callrail-mcp
A Model Context Protocol server for the CallRail REST API v3. Point Claude Code, Claude Desktop, Cursor, or any other MCP client at it and ask about your call tracking in plain English.
I'm Steve Japalucci. I run Pittsburgh Digital Marketing Agency (PGHDMA), and I built this for my own client work. CallRail bills per tracking number and per minute across every client I manage, and I was tired of clicking through its reports to answer questions like "which client is burning my minutes this month". Now I ask Claude.
Works with both major versions of the MCP Python SDK (1.x and 2.x).
What I use it for
These are the kinds of questions I ask it every week:
Reporting
- "Pull last week's calls for Alan Construction, grouped by source"
- "Show me every missed call this month"
- "Find any calls from 412-555-1234 across all clients in the last 90 days"
- "Get the transcript for call CAL019abc..."
Agency cost attribution
- "Why is my CallRail bill $174? Break it down by client"
- "Which client is the biggest minute user this cycle?"
Conversion debugging
- "Why didn't this call convert in Google Ads? CAL019..."
- "Is this 58-second call eligible to count as a Google Ads conversion?"
Lead management
- "Show me everything this person has ever done: calls, forms, texts"
- "Tag this SMS thread as a qualified lead and add a note"
Tag and tracker management
- "Tag this call as 'lead' and add a note"
- "Provision a new Google Ads call-extension tracker for Renaissance in area code 412" (requires
confirm_billing=True, costs about $3/mo)
Installation
# Recommended: pipx for an isolated CLI install
pipx install callrail-mcp
# Or with pip
pip install callrail-mcp
To install from source (latest unreleased):
pipx install git+https://github.com/pghdma/callrail-mcp.git
Auth
Get an API key at Settings > API Keys in your CallRail account. You need Account Admin permission to create one.
Provide it one of two ways:
Option 1: environment variable (recommended for most setups)
export CALLRAIL_API_KEY="your_key_here"
Option 2: key file
mkdir -p ~/.config/callrail
echo "your_key_here" > ~/.config/callrail/api-key.txt
chmod 600 ~/.config/callrail/api-key.txt
Or override with CALLRAIL_API_KEY_FILE=/path/to/key.txt.
Optional: pin the account
Every tool resolves the account id with one GET /a.json per process and caches it. Set CALLRAIL_ACCOUNT_ID to skip that lookup, or to pin one account when the key can see several.
Configure your MCP client
Claude Code / Claude Desktop (~/.claude.json or claude_desktop_config.json)
{
"mcpServers": {
"callrail": {
"command": "callrail-mcp",
"env": {
"CALLRAIL_API_KEY": "your_key_here"
}
}
}
}
If you installed via pipx, callrail-mcp will be on your PATH automatically. Otherwise, point command at the full path to the executable.
Cursor and other clients
The server speaks standard MCP stdio. Any client that supports stdio MCP servers will work; just run callrail-mcp as the command.
Available tools
57 tools total, covering roughly 95% of CallRail's REST API v3 surface: read tools, write tools, tracker provisioning, agency aggregation, account management, notifications, integrations discovery, outbound calls, offline-lead backfill, leads and cross-channel timelines, SMS-thread lead management, and server-side analytics.
Read tools
| Tool | Purpose |
|---|---|
list_accounts |
List accessible CallRail accounts. fields="numeric_id" adds the number shown in CallRail URLs |
list_companies |
List companies (clients) under an account. Optional status="active", search, fields (for example verified_caller_ids) and page |
list_trackers |
List tracking phone numbers and their source mapping. Optional status="active", type, search and fields |
get_tracker |
Full detail for one tracker |
list_calls |
Paginated call list. Filter by company, date window, answer_status, direction, device, call_type, lead_status, tracker_id, tags and free-text search, with sort/order and an IANA time_zone |
get_call |
Full detail for a specific call |
call_summary |
Aggregate stats (total, answered by a person, voicemail, missed, by source, duration) for a window |
list_form_submissions |
CallRail Form Tracking submissions. Filter by lead_status, tags and person_lead; sort by submitted_at or form_url |
list_text_messages |
SMS conversations |
list_users |
Account users, paginated. Filter by company_id, search names and emails, sort by email or created_at |
get_call_recording |
Recording URL (if recording enabled). CallRail documents the link as good for at least 24 hours; HIPAA accounts get a temporary URL that expires in about 24 hours |
get_call_transcript |
Transcript plus conversational_transcript, call_summary, call_highlights, keywords_spotted, sentiment and speaker_percent via field selection (Premium Conversation Intelligence required since 2026-05-21) |
search_calls_by_number |
Find calls by phone number across a window (narrowed server-side with search, then matched exactly) |
list_tags |
List tags in an account or filtered to one company. Filter by status and tag_level |
Write tools
| Tool | Purpose |
|---|---|
update_call |
Update note, tags, spam flag, customer name, lead status |
add_call_tags / remove_call_tags |
Additive and subtractive tag changes (preserves existing) |
update_form_submission |
Note, tags (replace, or add with append_tags=True), value (sent as the currency string CallRail documents) and lead status. Form submissions have no spam flag |
create_tag / update_tag / delete_tag |
Full CRUD on company-level and account-level (tag_level="account") tags. update_tag can also disable or re-enable a tag |
Tracker provisioning
| Tool | Purpose |
|---|---|
create_tracker |
Provision a new tracking number. Requires confirm_billing=True as a safety guard against accidental provisioning. Supports source trackers and session (DNI) pools of 4 to 50 numbers. Source-specific fields are validated per type (search_engine and search_type for search, landing for the landing types, referrer for web_referrer), plus swap_targets and campaign_name |
update_tracker |
Update mutable settings: name, destination, whisper, greeting (text or recording URL), recording flag, SMS, swap targets, campaign name. Reads the current call flow and merges your change into it, and refuses to overwrite an advanced (IVR) flow |
delete_tracker |
Soft-delete a tracker (releases the phone number, preserves history) |
Account management
| Tool | Purpose |
|---|---|
get_company / create_company / update_company / delete_company |
Full company (client) CRUD. Free, since CallRail bills per number rather than per company. Soft-delete semantics. Feature toggles go through the documented PUT fields (also right after create_company, since POST accepts only name and time zone); lead_scoring_enabled is read-only in the API and the deprecated no-op toggles are dropped with a warning |
get_user / create_user / update_user / delete_user |
Full user CRUD. create_user invites by email; roles: admin, manager, reporting. update_user changes names and company access only, because the API cannot change a user's role or email |
get_tag |
Single tag detail |
get_form_submission |
Single form-submission detail |
get_text_message |
Single SMS conversation with all messages |
create_form_submission |
Manually create a form submission (backfill walk-in, paper-form, or offline leads). Requires form_url and form_data, attribution via session_id or the referrer trio; note, tags, value and lead status are applied with a follow-up update |
Notifications and integrations
| Tool | Purpose |
|---|---|
list_notifications / create_notification / update_notification / delete_notification |
Full per-user alert-rule CRUD (who gets pinged on which call, text, or form event) |
list_integrations(company_id) / get_integration |
Discover GMB, Google Ads, Facebook, Slack, and Webhook integrations attached to a company. CallRail models webhooks as an integration type, so this is also how you inspect webhooks |
Outbound calling
| Tool | Purpose |
|---|---|
create_outbound_call |
Place an outbound call. CallRail dials business_phone_number first, then bridges to customer_phone_number, showing caller_id. Requires confirm_dialing=True as a safety guard, since it dials real phones, costs minutes, and carries legal implications. US and Canada only. Optional agent_id assigns the call to a user |
Leads and server-side analytics
| Tool | Purpose |
|---|---|
list_leads / get_lead_timeline |
CallRail's deduplicated person records (sortable by created_at, name or email), plus full cross-channel history (calls, forms, texts) per lead with first and last touch attribution |
list_sms_threads / get_sms_thread / update_sms_thread |
SMS-thread lead management: tag, note, and qualify texting leads the way you would calls. Threads can be windowed by date and searched by number, name or tag |
call_stats |
Server-side call aggregation via /calls/summary.json. Group by company, company_id, source, keywords, campaign, referrer, landing_page, or last_requested_page in one request instead of paginating every call. Takes the same server-side filters as list_calls (answer_status, direction, device, lead_status, first_time_callers, duration bounds, tags, tracker_ids, search, time_zone) |
call_timeseries |
Call-volume trend line. Supports interval (hour, day, week, month, year), the same filters as call_stats, and guards CallRail's 200-data-point limit before sending |
form_stats |
Server-side form-submission totals. group_by (source, keywords, campaign, referrer, landing_page, form_name, company), fields (total_forms, first_forms, leads), lead_status and tags |
get_call_page_views |
The visitor's page-view journey behind a call. Pairs with call_eligibility_check for conversion debugging |
Agency aggregation
| Tool | Purpose |
|---|---|
usage_summary |
Per-company cost-attribution breakdown for the cycle: minutes used, active numbers, estimated cost share, sorted by biggest cost driver. Answers "which client is burning my CallRail budget" |
call_eligibility_check |
Audit whether a specific call qualifies as a Google Ads conversion. Checks gclid presence, answered status, duration against Google's threshold (default 60s), and source |
compare_periods |
Compare the current N-day window against the previous one. Per-company minute and call deltas plus biggest mover |
bulk_update_calls |
Apply one update (tag, note, lead_status, spam) to every call matching a filter. dry_run=True by default and capped at 500 calls |
spam_detector |
Heuristically flag likely-spam calls (short duration, unanswered, repeat-caller patterns). Optional auto_tag=True adds an auto_detected_spam tag. Deliberately does not set spam=True, which would hide the call from default GETs |
All tools accept account_id optionally; if omitted, the first accessible account is auto-resolved and cached for the process. Set CALLRAIL_ACCOUNT_ID to pin it and skip the lookup. Most tools accept company_id to filter to a single client.
A note on filtering calls
CallRail's GET /calls.json accepts answer_status (answered, missed, voicemail) but has no answered or source parameter. Earlier versions of this server forwarded both and CallRail silently ignored them, so results looked filtered but were not. I fixed that in v1.2.0:
answer_statusis the documented filter and is applied server-side.answeredremains as a deprecated alias that translates toanswer_status.sourceis applied client-side, and the response includes asource_filterblock stating exactly what was matched. For source breakdowns, prefercall_stats(group_by="source").
Two more things CallRail does that bit me:
- Voicemail counts as answered on CallRail's side, because its system picked up. Since v1.3.0
call_summary,spam_detector,call_eligibility_checkandbulk_update_callstreat a call as answered only when a person answered (answeredand notvoicemail) and report voicemail separately.answer_status=missedincludes voicemail. - No date window means CallRail's
recentrange, the previous 7 days including today, not all time. Windowed tools accept an IANAtime_zoneso day boundaries match the client's reporting zone, andusage_summary/compare_periodsforward the account's zone automatically. Communication Records are retained for 25 months, so a window reaching past that returns an error asking for a narrower range.
Validation is strict throughout: phone-number format, area code (^\d{3}$), session pool size (CallRail's 4 to 50 range), name, whisper, and greeting length caps, and a 12-value source-type enum.
Rich field selection
The CallRail API returns a lean default payload. Ask for more fields on list_calls, get_call, or list_form_submissions via the fields parameter:
fields=company_name,source_name,keywords,landing_page_url,device_type,first_call,value,tags,note,gclid,fbclid,utm_source,utm_medium,utm_campaign,utm_content,utm_term,referrer_domain
Conversation-intelligence and attribution fields are also available by name: lead_status, sentiment, call_summary, call_highlights, keywords_spotted, transcription, conversational_transcript, speaker_percent, milestones, timeline_url, msclkid, prior_calls, total_calls, person_id. See the CallRail API docs for the full field catalog per resource.
Tool annotations
Every tool declares MCP tool annotations: readOnlyHint on the 33 read tools, destructiveHint on deletes and bulk writes, idempotentHint on updates, and openWorldHint on create_outbound_call because it reaches the phone network. Clients that honor annotations can auto-approve reads and ask before writes.
How this compares to CallRail's official MCP server
CallRail offers an official hosted MCP server (documented at apidocs.callrail.com) using OAuth 2.0, with roughly 30 tools and a server URL provided by your CallRail account team. It is a good option if you want a fully managed remote server.
I built this one for a different job:
| callrail-mcp (this project) | Official CallRail MCP | |
|---|---|---|
| Install | pip install callrail-mcp, running in two minutes |
URL provisioned by your CallRail account team |
| Hosting | Local stdio, so your API key never leaves your machine | Hosted remote (OAuth) |
| Tools | 57 | ~30 |
| Agency tooling | usage_summary cost attribution, compare_periods, spam_detector, bulk_update_calls, call_eligibility_check |
Not offered |
| Safety guards | confirm_billing, confirm_dialing, dry_run defaults, strict input validation |
Not documented |
| Source | MIT, open, auditable | Closed |
Both speak the same underlying REST API v3. If you run an agency across many client accounts and want cost attribution and bulk workflows, this is the one I built for myself.
A community TypeScript server also exists, @kanopi/callrail-mcp on npm (34 tools, stdio, API key auth). What I put into this one instead is the agency tooling, the safety guards, and request contracts checked against CallRail's documentation and live responses (see the 1.3.0 entry in the CHANGELOG).
Out of scope (deliberately not implemented)
The following CallRail capabilities are not in this MCP, by design. PRs are welcome if you have an account that supports them, or open an issue and I will prioritize.
Blocked by CallRail account permissions (returns 403)
These endpoints exist but need account upgrades or permissions that my standard CallRail account does not have. I re-probed them live on 2026-10-05:
- Send SMS/MMS (
POST /text-messages.json) needs A2P/TCR SMS registration. CallRail enforces TCPA-compliance keywords (STOP, CANCEL, UNSUBSCRIBE) on outbound text messages. MMS support was added by CallRail on 2026-05-05. - Webhook integration create, update, delete (
POST /integrations.jsonwithtype=Webhook) needs Integration-Admin permission. - Outbound Caller IDs (
/caller_ids.jsonCRUD) is documented by CallRail but returns 403 on a standard account. - Message Flows (
/message-flows.jsonCRUD, SMS auto-reply flows) is documented but returns 403. - Integration Filters (
/integration_triggers.jsonCRUD) is documented but returns 403. - Form submission endpoints return 403 when no company on the account has Form Tracking enabled. That is account state rather than a permission: enable Form Tracking on one company and the endpoints open up. The tools say so in the error.
Not exposed by CallRail's REST API
These have no API equivalent and are managed exclusively via the CallRail web UI:
- Numbers: account-level number ownership, porting, and transfers.
- Call Flows: the IVR builder and call routing tree configuration.
- Custom Fields CRUD: custom data columns are readable as part of call and form responses, but the schema management endpoint is not exposed.
- Do Not Call list: DNC number management.
Available but not yet shipped
Readable on a standard account, but I have judged them low value so far: summary_emails CRUD, companies/bulk_update.json (external form capture only), and form_submissions/ignored_fields.json.
Examples
> List companies under our CallRail account.
(calls list_companies, returns clients with IDs and primary numbers)
> Pull today's calls for company COM019ab..., include source and keyword.
(calls list_calls with company_id, days=1, fields="source,keywords,landing_page_url")
> Why is my CallRail bill $174 this month? Break it down by client.
(calls usage_summary, returns per-company cost share sorted by biggest user)
> Why didn't this call show up as a conversion in Google Ads? CAL019dbf79...
(calls call_eligibility_check, returns gclid, duration, and answered checks
plus a targeted reason such as "duration 58s under Google Ads minimum (60s)")
> Show me everything this lead has done with us.
(calls list_leads then get_lead_timeline, returns calls, forms, and texts in one timeline)
> Provision a new Google-Ads-call-extension tracker for Alan Construction in 412.
(calls create_tracker, refuses unless you also pass confirm_billing=True
since it incurs a monthly charge)
Direct Python usage
The CallRailClient is also usable as a library:
from callrail_mcp.client import CallRailClient
cr = CallRailClient() # picks up CALLRAIL_API_KEY
aid = cr.resolve_account_id()
for call in cr.paginate(f"a/{aid}/calls.json", {"per_page": 250}, items_key="calls"):
print(call["id"], call.get("source"), call.get("customer_name"))
paginate() accepts an optional stats dict that reports pages_fetched, items_yielded, total_records, and truncated, so you can tell a capped result from a complete one.
Running the server directly
For debugging, or to verify your key works:
python -m callrail_mcp
The server speaks MCP stdio. It will wait for JSON-RPC messages on stdin. Press Ctrl-C to exit.
To smoke-test the API key without running the MCP loop:
python -c "from callrail_mcp.client import CallRailClient; c=CallRailClient(); print(c.get('a.json'))"
Rate limits
CallRail's documented default limits are 1,000 requests per hour and 10,000 per day for general API requests, with separate budgets for SMS sends (150 per hour, 1,000 per day) and outbound calls (100 per hour, 2,000 per day). The client retries 429 responses using the Retry-After header, and retries 5xx responses with exponential backoff for idempotent methods only (GET, PUT, DELETE, HEAD, OPTIONS). POST is never retried on 5xx, so a lost response cannot create duplicate trackers. For heavy pagination, prefer the built-in paginate() helper.
Development
git clone https://github.com/pghdma/callrail-mcp
cd callrail-mcp
python -m venv .venv && source .venv/bin/activate
pip install -e ".[dev]"
pytest
See DEVELOPMENT.md for release flow, API quirks worth knowing, and the conventions this codebase follows.
Contributing
Contributions welcome. See CONTRIBUTING.md for dev setup, test conventions, and release flow. Please file issues via GitHub Issues and follow the Code of Conduct.
Security
If you discover a security vulnerability, please report it privately per SECURITY.md instead of opening a public issue.
Author
Steve Japalucci, founder of Pittsburgh Digital Marketing Agency. I use this on my own client accounts every day, so bugs get noticed and fixed fast. Reach out at s@pghdma.com.
License
MIT. See LICENSE. Copyright (c) 2026 Steve Japalucci / Pittsburgh Digital Marketing Agency.
Disclaimer
This project is an independent open-source integration and is not affiliated with, endorsed by, or officially supported by CallRail. "CallRail" is a trademark of CallRail, Inc. All product names, logos, and brands are property of their respective owners.
Metadata
Release files for callrail-mcp 1.3.1
For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.
Source distribution (sdist)
| File | Size | Uploaded | |
|---|---|---|---|
| callrail_mcp-1.3.1.tar.gz | 157.0 kB | Details |
Built distribution (wheel)
| File | Interpreter | ABI | Platform | Reset |
|---|---|---|---|---|
| callrail_mcp-1.3.1-py3-none-any.whl | Python 3 | none | any | Details |
Total release size: 237.5 kB
Release files / callrail_mcp-1.3.1.tar.gz
| Download URL | callrail_mcp-1.3.1.tar.gz |
|---|---|
| Size | 157.0 kB |
| Tags | Source |
|
SHA-256 checksum How to use checksums |
ffd788688cfc2fa1d5d25b7204c7680c9c2344bb16efd48996db209c2e0198d2
|
|
BLAKE2b-256 checksum How to use checksums |
ea1cc9275b79a1dfcddd1a87c8369a5f17100b3058c8f3f14017010a6903de7c
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 9, 2026.
Transparency logRelease files / callrail_mcp-1.3.1-py3-none-any.whl
| Download URL | callrail_mcp-1.3.1-py3-none-any.whl |
|---|---|
| Size | 80.5 kB |
| Tags | Python 3 |
|
SHA-256 checksum How to use checksums |
000653a6bd19a833dd88bd756f9615ee5e4b84b6434238937f6220a18e49f5d4
|
|
BLAKE2b-256 checksum How to use checksums |
3aeb041a5ffde74ba356f664c871c5f027b8da3f297da56b6104fbe8979e00df
|
| Upload date | |
|
Uploaded using Trusted Publishing? What is trusted publishing? |
Yes |
| Uploaded via |
twine/7.0.0 CPython/3.13.14
|
Provenance
Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.
PyPI Publish Attestation
PyPI verified that this artifact, at this checksum, originated from the publisher listed below.
Signed by GitHub Actions, verified by PyPI on Oct 9, 2026.
Transparency log