DevelopersRead only

list_phone_numbers

API reference — one of the tools an AI assistant can call on an Avrosh account.

What it does

The phone numbers pointed at this business, whether each one is live, and the language its greeting opens in. Also returns the webhook URL the operator's carrier has to be pointed at - if a number is listed here but never rings, that setting at the carrier is the usual reason. A number that is not active is kept rather than deleted, because the call log refers to it.

This is the exact text the model reads before deciding to call.

Parameters

business_idstringrequired

The id returned by list_businesses.

Request

curl -X POST https://us.avrosh.com/mcp \
  -H "Authorization: Bearer $AVROSH_KEY" \
  -H "Content-Type: application/json" \
  -d '{"jsonrpc":"2.0","id":1,"method":"tools/call","params":{"name":"list_phone_numbers","arguments":{"business_id":"926135ac-487d-4367-8bad-25397d0d4b87"}}}'

Response

The result arrives as an MCP content block; the JSON below is what the text field parses to.

{
  "webhookUrl": "https://us.avrosh.com/telephony/incoming",
  "numbers": [
    {
      "id": "pn_1…",
      "e164": "+12015541261",
      "provider": "telnyx",
      "active": true,
      "greetingLang": "en"
    }
  ]
}

Connecting

Paste the URL into your assistant and log in. Avrosh implements OAuth 2.1, so an MCP client discovers the authorisation server, registers itself, and opens a browser asking you to sign in here. That is the whole setup: nothing to copy, no key to keep, and nothing to rotate later.

https://us.avrosh.com/mcp

For something with no browser to log in with — a cron job, a script, an automation platform — there is a second door: a bearer key made in the dashboard under Docs, shown once because only its hash is stored, and revocable at any time.

curl https://us.avrosh.com/mcp \
  -H "Authorization: Bearer $AVROSH_KEY"

Either way the boundary is the same one: an assistant reaches every business on the account it signed in to, and no others. There are no scopes to configure and nothing to switch on — what bounds it is whose account it is, enforced in the database rather than by a permission anybody sets.