Manage Speko voice-AI agents, sessions, calls, phone numbers, knowledge bases, evals, and docs.
MCPpedia last refreshed this data
ai.speko/mcp is an MCP server that manage Speko voice-AI agents, sessions, calls, phone numbers, knowledge bases, evals, and docs. Its tool list has not been published yet over http, requires no API key, and scores 73/100 on MCPpedia's security, maintenance and efficiency rubric.
Config is the same across clients - only the file and path differ.
{
"mcpServers": {
"spekoai": {
"url": "https://mcp.speko.ai/mcp"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Manage Speko voice-AI agents, sessions, calls, phone numbers, knowledge bases, evals, and docs.
This server supports HTTP transport. Be the first to test it - help the community know if it works.
Five weighted categories - click any category to see the underlying evidence.
No known CVEs.
No package registry to scan.
Click any tool to inspect its schema.
Be the first to review
Have you used this server?
Share your experience - it helps other developers decide.
Sign in to write a review.
Others in ai-ml / education
A cross-platform desktop application for managing AI Agents and MCP Servers. 一款用于管理AI智能体与MCP服务器的跨平台桌面应用程序。
An open-source AI agent that brings the power of Gemini directly into your terminal.
Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.
🛡️ BLA (Blind LLM Agents) — Adversarial defense shield that protects binaries, Electron apps, JS bundles, Python, and WebAssembly against AI reverse-engineering agents like REA. Poison -> Exhaust -> Hallucinate.
MCP Security Weekly
Get CVE alerts and security updates for ai.speko/mcp and similar servers.
Start a conversation
Ask a question, share a tip, or report an issue.
Sign in to join the discussion.
FastMCP v4 server for SpekoAI. The hosted endpoint is:
https://mcp.speko.ai/mcp
It accepts authenticated POST requests using either OAuth or a Speko
Platform API key. Configure the URL and let the client negotiate the protocol;
do not add protocol headers by hand:
Authorization: Bearer <OAuth access token or sk_live_xxx>
Content-Type: application/json
The transport is stateless and JSON-only. Modern clients use MCP 2026-07-28
directly; handshake-era clients such as Cursor negotiate MCP 2025-11-25
through initialize. Both paths remain sessionless: there is no
Mcp-Session-Id, SSE response, local OAuth transaction store, or stdio
transport. Better Auth owns authorization, consent, refresh tokens, and client
registration; the MCP service only validates signed access tokens per request.
Use the direct-HTTP installer and select OAuth (the default interactive choice):
npx @spekoai/mcp@latest init
Or configure an OAuth-capable client directly. For example, Codex reads:
[mcp_servers.speko]
url = "https://mcp.speko.ai/mcp"
For automation, export a Platform API key and add the bearer setting:
[mcp_servers.speko]
url = "https://mcp.speko.ai/mcp"
bearer_token_env_var = "SPEKO_API_KEY"
Hosted tool surfaces are bound to hostnames; a profile query parameter is
ignored. The primary endpoint exposes operational tools using domain/action
names:
organization.get, credits.balance.get,
credits.ledger.list, usage.summary.get;agents.list, agents.preview_stacks, agents.create,
agents.get, agents.update, agents.delete, deployment/version/tool and
monitor operations;phone_numbers.sip_connections.create connects a customer SIP trunk and
phone_numbers.import attaches a number that rides it, with no SIP gateway
or support ticket;phone_numbers.verified_caller_ids.start sends a code
to a number the user already has and .confirm submits it, after which
sessions.phone.create accepts that number as from; .list and
.release. Start, confirm and release need an OAuth sign-in as a workspace
owner or admin;voice_clones.create clones a voice from a recording link
onto ElevenLabs, Cartesia, MiniMax or CSM, and its provider voice id works
with audio.synthesize; voice_clones.list, .provision and .delete;docs.search.App builders use the curated host at:
https://builder-mcp.speko.ai/mcp
It contains docs search, catalogs, agent reads, stack preview, integration code
snippets, the test-call review path, and the limited agents.create and
agents.test_call writes. Generated applications use Speko SDKs at runtime;
they do not call MCP tools.
Replit uses its own host:
https://replit.speko.ai/mcp
It serves 28 tools in build-time order — code_snippets.get, the voice and
model catalogs, docs search and stack preview come first, then agent, number
and transcript reads, then the writes. It adds the two paths the builder
profile omits: knowledge bases, so a voice FAQ has somewhere to keep the FAQ,
and phone numbers, which is the next ask after a working in-app assistant.
Gateway operations, evals, monitors, scenarios, billing, API keys, migrations
and every destructive delete stay out.
Assistant directories are published on their own hosts, each shaped by that directory's policy. The surface is a property of the host: there is no query parameter, header, or account setting that widens it.
https://anthropic.speko.ai/mcp
Reads across the a