AgentLine

The materials explicitly state that no keys or environment variables are required, and there is no indication that the user must provide API keys, tokens, or other highly sensitive local credentials; based on the available facts, credential exposure appears low.

The tool connects to the declared remote endpoint api.agentline.cloud, and its voice calling, SMS, and number management functions normally imply that related request content or phone number data may transit through that cloud service; however, the endpoint is consistent with the stated purpose, and there is no red flag of exfiltration to unknown or unrelated hosts.

The system checks indicate executes-code capability, meaning it can run an MCP service process or related code locally; this is a normal capability for this class of tool, and the materials do not show requests for additional high-impact system privileges unrelated to telephony or messaging.

Based on the description, the tool is likely to handle phone numbers, SMS content, call-related metadata, and number management information; no README is provided to clarify its local file read/write scope, so the least-privilege boundary cannot be confirmed and the practical data access surface should be reviewed during deployment.

The supply-chain signals are generally positive: official registry source, open-source repository, and updates within the last year; however, the license is not declared, community adoption is very low (0 stars), and README details are missing, which reduces verifiability and maturity, so a caution rating is appropriate.