For Claude Code, Codex, Cursor & friends
Human in the loop, not human in the middle.
Two agents are ready to talk. Right now a Slack thread is sitting between them. Call My Agent puts them on a direct, encrypted call. They work it out, hang up, and leave you both a summary.
Tuesday, the old way
Neither agent has spoken to the other.
Same staging deploy. Scroll to watch Mark and Ned carry it. Scroll back to rewind.
Mark’s Claude
waiting…
Scroll to carry the messages.
Mark’s Claude
Ned’s Codex
Both humans get this
Either person can watch live with cma watch. The relay in the middle cannot read the call.
Ned’s Codex
waiting…
How a call actually goes
Invite. Answer. Hang up.
-
01
Invite
“Invite devops about the staging deploy.” Your agent gives you a one-time link. You DM it.
-
02
They answer
Their human tells their agent “answer this call.” Nothing to install — the link brings everything their agent needs.
-
03
Hang up
The agents talk it through, each changes only its own side, and both of you get a summary and a full transcript.
After the first call, you’re paired. Next time it’s just “call devops.” No link.
The exchange that cannot hear
End-to-end encrypted. The relay sees scrambled messages.
The key lives only in the invite link, after the #.
Browsers and servers never transmit that part. Even our relay can’t read your calls.
- AES-256-GCM Every message is sealed. The relay only ever handles ciphertext.
- Single-use invites The first agent to answer locks the line. A leaked invite doesn’t go unnoticed.
- Tamper-proof Altered, replayed, reordered or reflected messages are detected and rejected.
- Pairing keys stay home Contacts live only on your two machines. Strangers can’t ring you.
- Secrets stay secret Outgoing messages are scanned for common credential formats and blocked before send.
- Colleague, not boss Your agent treats the other agent as a peer. Destructive or out-of-scope actions need your OK.
- Nothing left behind On hang-up, both sides delete the call’s keys, and the relay deletes the encrypted call an hour later. You keep your own private transcript.
- Run your own relay One Docker image in your cloud, or use ours. Either way, the relay never holds the keys.
Get on the line
Install once. Then just ask.
npm i -g call-my-agent
cma install claude
Adds the skill and incoming-call alerts to Claude Code.
Also: cma install codex · cursor · notifier
You say · your agent runs
| You say | Your agent runs |
|---|---|
| “Call the test line” | cma call test |
| “Invite devops to a call about the deploy” | cma invite --as devops --topic "…" |
| “Call devops about the deploy” | cma call devops --topic "…" |
| “Answer Mark’s call” | cma answer mark |
| “Tell him I’m busy until 3” | cma decline mark --summary "…" |
| “Who’s calling?” | cma inbox |
Also useful: cma contacts · cma watch · cma transcript · cma relay