A personal SMS and voicemail platform for voip.ms. Send and receive texts, make WebRTC calls, and get AI-powered reply suggestions—all through a clean web interface.
Built for personal use, not business. No team features, no billing, no complexity.
Generate contextual replies based on your relationship with each contact. Powered by Claude.
Full SMS support through voip.ms API with delivery confirmation and private notes.
Make and receive calls directly in the browser via FreeSWITCH gateway.
Automatic voicemail transcription with audio playback.
Toggle to mask names and phone numbers for screen sharing or demos. Persists across sessions.
Archive conversations to keep your inbox clean. Archived conversations are hidden from the main view but automatically reappear when you receive a new message.
How to use:
- Click the Archive button to view archived conversations
- Click the archive icon (📦) in any conversation to archive/unarchive it
- New messages automatically unarchive conversations
Automatically detects verification codes in incoming messages and shows a persistent toast with click-to-copy functionality.
Features:
- Detects keywords: "verification code", "your code", "OTP", "passcode", etc.
- Extracts 4-8 character alphanumeric codes
- Shows large, easy-to-read code display
- Click anywhere on the toast to copy to clipboard
- Persistent until manually dismissed (no auto-dismiss)
Supported formats:
- Numeric:
123456 - Alphanumeric:
ABC123 - With separators:
12-34-56or123 456
- Message Archive - Archive conversations to declutter your inbox; new messages auto-unarchive
- Verification Code Detection - Automatic detection and persistent click-to-copy toasts for verification codes
- Unread Priority - Unread conversations automatically sort to the top with bold styling for easy visibility
- Contact Management - Create, edit, delete contacts with notes and AI preferences
- Spam Filtering - Mark contacts as spam, view spam list, restore
- Message Search - Filter conversations by name or number
- Click-to-Copy - Copy phone numbers and verification codes with one click
- Responsive Toasts - Notifications for all actions with hover-to-pause
Frontend
- Plain HTML/CSS/JavaScript (no framework)
- JsSIP for WebRTC calling
Backend
- Node.js 18+
- Vercel Edge Functions
- TypeScript
Database
- Neon PostgreSQL (serverless)
Services
- voip.ms - SMS and voice
- Anthropic Claude - AI reply drafting
- Vercel Blob - Voicemail storage
- FreeSWITCH - SIP gateway
- PBKDF2 password hashing (100,000 iterations)
- JWT session tokens
- CSRF protection on all state-changing endpoints
- Brute-force login protection
- Security headers (CSP, HSTS, X-Frame-Options)
Required Security Measures:
-
Firewall Configuration (MANDATORY)
- NEVER expose SIP ports (5060, 5080) to the entire internet
- Use IP-based firewall rules to restrict access to your VoIP provider's IPs only
- Example using UFW:
# Block general access ufw default deny incoming # Allow ONLY your VoIP provider's IPs ufw allow from <VOIP_PROVIDER_IP> to any port 5060 proto udp ufw allow from <VOIP_PROVIDER_IP> to any port 5080 proto tcp ufw allow from <VOIP_PROVIDER_IP> to any port 16384:32768 proto udp
-
Strong Authentication
- Use cryptographically strong passwords (20+ characters, random)
- NEVER use default FreeSWITCH extension passwords (1000-1019 with password "1234")
- Disable all unused extensions
-
Intrusion Prevention
- Install and configure fail2ban for FreeSWITCH
- Automatically ban IPs after failed authentication attempts
- Monitor logs for suspicious activity
-
Defense in Depth
- Firewall restrictions (primary defense)
- Strong passwords (authentication layer)
- fail2ban (automated response)
- Regular log monitoring
November 2025 Security Note: This project's FreeSWITCH server was compromised due to open SIP ports and default extension passwords. Attackers made 2,825 unauthorized call attempts before the breach was detected and remediated. Comprehensive security hardening was implemented (see SECURITY_LOG.md for details). Don't let this happen to you—secure your FreeSWITCH server BEFORE deploying to production.
- Node.js 18+
- voip.ms account with API access enabled
- Neon PostgreSQL database
- FreeSWITCH server (for voice calls)
- Anthropic API key (for AI features)
- Clone the repository
git clone https://github.com/yourusername/voip-text.git
cd voip-text- Install dependencies
npm install-
Set up environment variables (see below)
-
Run database migrations
# Using psql with your DATABASE_URL
psql $DATABASE_URL -f migrations/001_initial_schema.sql
psql $DATABASE_URL -f migrations/002_add_timezone_support.sql
psql $DATABASE_URL -f migrations/003_add_call_support.sql
psql $DATABASE_URL -f migrations/004_add_spam_support.sql
psql $DATABASE_URL -f migrations/005_add_ai_preferences.sql
psql $DATABASE_URL -f migrations/006_add_brute_force_protection.sql
psql $DATABASE_URL -f migrations/007_add_archive_support.sql- Deploy to Vercel
vercel --prod# Database
DATABASE_URL=postgresql://...
# Authentication
SESSION_SECRET=your-32-char-secret-minimum
# voip.ms API
VOIPMS_EMAIL=your@email.com
VOIPMS_API_PASSWORD=your-api-password
VOIPMS_DID=+17801234567
# FreeSWITCH (for voice calls)
FREESWITCH_SERVER=voip.example.com
FREESWITCH_WSS_PORT=8081
FREESWITCH_USER=your-sip-user
FREESWITCH_PASSWORD=your-sip-password
# AI Features
ANTHROPIC_API_KEY=sk-ant-...
AI_DRAFT_RATE_LIMIT=20- Enable API access in voip.ms portal
- Set API password (different from account password)
- Configure SMS webhook URL:
https://yourdomain.com/api/webhooks/voipms/sms - Enable SMS on your DID
voip-text/
├── api/ # Vercel Edge Functions
│ ├── auth/ # Authentication endpoints
│ ├── messages/ # SMS/voicemail management
│ ├── contacts/ # Contact CRUD
│ ├── ai/ # AI reply drafting
│ ├── calls/ # Call tracking
│ └── webhooks/ # voip.ms, Resend webhooks
├── public/ # Frontend
│ ├── index.html # Main app
│ ├── login.html # Login page
│ ├── js/main.js # Application logic
│ └── css/main.css # Styles
├── migrations/ # Database schema
├── utils/ # Shared utilities
└── types/ # TypeScript definitions
POST /api/auth/login- LoginPOST /api/auth/logout- LogoutGET /api/auth/me- Check sessionGET /api/auth/csrf-token- Get CSRF token
GET /api/messages- List conversationsPOST /api/messages/send- Send SMSGET /api/messages/conversation/[id]- Get conversationDELETE /api/messages/conversation/[id]- Delete conversationPOST /api/messages/note- Save private note
GET/POST /api/contacts- List/create contactsGET/PUT/DELETE /api/contacts/[id]- Manage contactPUT /api/contacts/[id]/spam- Toggle spam
POST /api/ai/draft-reply- Generate reply options
POST /api/webhooks/voipms/sms- Incoming SMSPOST /api/webhooks/resend/voicemail- Voicemail transcription
MIT