Placetel Web Api MCP Server
placetel-web-api-mcp-server
npm
v1.0.1
Source verified
Published by wagner-emden-it-services — publish provenance cryptographically ties this package to that repository. That is proof of origin, not an official vendor package.
MCP server for the Placetel Web API v2 — full coverage of all 124 endpoints as tools
The grade answers one question — how safe is this server for you to adopt — so it is computed in two auditable stages. Nothing below is an opinion or an LLM's guess; every line is a real term the deterministic engine applied, and the same input always yields the same number.
1. Threat score — 100 − 0 = 100. What the published surface and source actually contain:
The deterministic scan raised no scored threat in the surface it inspected — the threat score stayed at 100. Capability observations and advisory notes are recorded but never lower it.
2. Client adoption risk — 100 − 3 = 97. Three small, subtract-only factors that reflect your risk in adopting it — a clean scan proves less on a powerful, unverified or barely-inspectable package, so the grade says so plainly:
| Points | Adoption-risk factor |
|---|---|
| −3 | capability blast radius (moderate) — client exposure if the model is manipulated |
Capability observations and info notes are shown under Findings but never scored.
Open any row's finding below for the file, line and evidence behind a deduction.
Findings 1
medium Untrusted input can drive an external actionMTC-FLOW-005
Untrusted-input tools ([placetel_list_call_center_agents, placetel_list_call_center_calls, placetel_list_call_center_queues, placetel_list_calls, placetel_list_contacts, placetel_list_devices, placetel_list_faxes, placetel_get_fax, placetel_list_groups, placetel_get_group, placetel_list_microsoft_teams_users, placetel_list_prompts, placetel_list_recordings, placetel_get_recording, placetel_list_sim_cards, placetel_list_sip_users, placetel_get_sip_user, placetel_list_users, placetel_get_user, placetel_list_webex_users, placetel_get_webex_user_license, placetel_get_webex_user_numbers, placetel_get_webex_workspace, placetel_get_webex_number_fax_settings]) co-exist with external-action tools ([placetel_send_sms]). A prompt injection could cause unwanted external actions, though no direct sensitive-data leak path was found.
Evidence: untrusted [placetel_list_call_center_agents, placetel_list_call_center_calls, placetel_list_call_center_queues, placetel_list_calls, placetel_list_contacts, pla
Fix: Require confirmation for state-changing/egress actions triggered after processing untrusted content.
Location: flow placetel_list_call_center_agents → placetel_send_sms
Tools 124
Each tool and what it can reach — statically extracted from the published source.
placetel_get_faxingests untrusted inputplacetel_get_groupingests untrusted inputplacetel_get_recordingingests untrusted inputplacetel_get_sip_useringests untrusted inputplacetel_get_useringests untrusted inputplacetel_get_webex_number_fax_settingsingests untrusted inputplacetel_get_webex_user_licenseingests untrusted inputplacetel_get_webex_user_numbersingests untrusted inputplacetel_get_webex_workspaceingests untrusted inputplacetel_list_call_center_agentsingests untrusted input
Show 114 more tools ↓
placetel_list_call_center_callsingests untrusted inputplacetel_list_call_center_queuesingests untrusted inputplacetel_list_callsingests untrusted inputplacetel_list_contactsingests untrusted inputplacetel_list_devicesingests untrusted inputplacetel_list_faxesingests untrusted inputplacetel_list_groupsingests untrusted inputplacetel_list_microsoft_teams_usersingests untrusted inputplacetel_list_promptsingests untrusted inputplacetel_list_recordingsingests untrusted inputplacetel_list_sim_cardsingests untrusted inputplacetel_list_sip_usersingests untrusted inputplacetel_list_usersingests untrusted inputplacetel_list_webex_usersingests untrusted inputplacetel_send_smsnetwork egressplacetel_activate_numberno sensitive capabilityplacetel_activate_number_profileno sensitive capabilityplacetel_add_subscriptionno sensitive capabilityplacetel_assign_webex_user_licenseno sensitive capabilityplacetel_configure_webex_number_fax_settingsno sensitive capabilityplacetel_create_call_center_agentno sensitive capabilityplacetel_create_call_center_queueno sensitive capabilityplacetel_create_contactno sensitive capabilityplacetel_create_faxno sensitive capabilityplacetel_create_groupno sensitive capabilityplacetel_create_number_profileno sensitive capabilityplacetel_create_promptno sensitive capabilityplacetel_create_provisioningno sensitive capabilityplacetel_create_routingno sensitive capabilityplacetel_create_routing_planno sensitive capabilityplacetel_create_sip_userno sensitive capabilityplacetel_create_sip_user_short_codeno sensitive capabilityplacetel_create_userno sensitive capabilityplacetel_create_webex_userno sensitive capabilityplacetel_create_webex_workspaceno sensitive capabilityplacetel_cti_answerno sensitive capabilityplacetel_cti_blind_transferno sensitive capabilityplacetel_cti_complete_conferenceno sensitive capabilityplacetel_cti_complete_transferno sensitive capabilityplacetel_cti_declineno sensitive capabilityplacetel_cti_dialno sensitive capabilityplacetel_cti_dial_digitno sensitive capabilityplacetel_cti_hangupno sensitive capabilityplacetel_cti_holdno sensitive capabilityplacetel_cti_resumeno sensitive capabilityplacetel_cti_send_dtmf_digitsno sensitive capabilityplacetel_cti_start_conferenceno sensitive capabilityplacetel_cti_start_transferno sensitive capabilityplacetel_deactivate_numberno sensitive capabilityplacetel_delete_callno sensitive capabilityplacetel_delete_contactno sensitive capabilityplacetel_delete_faxno sensitive capabilityplacetel_delete_groupno sensitive capabilityplacetel_delete_number_profileno sensitive capabilityplacetel_delete_promptno sensitive capabilityplacetel_delete_provisioningno sensitive capabilityplacetel_delete_provisioning_custom_configurationno sensitive capabilityplacetel_delete_recordingno sensitive capabilityplacetel_delete_routingno sensitive capabilityplacetel_delete_routing_planno sensitive capabilityplacetel_delete_sip_userno sensitive capabilityplacetel_delete_sip_user_short_codeno sensitive capabilityplacetel_delete_subscriptionno sensitive capabilityplacetel_delete_userno sensitive capabilityplacetel_delete_webex_userno sensitive capabilityplacetel_disconnect_microsoft_teams_userno sensitive capabilityplacetel_get_ai_statusno sensitive capabilityplacetel_get_callno sensitive capabilityplacetel_get_contactno sensitive capabilityplacetel_get_cti_configno sensitive capabilityplacetel_get_meno sensitive capabilityplacetel_get_microsoft_teams_integrationno sensitive capabilityplacetel_get_numberno sensitive capabilityplacetel_get_promptno sensitive capabilityplacetel_get_provisioningno sensitive capabilityplacetel_get_provisioning_custom_configurationsno sensitive capabilityplacetel_get_routingno sensitive capabilityplacetel_get_routing_planno sensitive capabilityplacetel_get_sim_cardno sensitive capabilityplacetel_get_siteno sensitive capabilityplacetel_import_microsoft_teams_userno sensitive capabilityplacetel_initiate_callno sensitive capabilityplacetel_list_call_detail_recordsno sensitive capabilityplacetel_list_number_profilesno sensitive capabilityplacetel_list_numbersno sensitive capabilityplacetel_list_provisioningsno sensitive capabilityplacetel_list_routing_plan_routingsno sensitive capabilityplacetel_list_routing_plansno sensitive capabilityplacetel_list_routingsno sensitive capabilityplacetel_list_sip_user_short_codesno sensitive capabilityplacetel_list_sitesno sensitive capabilityplacetel_list_subscriptionsno sensitive capabilityplacetel_list_webex_workspacesno sensitive capabilityplacetel_pick_call_center_callno sensitive capabilityplacetel_reconfigure_provisioningno sensitive capabilityplacetel_remove_webex_number_fax_settingsno sensitive capabilityplacetel_reset_user_passwordno sensitive capabilityplacetel_reset_user_two_factor_authenticationno sensitive capabilityplacetel_set_cti_configno sensitive capabilityplacetel_simulate_routing_planno sensitive capabilityplacetel_sync_microsoft_teams_userno sensitive capabilityplacetel_update_call_center_agentno sensitive capabilityplacetel_update_call_center_queueno sensitive capabilityplacetel_update_contactno sensitive capabilityplacetel_update_groupno sensitive capabilityplacetel_update_promptno sensitive capabilityplacetel_update_provisioningno sensitive capabilityplacetel_update_routingno sensitive capabilityplacetel_update_routing_planno sensitive capabilityplacetel_update_sip_userno sensitive capabilityplacetel_update_userno sensitive capabilityplacetel_update_webex_user_licenseno sensitive capabilityplacetel_update_webex_user_numbersno sensitive capabilityplacetel_upsert_provisioning_custom_configurationno sensitive capability
Toxic flows 1
Cross-tool combinations that form a data-exfiltration primitive (untrusted input → sensitive source → external sink).
What this scan could not see
- Tools were statically extracted from the published source (124 recovered), not enumerated from a running server. Tool-poisoning, Unicode-smuggling, capability and toxic-flow analysis ran on this inferred surface, but a mis-parsed registration could be missed or mis-attributed, so tool-derived findings are capped below “confirmed”. To grade the real runtime surface, scan the running server: --command "npx -y <package>".
Versions 2
Scan history per published version. The engine is deterministic — the same version always yields the same score, so a changed score means the package itself changed.
| Version | Score | Findings | Engine | Scanned |
|---|---|---|---|---|
v1.0.1 latest |
A 97/100 | 1 | 1.13.0 | 2026-09-07 |
v1.0.0 |
A 100/100 | 0 | 1.5.0 | 2026-07-22 |
Embed this score
Show this server's live Trust Score in your README, docs or website. The badge is served straight from the registry and updates automatically after every rescan — no API key needed. It links back to this page, so anyone who sees the grade can also read the findings behind it instead of taking a number on faith.
Verify this score yourself
The score above is reproducible: the same package version always yields the same result. Run it locally or over the free API — no account, no LLM, fully deterministic.
npx mcptrustchecker scan placetel-web-api-mcp-server --onlineMore in API Development
Adapters for the FrontMCP framework
Transcend MCP Server — Admin tools.
Transcend MCP Server — Assessments tools.
MCP Server for Bling
MCP Server for Blogger API
Official MCP server for Brilliant Directories — manage members, posts, leads, reviews, and more.