Codasms MCP server
io.github.ajemba/codasms-mcp·v0.1.1Receive one-time SMS/OTP verification codes via the CODASMS API: get a number, wait, release.
0 stars40 downloads/wk
Reviews
Write oneNobody has reviewed Codasms yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Codasms tools (7, 3 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
check_orderwrite actionOne-shot status check for an order (no waiting). Returns the current status and the code if it has arrived.
get_balanceReturn the reseller account's current balance (what you can spend on numbers).
get_numberwrite actionBuy a phone number for a service in a country and return it. THIS CHARGES the reseller balance immediately (pay-per-code). If no code arrives within 20 minutes the order auto-refunds; you can also release() it early to refund now. Poll for the code with wait_for_otp using the returned order_id.
list_countriesList countries that currently have buyable numbers. Optionally filter to a single service.
list_servicesList buyable services with live price and stock. STRONGLY prefer filtering by `service` and/or `country` — the unfiltered catalog is very large. `service` is a code like "tg" (Telegram); `country` is a country code like "6".
releasewrite actionCancel an order and refund its cost immediately — unless the code already arrived, in which case there is nothing to refund and the code is returned.
wait_for_otpPoll an order until its verification code arrives, it expires, or the timeout is hit. Returns the code when delivered. On timeout the number is still active — call again, or release() to refund now.
Public scan report
scanner v0.1.10 · 2026-11-02 · same rubric, same numbers if you re-run it
- Code scan5 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 9 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Codasms compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 83/100
- higher than 65% of 48,255 servers
- Tools
- 7
- the typical server has 7
- Tools that change things
- 43%
- typical: 0%. Fewer write tools means less an agent can break
- Downloads a week
- 40
- more than 31% of 12,191 servers with a package
What its tools let an agent do: 4 read · 3 change
Install Codasms in Claude Code, Cursor or VS Code
Runs npx -y codasms-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add codasms-mcp -- npx -y codasms-mcp
What the publisher says
From the Codasms repository's README, as published. We do not edit it. Read it on GitHub
CODASMS MCP Server
Receive one-time SMS/OTP verification codes from your AI agent. An MCP server over the CODASMS Reseller API — get a number, wait for the code, release it — across 700+ services and 180+ countries, pay only on delivery.
This server lets an AI agent (Claude Desktop, Cursor, or anything that speaks MCP) buy a phone number and read the verification code programmatically. It's a thin wrapper over the public CODASMS Reseller API — it holds no logic of its own; every charge and refund is decided server-side by the API.
You bring your own key. Getting one is free to sign up: https://codasms.com/reseller.
Tools
getnumber accepts an optional maxpricecents (or set CODASMSMAXPRICECENTS) so an autonomous agent can't buy a number priced above your cap.
Quick start (local / stdio)
export CODASMS_API_KEY=coda_live_xxxxxxxx # from https://codasms.com/reseller
npx codasms-mcpClaude Desktop
Add to claudedesktopconfig.json:
{
"mcpServers": {
"codasms": {
"command": "npx",
"args": ["-y", "codasms-mcp"],
"env": { "CODASMS_API_KEY": "coda_live_xxxxxxxx" }
}
}
}Then ask: "Get me a Telegram number in the UK and read the code."
Remote (HTTP) mode
The same tools are served over Streamable HTTP, so you can host one instance for many users — each sends their own key as a Bearer token (nothing is stored server-side):
npm run build && npm run start:http # listens on :8080, POST /mcpPOST /mcp
Authorization: Bearer coda_live_xxxxxxxx
Content-Type: application/jsonsrc/http.ts is a portable Node server (Deno Deploy, Railway, Fly, any container). For Cloudflare Workers, swap the Node http handler for a fetch handler — the server factory in src/server.ts is transport-agnostic and stays unchanged.
Configuration
Notes
once every 5s by default to stay well under it.
- Rate limit: the API allows 60 requests/min per key; waitforotp polls no faster than
the order auto-refunds after 20 minutes, or call release to refund immediately.
- Money safety: get_number spends real balance the moment it's called. If no code arrives,
listservices / listcountries to discover them.
- Codes: services and countries use the API's codes (e.g. tg, wa, country 6) — use
Develop
npm install
npm run build # tsc -> dist/
npm start # stdioLicense
MIT — see LICENSE.
Nothing above is checked by us. What we check is on the safety report.
Codasms: common questions
- Is Codasms MCP server safe?
- Mostly: it is graded B (83/100). Read the Codasms safety report
- How do I install Codasms?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Codasms need an API key?
- Yes. The registry entry asks for
CODASMS_API_KEY. - Is Codasms maintained?
- The last commit was 11 days ago (2026-10-24). The latest release is v0.1.1.
- How does Codasms compare with other MCP servers?
- safety score 83/100 (higher than 65% of 48,255 servers); tools 7 (the typical server has 7); tools that change things 43% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.