Plugin
uttero
Uttero is a voice channel that lets Claude Code take and make phone calls during a coding session. An incoming call arrives as a channel notification; Claude hears the caller's transcription, speaks back via TTS through the `reply` tool, and keeps editing your codebase between turns. Works like a live collaborator who happens to be on a phone line. Tools exposed: reply (speak), call_user (outbound), end_call, list_calls. Audio, transcription, and TTS are handled by Uttero's hosted backend (api.uttero.dev). The plugin itself is ~500 lines of TypeScript that speaks MCP stdio and authenticated HTTPS. Credentials are stored locally at ~/.uttero/credentials.json (mode 600) and never shared with callers. The plugin deliberately omits `capabilities.experimental['claude/channel/permission']` so voice callers cannot approve Bash/Write/Edit tool use.
- Analysed
- Last observed
What the code does
- Sends data to outside servers Code that posts data to network addresses.
- Evaluates code at runtime Code that builds and runs code while it executes.
- Asks your agent's AI to write text The server can request text from the agent's own model (MCP sampling).
Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.
This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.
Risk
Sign in to see this tool's overall risk level and what drives it. Free.
Coverage
Detailed report
1 finding from automated static analysis of the latest version, with severities and explanations.
Using this tool across your team? We can assess your whole inventory.
Request an inventory assessment