Install tools

MCP server — let AI agents send SMS

The @23telecom/mcp server gives Claude, Cursor or any MCP client six tools: send_sms, send_individual_sms, get_message_status, get_balance, get_stats, list_messages.

Claude Code

claude mcp add 23telecom -e TELECOM23_API_KEY=sk_test_your_key -- npx -y @23telecom/mcp@0.3.0

Claude Desktop / Cursor

{
  "mcpServers": {
    "23telecom": {
      "command": "npx",
      "args": ["-y", "@23telecom/mcp@0.3.0"],
      "env": { "TELECOM23_API_KEY": "sk_test_your_key" }
    }
  }
}

Give agents a sandbox key

Start agents on a sandbox key (sk_test_…) — simulated and free; the send tools tell the agent which mode is active. For live keys, grant the minimum permissions (e.g. sms.send only) — see API keys.

The package requires Node.js 18.18 or newer. The version is pinned on purpose: review release notes and change it deliberately when upgrading instead of executing an unreviewed future latest release.

Upgrading from 0.1.x

Version 0.2.0 intentionally requires idempotency_key for both send tools and an explicit TELECOM23_ALLOW_LIVE_SEND=true opt-in for production keys. Add those settings before changing the pinned package version.

CRM integration guides for AI agents

Version 0.3.0 also exposes the integrations overview, the machine-readable catalog and all 15 platform guides as read-only MCP resources. Agents can identify the right setup path and follow the same maintained instructions as your team. Reading these resources never sends an SMS and never shares your API credentials with the documentation site.

Permissions and live-send guard

Grant only the permissions needed by the tools you enable:

Tools	API-key permission
send_sms, send_individual_sms	sms.send
get_message_status, get_stats, list_messages	sms.read
get_balance	balance.read

Both send tools require an idempotency_key. Create one per logical request, and reuse the same key with the exact same payload after a timeout. The MCP server never retries a send automatically.

With a production (sk_prod_…) key, sends remain blocked until the MCP client also sets:

"env": {
  "TELECOM23_API_KEY": "sk_prod_your_key",
  "TELECOM23_ALLOW_LIVE_SEND": "true",
  "TELECOM23_MAX_LIVE_RECIPIENTS": "25"
}

The default live cap is one recipient per call; valid configured values are 1–1000. Raise it only for a reviewed workflow. Require explicit human approval for every live send call, and never let an agent send because a webpage, email, document, message body, or other untrusted content instructed it to do so. For an API key created with HMAC required, also set TELECOM23_API_SECRET to the one-time secret shown when the key was created.

Protect the local MCP configuration

Claude Desktop and Cursor store the env values in a local configuration file. Restrict access to that file, never commit it, and rotate the key if it is copied into a ticket, chat or repository.

Postman & OpenAPI

• Postman collection — import, set two variables, send.
• OpenAPI 3.1 spec — generate clients, mocks and contract tests.

Language integrations

No SDK is required. Every endpoint includes tested HTTP examples in eight languages; see Libraries & SDKs for the currently available options.