    • First observedfreeswitch_status

TDQS

A3.9/5.0

Scored across 12 tools

Disambiguation4/5

Tools are cleanly partitioned by platform prefix (asterisk_* vs freeswitch_*) and each resource is distinct: channels vs endpoints vs status vs sofia profiles answer different questions. The main overlap is that asterisk_cli/freeswitch_api can reproduce nearly everything the specialized tools do, but the descriptions steer agents toward the purpose-built tools and the read-only default limits the damage.

Naming Consistency4/5

Consistent snake_case with a predictable platform_resource pattern (asterisk_channels, freeswitch_registrations, etc.), mirrored neatly across both subsystems. The only blemish is that the raw-command tool is called asterisk_cli on one side and freeswitch_api on the other, so the parallel naming breaks for that one pair.

Tool Count5/5

12 tools split roughly six-and-six across two PBX platforms, with each tool earning its place (status, channels, registrations, dialplan/profiles, raw command, hangup preview). Well within a comfortable range for the scope.

Completeness3/5

Both *_hangup_preview tools explicitly reference an asterisk_hangup / freeswitch_hangup counterpart that does not exist in the surface, leaving the previews as dead ends an agent cannot act on. Read-only inspection is otherwise well covered, but there is no originate, no queue/voicemail-specific tools, and no write path beyond flipping the raw CLI/API escape hatch.

Maintenance

ActivityMaintained
ResponsivenessSlow

Related MCP Connectors

Related MCP Servers