Stokin MCP Server
Automate SMS verification workflows with private numbers across 200+ countries.
Data last scanned yesterday · Reviewed 3 weeks ago
Overview
Stokin MCP Server integrates private phone number provisioning and SMS code retrieval directly into AI agents. It provides a suite of nine tools for managing activations, allowing models to order numbers, poll for incoming verification codes, and handle the lifecycle of account authentication processes. Developers can leverage the server to query global country availability, check service-specific SMS statistics, and maintain account balances. By handling technical tasks like polling and OTP parsing, the server enables streamlined, automated registration workflows that require external mobile verification.
Our verdict
With a security score of 38/100, this tool currently carries a high risk level. The score reflects that it is community-maintained rather than vendor-backed and has not yet undergone formal editorial or security reviews. Given these factors and the potential for financial exposure via the required API balance, users should treat this as an experimental utility and exercise caution in professional environments.
- Supports over 200 countries for global service accessibility
- Nine-tool interface simplifies complex SMS activation workflows
- Low supply-chain risk with only two direct dependencies
- Provides RFC 6238-compliant TOTP code computation locally
- High-risk security score due to lack of official audit
- No free tier requires maintaining a funded API balance
- Bus-factor risk associated with single-contributor maintenance
Setup
{
"mcpServers": {
"sv-number-mcp-server": {
"args": [
"-y",
"sv-number-mcp"
],
"command": "npx"
}
}
}Paste into ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows), then restart Claude Desktop. Some servers require API keys or tokens as environment variables — check the project's README and add an "env" object if needed.
- No read-only mode — running this grants full read/write access.
- No built-in authentication — anyone with access to this config can invoke every tool it exposes.
Tools
| Tool | Description | Risk |
|---|---|---|
| get_balance | what is left on the account | low |
| list_countries | every country with its id and operators | low |
| list_services | find the code for a site: search by name or domain, best match first, price, how many are online, and the share of codes that actually arrived | low |
| order_number | order a private number for one service in one country | medium |
| wait_for_code | poll until the code lands and return it, already parsed out of the SMS | medium |
| finish_activation | close a successful activation | medium |
| cancel_activation | cancel and get the money back | medium |
| request_another_sms | ask for one more code on the same number | medium |
| totp_code | compute the authenticator code locally, by RFC 6238 | low |
Compatibility
| Client | Local | Docker | Remote | Read-only |
|---|---|---|---|---|
| ChatGPT | ||||
| Claude Desktop | ||||
| Cursor | ||||
| VS Code | ||||
| Windsurf |
Frequently asked questions
›What prerequisites are needed to use this server?
You need an API key from the service provider, which requires signing up and funding your account balance. There is no free tier available.
›How do I configure the server for my development environment?
You must provide your API key via the SVN_API_KEY environment variable. You can also optionally customize the language using SVN_LANG or adjust polling intervals with SVN_POLL_SECONDS.
›Are these numbers suitable for banking or long-term communication?
No, these numbers are strictly for receiving verification codes. They do not support sending SMS, taking calls, and are not intended for banking, government, or permanent accounts.
›How does the wait_for_code tool behave?
The tool automatically polls the status at a set interval and will stop searching after 20 minutes, which is the lifespan of a number.
›What should I do if my specific service is not listed in list_services?
You can use the 'ot' ('Not on list') service code, which acts as a fallback to receive SMS from any sender not explicitly in the service catalogue.
Alternatives
Badge
Maintain this server? Add the live badge to your README.