Give your AI agent an iMessage channel.

export TUCO_API_KEY="tuco_sk_xxxxxxxxxxxxx"

curl https://app.tuco.ai/api/messages \
  -H "Authorization: Bearer tuco_sk_xxxxxxxxxxxxx" \
  -H "Content-Type: application/json" \
  -d '{
    "recipientPhone": "+12025551234",
    "message": "Hey {{firstName}} — following up on your demo request. Free this week?",
    "messageType": "imessage"
  }'

// messageType: "imessage" | "sms" | "email"  (defaults to imessage)
const res = await fetch("https://app.tuco.ai/api/messages", {
  method: "POST",
  headers: {
    "Authorization": `Bearer ${process.env.TUCO_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    recipientPhone: "+12025551234", // or recipientEmail, or leadId
    message: "Following up on your demo request — free this week?",
    messageType: "imessage",
  }),
});
const data = await res.json();

POST  https://your-app.com/webhooks/tuco
Headers:
  X-Tuco-Event:      message.reply
  X-Tuco-Signature:  <HMAC-SHA256 of the raw body, keyed with your webhook secret>
  X-Tuco-Timestamp:  2026-08-22T18:22:41.000Z

Body (message.reply):
{
  "event": "message.reply",
  "timestamp": "2026-08-22T18:22:41.000Z",
  "workspaceId": "org_abc123",
  "leadId": "69b2c41d352a78479d2c623b",
  "lead": { "firstName": "Jane", "lastName": "Doe", "phone": "+15551230001" },
  "message": "Yes! Thursday 2pm works.",      // reply text (a string, for message.reply)
  "firstName": "Jane",                          // flat convenience fields
  "phone": "+15551230001",
  "fromLineId": "6a82fbf0586005e0ca405c37",
  "repliedAtUtc": "2026-08-22T18:22:41.000Z",
  "parentMessages": [ { "text": "Hey Jane — following up…", "direction": "out" } ],
  "attachmentDownloadUrls": [],                 // signed URLs when they send a photo/file
  "optedOut": false                             // true if the reply auto-triggered opt-out
}

import crypto from "crypto";

// Verify the webhook really came from Tuco BEFORE you trust it.
// Use the RAW request body (not the parsed JSON) to compute the HMAC.
function verifyTucoWebhook(rawBody, headers) {
  const sig = headers["x-tuco-signature"];
  const expected = crypto
    .createHmac("sha256", process.env.TUCO_WEBHOOK_SECRET)
    .update(rawBody)
    .digest("hex");
  return !!sig && crypto.timingSafeEqual(Buffer.from(sig), Buffer.from(expected));
}

curl "https://app.tuco.ai/api/replies?recipientPhone=%2B12025551234&limit=10" \
  -H "Authorization: Bearer tuco_sk_xxxxxxxxxxxxx"

{
  "mcpServers": {
    "tuco": {
      "command": "npx",
      "args": ["tuco-mcp"],
      "env": {
        "TUCO_API_KEY": "tuco_sk_xxxxxxxxxxxxx"
      }
    }
  }
}

{
  "type": "function",
  "function": {
    "name": "send_imessage",
    "description": "Send an iMessage to a contact via Tuco. Use for follow-ups, reminders, and replies.",
    "parameters": {
      "type": "object",
      "properties": {
        "recipientPhone": { "type": "string", "description": "E.164 phone, e.g. +12025551234" },
        "message": { "type": "string", "description": "The text to send. Keep it short and human." }
      },
      "required": ["recipientPhone", "message"]
    }
  }
}

{
  "name": "send_imessage",
  "description": "Send an iMessage to a contact via Tuco. Use for follow-ups, reminders, and replies.",
  "input_schema": {
    "type": "object",
    "properties": {
      "recipientPhone": { "type": "string", "description": "E.164 phone, e.g. +12025551234" },
      "message": { "type": "string", "description": "The text to send. Keep it short and human." }
    },
    "required": ["recipientPhone", "message"]
  }
}

// Wire the tool call to Tuco. Return the result to your model.
async function send_imessage({ recipientPhone, message }) {
  const res = await fetch("https://app.tuco.ai/api/messages", {
    method: "POST",
    headers: {
      "Authorization": `Bearer ${process.env.TUCO_API_KEY}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({ recipientPhone, message, messageType: "imessage" }),
  });
  return res.json();
}

You can send and receive iMessages through Tuco by calling the
send_imessage tool. To reach a contact, pass their phone in E.164 format
(e.g. +12025551234) and your message.

Rules:
- Write like a real person texting, not a marketing blast. Short and human.
- Personalize with the contact's name when you have it.
- Never send a link until the contact has replied at least once.
- Only message people who opted in. Respect any "stop"/opt-out immediately.
- When a contact replies, you'll receive their message — respond promptly.