Fish Audio MCP server for AI agents

Live

BEARER TOKEN

VOICE AGENTS

AI

Fish Audio gives your agent voice agents and voice models: build, configure, and publish voice agents, place outbound calls, read session transcripts and recordings, design voices, and search the voice library.

  • Per-user credentials: each call uses the actual user's access token, never a shared bot.
  • Encrypted per-tenant vault: AES-256, resolved at request time, never in LLM context.
  • Scoped before every call: pre-call scope check, 90-day SIEM-exportable audit chain.
Fish Audio
agent · Acme Q3
Run
How many sessions did the booking agent run today?
S
fishaudio_list_agent_sessions
102ms
Voice ops agent
The booking agent ran 18 sessions today. The latest ended 12 minutes ago.
Sources: 18 agent sessions
fishaudio
18 sessions
18:29
Message Claude...

Tools your voice ops agent reaches for on Fish Audio, scoped per user.

CALL ANY TOOL
34 tools for voice agents in Fish Audio: create, configure, and publish voice agents, place outbound calls, read sessions and recordings, manage agent tools, knowledge sources, and phone numbers, and design and search voice models.
fishaudio_create_agent
Create agent
Create a voice agent as a draft, optionally with its initial configuration. Returns the new agent with agent_id, name, status and publication_state draft. Use this to start a new agent. Publish it with fishaudio_publish_agent before it can take calls; change settings later with fishaudio_update_agent_config.
Parameters
Name
Type
Required
Description
name
string
Required
Agent name, 1 to 120 characters. Example: Support Line Agent
config
object
Optional
Optional initial draft configuration, applied on top of the platform defaults. Configuration sections, each an object: prompt (system_prompt, first_message_mode off/fixed/prompt, first_message, first_message_prompt), voice (voice_id from a voice model, speaking_language, expressive, speed 0.5-2, tts_model s2.1-pro or drama-3), asr (speech recognition model, multilingual, keyterms), conversation (turn-taking, interruptions, max duration, recording, transfers), tools (tool_ids to attach, system tools), knowledge_base (knowledge_source_ids), llm (model), variables (default placeholder values), guardrails and analysis. Example: {"prompt": {"system_prompt": "You are a friendly support agent.", "first_message_mode": "fixed", "first_message": "Hi, how can I help?"}, "voice": {"voice_id": "802e3bc2b27e49c2995d23ef70e6ac89", "speaking_language": "en"}}
description
string
Optional
Optional description, up to 2000 characters. Example: Answers billing questions for inbound callers.
fishaudio_create_agent_tool
Create agent tool
fishaudio_create_phone_call
Call create phone
fishaudio_delete_agent
Delete agent
fishaudio_delete_agent_tool
Delete agent tool
fishaudio_delete_knowledge_source
Delete knowledge source
fishaudio_delete_voice_model
Delete voice model
fishaudio_design_voice
Design voice
fishaudio_end_agent_session
End agent session
fishaudio_get_agent
Get agent
fishaudio_get_agent_config
Get agent config
fishaudio_get_agent_session
Get agent session
fishaudio_get_agent_session_recording
Get agent session recording
fishaudio_get_agent_tool
Get agent tool
fishaudio_get_api_credit
Get api credit
fishaudio_get_knowledge_source
Get knowledge source
fishaudio_get_package
Get package
fishaudio_get_phone_number
Get phone number
fishaudio_list_agent_sessions
List agent sessions
fishaudio_list_agent_tools
List agent tools
fishaudio_list_agent_versions
List agent versions
fishaudio_list_agents
List agents
fishaudio_list_knowledge_sources
List knowledge sources
fishaudio_list_my_voice_models
List my voice models
fishaudio_publish_agent
Publish agent
fishaudio_search_voice_models
Search voice models
fishaudio_update_agent
Update agent
fishaudio_update_agent_config
Update agent config
fishaudio_update_agent_tool
Update agent tool
fishaudio_update_phone_number
Update phone number

For more tools, view docs.

Build your Agent
Same auth pattern across LangChain, OpenAI, Anthropic, and Google ADK.
Python · LlamaIndex
import { ScalekitClient } from "@scalekit-sdk/node";
import { createReactAgent } from "@langchain/langgraph/prebuilt";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

// Fish Audio tools scoped to this user
const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["fishaudio"], toolNames: [
    "fishaudio_list_agents",
    "fishaudio_create_phone_call",
    "fishaudio_get_agent_session"] },
  pageSize: 100,
});

const agent = createReactAgent({ llm, tools });
await agent.invoke({ messages: [{ role: "user", content: "Call the customer with the booking agent and show the transcript" }] });
import OpenAI from "openai";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const openai = new OpenAI();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["fishaudio"] }, pageSize: 100,
});

const res = await openai.chat.completions.create({
  model: "gpt-5",
  messages: [{ role: "user", content: "Call the customer with the booking agent and show the transcript" }],
  tools,
});

// Execute the tool call with the user's vaulted Fish Audio access token
await sk.tools.executeTool(res.choices[0].message.tool_calls[0], "user_123");
import Anthropic from "@anthropic-ai/sdk";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);
const anthropic = new Anthropic();

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["fishaudio"] }, pageSize: 100,
});

const msg = await anthropic.messages.create({
  model: "claude-sonnet-5",
  max_tokens: 1024,
  messages: [{ role: "user", content: "Call the customer with the booking agent and show the transcript" }],
  tools,
});

// Tool call runs with the user's vaulted Fish Audio access token
await sk.tools.executeTool(msg.content, "user_123");
import { Agent } from "@google/adk/agents";
import { ScalekitClient } from "@scalekit-sdk/node";

const sk = new ScalekitClient(env.SCALEKIT_ENV_URL, env.SCALEKIT_CLIENT_ID, env.SCALEKIT_CLIENT_SECRET);

const { tools } = await sk.tools.listScopedTools("user_123", {
  filter: { connectionNames: ["fishaudio"] }, pageSize: 100,
});

const agent = new Agent({
  name: "voice_ops_agent",
  model: "gemini-2.5-pro",
  instruction: "Fish Audio tools scoped to this user",
  tools,
});

await agent.run("Call the customer with the booking agent and show the transcript");
Try these prompts
Copy any prompt into your agent. Each maps directly to a Fish Audio tool. Click to copy, paste into your agent, done.
Voice agents
Copy the prompt
Copied
Create a draft voice agent for appointment booking.
Copy the prompt
Copied
Publish the booking agent's current draft as a new version.
Copy the prompt
Copied
Show the published versions of the support agent.
Calls and sessions
Copy the prompt
Copied
Call +1 415 555 0199 with the booking agent.
Copy the prompt
Copied
Show the transcript of yesterday's longest session.
Copy the prompt
Copied
Get the recording links for the last session.
Voices and account
Copy the prompt
Copied
Design a calm, friendly voice for our receptionist agent.
Copy the prompt
Copied
Search the public voice library for British English voices.
Copy the prompt
Copied
How much credit is left on our Fish Audio account?
SEE HOW AUTH WORKS
Each user connects their own Fish Audio access token once, and Scalekit sends it with every call. Access tokens stay vaulted, every call is scope checked, and every action is logged.
1
Authorize
Your user connects
Fish Audio
once. We tie it to their identity and the meetings they approved — no shared bot account, no org-wide access
Who:
user ‘A’
when:
Once per user
access:
Limited to user
2
Store
Their
Fish Audio
token lives in a vault scoped to them. User A's meetings are never reachable by an agent acting for user B, even on the same connection
vault:
encrypted
scope:
per-user
tokens:
auto-refreshed
3
Resolve
When your agent calls a
Fish Audio
tool, we fetch the right token server-side. It never touches your agent, never appears in the LLM context, never shows up in your logs
speed:
~40ms
check:
before every call
seen by:
nobody
4
Audit
Every
Fish Audio
tool call is logged — who triggered it, which meeting was fetched, what came back. 90 days of history, tied to the user who authorized it
history:
90 days
export:
SIEM-ready
logged:
every call
Test other agents
See the same per-user auth pattern across other AI and media connectors.
Support and Ops Teams
Support ticket automation agent
Fetches new Zendesk tickets, drafts a reply from Notion knowledge base articles, digests what it cannot answer to Slack, and archives the rest, acting as the support agent rather than a shared API key.
GTM and RevOps Teams
Outbound prospecting agent
Searches Apollo for prospects matching your ICP, scores and ranks them, drafts personalized outreach in Gmail, and logs every send to Google Sheets. Mail goes out as the rep, not from a shared inbox.
Test other agents
See the same per-user auth pattern across other AI and media connectors.
SUPPORT
Support ticket automation (Google ADK)
Fetch, annotate, and archive Zendesk tickets with Notion context, digesting anything it cannot answer to Slack.
SALES
Outbound prospecting agent
Search Apollo for ICP matches, rank them, draft personalised Gmail outreach, and log every send to Google Sheets.
Why Scalekit
Secure your agent's access. Connectors ship in minutes
01.
Shared tokens break per-user analytics
A shared Fish Audio access token looks fine in a demo. In production every outbound call and agent publish looks like one service account, and you cannot tell which user triggered it. Scalekit resolves the credential of the actual user who triggered the agent, never a shared bot.
// shared key
audit → bot_service_account

// scalekit
audit → user_abc ✓
02.
Authentication is not authorization
03.
Multi-tenancy is architectural
04.
Fish Audio today. Ten connectors tomorrow.
“Our agents act across Salesforce, Gong, Google Drive, and more, on behalf of every customer. Scalekit behind the scenes meant we can keep adding tools without ever rebuilding how credentials or tool calling work.”
Venu Madhav Kattagoni
Head of Engineering / Von
FAQs
Frequently Asked Questions
Does the agent access Fish Audio as the user or through a shared access token?
As the user. Each user connects their own Fish Audio access token once, and Scalekit sends it with every call. Audit logs attribute every call and agent change to that user, not a shared service account.
Where is the Fish Audio access token stored?
In Scalekit's managed AES-256 token vault, namespaced per tenant. To rotate it, the user reconnects with a new access token. Revocation is a single dashboard action. Credentials never appear in prompts, logs, or LLM context.
Can I limit what the agent does in Fish Audio?
Yes. Filter by tool name in listScopedTools to expose only what you want, for example sessions, transcripts, and recordings without fishaudio_create_phone_call or fishaudio_delete_agent, which permanently deletes an agent with its version history. Scalekit also enforces scope checks before every API call.
What happens when a user revokes Fish Audio access?
The connection is invalidated on the next tool call. Subsequent requests for that user fail closed with a clear error. Other users in the tenant remain unaffected. The event is logged for audit.
Do changes to a voice agent go live right away?
No. Configuration changes edit the agent's draft. fishaudio_publish_agent freezes the draft as a new immutable version and makes it live for new sessions, and fishaudio_list_agent_versions shows the published history.
Start in your coding agent
Up and running in one command
Install the Scalekit skill in your editor of choice. Connector, auth, tools, prompt, all wired up
Claude Code REPL
/plugin marketplace add scalekit-inc/claude-code-authstack
/plugin install agentkit@scalekit-auth-stack
Cursor Code REPL
# ~/.cursor/mcp.json
{
""mcpServers"": {
""fishaudio"": {
""url"": ""https://mcp.scalekit.com/fishaudio"",
""headers"": { ""Authorization"": ""Bearer $SCALEKIT_TOKEN"" }
}
}
}
Codex Code REPL
# ~/.codex/config.toml
[mcp_servers.fishaudio]
url = ""https://mcp.scalekit.com/fishaudio""
auth_env = ""SCALEKIT_TOKEN""
Copilot Code REPL
# .vscode/mcp.json
{
""servers"": {
""fishaudio"": {
""url"": ""https://mcp.scalekit.com/fishaudio"",
""type"": ""http""
}
}
}