Code Pluginsource linkedVerified

Voice Callv2026.9.2

OpenClaw voice-call plugin for Twilio, Telnyx, and Plivo phone calls.

@openclaw/voice-call·runtime voice-call·by @openclaw
openclaw plugins install clawhub:@openclaw/voice-call
Latest release: v2026.9.2Download zip

Compatibility

Built With Open Claw Version
2026.9.2
Min Gateway Version
>=2026.4.10
Plugin Api Range
>=2026.9.2
Security Scan
VirusTotalVirusTotal
Benign
View report →
OpenClawOpenClaw
Benign
high confidence
Credentials
Provider credentials, outbound network calls, webhook exposure, optional ngrok/Tailscale tunnels, realtime/STT/TTS providers, and local HTTP/WebSocket listeners are proportionate to voice-call functionality and are surfaced in config/README.
Install Mechanism
The package uses normal OpenClaw plugin metadata and npm-style installation with no package lifecycle scripts found in package.json.
Instruction Scope
The skill explicitly tells agents to use the voice_call tool for agent-initiated calls, but the short SKILL.md does not prominently require confirmation before live outbound dialing.
Persistence & Privilege
The plugin starts on OpenClaw startup when enabled and persists bounded call records/transcripts under an OpenClaw state path or configured store; sessionScope defaults to per-phone memory, which is disclosed but privacy-sensitive.
Purpose & Capability
The package purpose is voice calling, and the artifacts consistently expose Twilio, Telnyx, Plivo, and mock call initiation, status, speech, DTMF, and hangup functions.
Scan Findings in Context
[SQP-2] expected: The real-call capability is expected for this skill and is disclosed through the skill, README, provider config, and CLI/tool surfaces; the missing prominent warning about charges, third-party logs, and confirmation is useful installation guidance but did not show hidden or purpose-mismatched behavior.
Assessment
Install only if you intend to let OpenClaw place and manage phone calls. Prefer mock mode for testing, keep live provider credentials scoped, require user confirmation or an allowlisted destination policy for outbound calls, and review whether per-phone call history and transcripts should be retained in your environment.
dist/runtime-entry-DNmi-vZR.js:1641
Shell command execution detected (child_process).
Patterns worth reviewing
These patterns may indicate risky behavior. Check the VirusTotal and OpenClaw results above for context-aware analysis before installing.

Verification

Tier
source linked
Scope
artifact only
Summary
Validated package structure and linked the release to source metadata.
Commit
3928bad9badf
Tag
3928bad9badfcb6c7d140530435e806fb8092190
Provenance
No
Scan status
clean

Tags

alpha
2026.5.19-alpha.1
beta
2026.7.2-beta.7
latest
2026.9.2

@openclaw/voice-call

Official Voice Call plugin for OpenClaw.

Providers:

  • Twilio (Programmable Voice + Media Streams)
  • Telnyx (Call Control v2)
  • Plivo (Voice API + XML transfer + GetInput speech)
  • Mock (dev/no network)

Docs: https://docs.openclaw.ai/plugins/voice-call Plugin system: https://docs.openclaw.ai/tools/plugin

Install

openclaw plugins install @openclaw/voice-call

Restart the Gateway afterwards.

Local dev install

PLUGIN_HOME=~/.openclaw/extensions
mkdir -p "$PLUGIN_HOME"
cp -R <local-plugin-checkout> "$PLUGIN_HOME/voice-call"
cd "$PLUGIN_HOME/voice-call" && pnpm install

Config

Put under plugins.entries.voice-call.config:

{
  provider: "twilio", // or "telnyx" | "plivo" | "mock"
  fromNumber: "+15550001234",
  toNumber: "+15550005678",
  sessionScope: "per-phone", // or "per-call" | "main"

  twilio: {
    accountSid: "ACxxxxxxxx",
    authToken: "your_token",
  },

  telnyx: {
    apiKey: "KEYxxxx",
    connectionId: "CONNxxxx",
    // Telnyx webhook public key from the Telnyx Mission Control Portal
    // (Base64 string; can also be set via TELNYX_PUBLIC_KEY).
    publicKey: "...",
  },

  plivo: {
    authId: "MAxxxxxxxxxxxxxxxxxxxx",
    authToken: "your_token",
  },

  // Webhook server
  serve: {
    port: 3334,
    path: "/voice/webhook",
  },

  // Public exposure (pick one):
  // publicUrl: "https://example.ngrok.app/voice/webhook",
  // tunnel: { provider: "ngrok" },
  // tailscale: { mode: "funnel", port: 8443, path: "/voice/webhook" }

  outbound: {
    defaultMode: "notify", // or "conversation"
  },

  // Optional response agent workspace. Defaults to "main".
  agentId: "main",

  streaming: {
    enabled: true,
    // optional; if omitted, Voice Call picks the first registered
    // realtime-transcription provider by autoSelectOrder
    provider: "<realtime-transcription-provider-id>",
    streamPath: "/voice/stream",
    providers: {
      "<realtime-transcription-provider-id>": {
        // provider-owned options
      },
    },
    preStartTimeoutMs: 5000,
    maxPendingConnections: 32,
    maxPendingConnectionsPerIp: 4,
    maxConnections: 128,
  },
}

Notes:

  • Twilio/Telnyx/Plivo require a publicly reachable webhook URL.
  • tailscale.port defaults to 443 and owns the external HTTPS port for both legacy tailscale.mode and unified Tailscale tunnel providers. Funnel supports 443, 8443, or 10000; Serve accepts any valid TCP port.
  • Twilio defaults to US1. For a non-US Region, set twilio.region to ie1 or au1 and use credentials created in that Region; see Twilio's regional REST API guide.
  • mock is a local dev provider (no network calls).
  • Telnyx requires telnyx.publicKey (or TELNYX_PUBLIC_KEY) unless skipSignatureVerification is true.
  • Runtime accepts canonical config only. If older configs still use provider: "log", twilio.from, or legacy streaming.* OpenAI keys, run openclaw doctor --fix to rewrite them.
  • advanced webhook, streaming, and tunnel notes: https://docs.openclaw.ai/plugins/voice-call
  • responseModel is optional. When unset, voice responses use the runtime default model.
  • sessionScope defaults to per-phone, preserving caller memory across calls. Use per-call for reception, booking, IVR, and bridge flows where each carrier call should start fresh. Use main to share the configured agent's main session (agent:<agentId>:main, or global when core session.scope is "global"). Custom core session.mainKey values are ignored.
  • realtime.consultThinkingLevel is optional. When set, it overrides the thinking level used by the model behind realtime openclaw_agent_consult calls.
  • realtime.consultFastMode is optional. When set, it toggles fast mode for realtime openclaw_agent_consult calls.

Stale call reaper

See the plugin docs for recommended ranges and production examples: https://docs.openclaw.ai/plugins/voice-call#stale-call-reaper

TTS for calls

Voice Call uses the core tts configuration for streaming speech on calls. Override examples and provider caveats live here: https://docs.openclaw.ai/plugins/voice-call#tts-for-calls

CLI

openclaw voicecall call --to "+15555550123" --message "Hello from OpenClaw"
openclaw voicecall continue --call-id <id> --message "Any questions?"
openclaw voicecall speak --call-id <id> --message "One moment"
openclaw voicecall end --call-id <id>
openclaw voicecall status --json
openclaw voicecall status --call-id <id>
openclaw voicecall tail
openclaw voicecall expose --mode funnel

Tool

Tool name: voice_call

Actions:

  • initiate_call (message, to?, mode?)
  • continue_call (callId, message)
  • speak_to_user (callId, message)
  • end_call (callId)
  • get_status (callId)

Gateway RPC

  • voicecall.initiate (to?, message, mode?)
  • voicecall.continue (callId, message)
  • voicecall.speak (callId, message)
  • voicecall.end (callId)
  • voicecall.status (callId)

Notes

  • Uses webhook signature verification for Twilio/Telnyx/Plivo.
  • Adds replay protection for Twilio and Plivo webhooks (valid duplicate callbacks are ignored safely).
  • Twilio speech turns include a per-turn token so stale/replayed callbacks cannot complete a newer turn.
  • responseModel / responseSystemPrompt control AI auto-responses.
  • Voice-call auto-responses enforce a spoken JSON contract ({"spoken":"..."}) and filter reasoning/meta output before playback.
  • While a Twilio stream is active, playback does not fall back to TwiML <Say>; stream-TTS failures fail the playback request.
  • Outbound conversation calls suppress barge-in only while the initial greeting is actively speaking, then re-enable normal interruption.
  • Twilio stream disconnect auto-end uses a short grace window so quick reconnects do not end the call.
  • Realtime provider selection is generic. Configure streaming.provider / realtime.provider and put provider-owned options under providers.<id>.