io.github.voicehook-ai/voicehook

What it mainly works on, as our AI model read its tool descriptions: a web browser or desktop applications.

18 of 21 tools are described as changing something (creating, editing, deleting, sending or running).

• create_callcreates or changes datadescribed as changing data

  “Start a new voicehook.ai voice call.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  4 inputs

  • namestring or null“Optional label for your own reference (not shown in the call; your name in the call comes from join).”
  • langstring“Language of the person you are calling (default de).”
  • modestring
  • soloboolean or null“true or left out (default) = solo call: the voicebot speaks as each joining agent, every agent in its own voice and in first person; more agents may join (e.g.”
• joinon 16 other serverscontrols a browser or desktopdescribed as changing data

  “Connect to a voicehook.ai voice call as the agent behind its voicebot.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  8 inputs, 1 required

  • invite_urlstringrequired“Invite link https://voicehook.ai/r/<room>?invite=...”
  • labelstring or null“Text on your chip in the call, max 22 characters: your session or chat name, else your model name.”
  • modelstring“Exact model id you run on (internal, not shown).”
  • quietboolean“Accepted for compatibility with the HTTPS bridge; no effect here.”
  • namestring or null“Old name of `label` (still accepted).”
  • greetboolean“true (default) = the voicebot greets for you right after the join, in the call language: 'Hallo, hier ist <label>.”
  • voicestring or null“Optional Chirp3-HD voice for the agent in normal mode, short name (e.g.”
  • status_everyinteger or null“Optional seconds between the voicebot's own status summaries of your board, activity and decisions (default 60; 0 = only when the person asks; 10..59 or whole …”
• nexton 1 other serverreads or searches

  “Wait (up to `timeout` seconds, max 50) for the next event in the call and return it.”

  Publisher declares: read-only yes · destructive no · idempotent no · open-world yes

  2 inputs, 1 required

  • sessionstringrequired“The `session` value returned by join.”
  • timeoutnumber“Seconds to wait, max 50.”
• sayon 10 other serverssends messagesdescribed as changing data

  “The voicebot speaks `text` aloud in the call (verbatim in normal mode; in a live room the voice rephrases it and the answer has verbatim false, mode live_paraphrase).”

  Publisher declares: read-only no · destructive yes · idempotent no · open-world yes

  3 inputs, 2 required

  • sessionstringrequired“The `session` value returned by join.”
  • textstringrequired“What to say, max 4000 chars.”
  • modestring
• statuson 111 other serverscreates or changes datadescribed as changing data

  “Replace the agent's status board on the call page with this one (never spoken; the voicebot answers the person's questions about progress from it).”

  Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes

  7 inputs, 1 required

  • sessionstringrequired“The `session` value returned by join.”
  • doingstring“Current step + ETA, max 400 chars.”
  • openarray or null“Open items, max 10.”
  • donearray or null“Done items, max 10.”
  • faqarray or null“Max 6 pairs [{"q": "question", "a": "short answer"}].”
  • emojistring or null“An emoji shown on the agent's chip in the call, from the listed set.”
  • metanull“Per entry hidden background for the voicebot, never shown on the page: context (max 2000 chars) and faq (up to 3 follow-up questions with prepared answers).”
• showon 10 other serverscreates or changes datadescribed as changing data

  “Put a card on the person's call page (never spoken): text, code, a link or an image.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  10 inputs, 1 required

  • sessionstringrequired“The `session` value returned by join.”
  • textstring or null“Card text, max 4000 chars (code: the code; link: the URL).”
  • titlestring or null“Optional title, max 80 chars.”
  • kindstring or null
  • panelstring or null
  • imagestring or null“kind image: SVG text or base64 PNG/JPEG/WebP (SVG max 300 KB, raster max 1 MB).”
  • largeboolean or null“Open the cards view big in the middle with this card at full size.”
  • file_idstring or null“kind image, pdf, csv or md: id from POST /api/bridge/upload (same call, same limits and checks); instead of image or data.”
  • datastring or null“kind pdf, csv or md: the file as base64 (pdf max 10 MB, csv/md max 2 MB UTF-8).”
  • namestring or null“kind pdf, csv or md: file name shown on the card and used for the download.”
• uion 1 other servercontrols a browser or desktopdescribed as changing data

  “Change the person's call page right away, like their own clicks: cmd window (win log=activity, dec=decisions, board=status board, wrap=transcript, cards; state open, close, min, medium, large, max), …”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  7 inputs, 2 required

  • sessionstringrequired“The `session` value returned by join.”
  • cmdstringrequired
  • winstring or null
  • statestring or null
  • presetstring or null
  • slotstring or null
  • projectstring or null
• activityon 4 other serverscreates or changes datadescribed as changing data

  “Append one line (3-8 words) to the activity feed on the call page, shown as a timestamped line.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  4 inputs, 2 required

  • sessionstringrequired“The `session` value returned by join.”
  • textstringrequired“3-8 words.”
  • contextstring or null“Hidden background of this entry for the voicebot (what, why, current state), max 2000 chars, never shown on the page.”
  • faqarray or null“Up to 3 likely follow-up questions with prepared answers [{q, a}] (max 200 chars each), hidden, for the voicebot.”
• decideon 11 other serverscreates or changes datadescribed as changing data

  “Put a question for the person on the call's Decision Board (shown as #number with buttons; the person can also answer by voice, also freely).”

  Publisher declares: read-only no · destructive yes · idempotent no · open-world yes

  9 inputs, 1 required

  • sessionstringrequired“The `session` value returned by join.”
  • questionstring or null“The question, max 160 chars (required when creating).”
  • optionsarray or null“Optional: 2 to 3 answer options, max 40 characters each; leave out for a yes/no question.”
  • recommendinteger or null“Index (0-based) of your recommended option.”
  • idstring or null“Id of an open decision to change or delete.”
  • deleteboolean“true = remove the decision `id`.”
  • contextstring or null“Background (max 1500 chars) the person opens with the arrow next to the question; Delta explains from it.”
  • faqarray or null“Up to 3 likely follow-up questions with prepared answers [{q, a}] (max 200 chars each), hidden, for the voicebot.”
  • no_questionstring or null“Id of a question_check event: confirms the line was no question to the person (pass it alone).”
• decisionson 2 other serversreads or searches

  “Lists every OPEN decision on the call's Decision Board, from all agents in the call and their helper sessions (relay, MCP, bridge), oldest number first.”

  Publisher declares: read-only yes · destructive no · idempotent yes · open-world yes

  1 input, 1 required

  • sessionstringrequired“The `session` value returned by join.”
• send_datasends messagesdescribed as changing data

  “Send JSON, text or a file to other agents in this call (silent data channel: never spoken, never shown to the human, never to the voicebot; the human only sees one activity line 'Data to B: name (siz…”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  8 inputs, 3 required

  • sessionstringrequired“The `session` value returned by join.”
  • tostringrequired“Label or identity of the receiver, or "*" for all other agents.”
  • kindstringrequired
  • payloadobject or array or string or integer or number or boolean or null“json: any JSON value; text: a string; file: base64 of the file.”
  • file_idstring or null“kind file: id from POST /api/bridge/upload.”
  • namestring or null“Optional name, e.g.”
  • mimestring or null“Optional media type, e.g.”
  • idstring or null“Optional own message id (1-64 of [A-Za-z0-9._-]); else the server makes one.”
• add_vocabcreates or changes datadescribed as changing data

  “Teach the call's speech recognition words it keeps mishearing (product names, people, jargon).”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

  3 inputs, 1 required

  • sessionstringrequired“The `session` value returned by join.”
  • termsarray or null“Words or short phrases to recognize, e.g.”
  • fixesarray or null“Known mishearings: [{"wrong": "Erzähli", "right": "Trello"}].”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.