On this page
3CX posted a test build called V20 Update 10 Alpha on July 30, 2026. The useful part is a plug so AI tools can talk to the phone system.
That plug is called MCP (Model Context Protocol). Plain words: ChatGPT, Claude, Gemini, GitHub Copilot, or a custom helper can ask the phones things like “sum up that call” or “how busy was the queue,” using the same login rights a person already has. 3CX says access uses OAuth and the user’s existing 3CX role.
This is a test build. 3CX says do not put it on live customer phones. It is not on DVGVoIP hosted 3CX boxes. We will not sell MCP or the new Customer Service Agent as a live feature until a hosted box we run can actually do it.
Since that first post, 3CX has published more detail, including a dedicated 3CX MCP Server write-up on August 26. Most of the security answers below come from that one.
What Update 10 adds
From the official 3CX posts, the main pieces are:
- MCP. A built-in way for approved AI apps to talk to permitted 3CX functions. Examples they name: summarise calls, queue and department reports, turn approved transcripts into knowledge, look at system issues, or do supported admin work.
- A separate 3CX AI Server. AI moves off the phone box onto its own server. They say this is simpler to update and can run locally, on macOS or Debian. Existing on-box AI is not compatible with Update 10. 3CX says it has to be reinstalled or migrated to the new AI server.
- A Customer Service AI Agent. It can answer simple questions from knowledge you give it, then pass the hard ones to a person. If the AI provider or the agent goes down, you can set a fallback so calls still go somewhere. Department staff can also keep the knowledge sources up to date now without full System Owner rights.
- Two ways to build live voice apps. AI Call Scripts run on the 3CX server and talk to OpenAI, Gemini, or xAI. Programmable Extensions let an outside app act like a phone extension and stream audio both ways. 3CX still does the phone part: trunks, numbers, routing.
- Clearer call notes. AI call summaries can include notes and action items, not just a recap. Transcription jobs that fail on a provider, network, or rate-limit hiccup get retried now instead of just failing.
You must already be on V20 Update 9 before you can even try the Alpha. 3CX says that in the install steps on the same page.
Can ChatGPT read my calls?
This is the question everyone actually asks, so here is the long answer.
Not today, and not on our boxes. But when MCP does go live, here is what 3CX says controls it:
- It logs in as a person. MCP uses OAuth and inherits that 3CX user’s permissions. The AI client can only see and do what that account can see and do. Connect it with a receptionist login and it gets a receptionist’s view.
- Database reads are read-only. 3CX says the Query tool is limited to read-only SELECT statements. It cannot write to or delete from the PBX database that way.
- Every tool can be gated. Supported AI clients let you set each tool to Always allow, Needs approval, or Deny. Anything that changes or deletes PBX data should sit on Needs approval or Deny.
Now the part 3CX does not say out loud. The account you connect is the whole security model. If an admin hooks a public AI service up with a System Owner login and sets everything to Always allow, that service can reach call recordings, voicemails, logs, DIDs, trunks, and extension data across the tenant. That is not a flaw in MCP. It is the same rule as handing someone your admin password, except quieter.
So when this goes production, the rules we will run are simple: a dedicated, least-privilege 3CX account for the AI client, never a shared admin login. Write and delete tools set to Needs approval. And a written answer to “which AI vendor is this, and where does that data land,” before anything gets connected. If your business is under PIPEDA or handles health information, that last one is not optional — see our note on VoIP, HIPAA and PIPEDA for Ontario clinics.
The parts of Update 10 nobody is blogging about
MCP is the headline. These are the bits more likely to actually hit a Thunder Bay business.
Your licence now has a hard ceiling. The PBX now shows the maximum number of extensions your licence allows. When you hit it, new users and imports are blocked, and the Admin Console shows a permanent warning until you free up seats or upgrade the licence. If you are a growing shop that has been quietly adding extensions, this is the update where that stops working on a Tuesday morning.
Free 3CX gets tighter. Restrictions on the 4SC Basic Free Hobby Edition start taking effect, beginning with new IP phone configuration. If you are running a free self-hosted 3CX for a real business, this is the direction of travel. Worth a conversation before it bites.
Recording and reporting rights split apart. There is a per-user option to stop other participants recording calls that involve sensitive extensions, and reports and call recordings are now separate permissions. Previously, giving someone reports could hand them more than you meant. Good news if you have an HR line, a payroll extension, or a manager who should see queue stats but not listen to calls. More on how we handle this in security and backup.
Smaller, still useful. Users with several DIDs can pick which number to call out from, so you can return a call on the number the customer originally dialled. The web client gets instant ad-hoc audio conferencing and a picture-in-picture dialer that stays visible while you work in another tab. SendGrid is now a built-in email provider, there is a native Odoo CRM integration, and custom IP phone templates can be created, edited, exported and switched without losing extension assignments, routing or BLF setup.
What we are not claiming
We host 3CX for Thunder Bay and Northern Ontario shops. Seat prices stay what they are: $22 per user per month for 1–10 users on Starter, dropping to $19 per user on Business once you are at 11 users. Month to month, or a bit less on annual. This post does not change that card.
We are not saying:
- that Update 10 is on your hosted box
- that ChatGPT can see your calls today
- that you should install Alpha on a live system
One thing that is easy to mix up: the AI Receptionist and Personal Assistant we program today are existing V20 features. They are live, they are not part of Update 10, and nothing here changes them. The new bits are MCP and the Customer Service Agent, and those are alpha.
If you already have hosted 3CX with us, you keep the same seats and the same team. When we can run the new bits on a hosted box, we will say so.
What you should do now
Nothing on a live phone system. Do not download Update 10 Alpha onto a customer PBX.
Two things are worth checking, though:
- What version are you actually on? Update 10 requires Update 9 first. If you are sitting on Update 8 or older, you are two releases behind, and none of this is available to you even when it goes production. That gap is also where security fixes live.
- How close are you to your extension limit? With the new hard cap, “we’ll add that seat next week” stops being a safe assumption.
We can check both. If you want the bill and the system looked at the current way, book a free assessment. If you are comparing us to Tbaytel Unifi, the rate-card post is here: Tbaytel Unifi vs hosted 3CX.
Short answers
What is 3CX Update 10?
A test (Alpha) build of 3CX V20. It adds MCP, a standalone AI server, a customer-service AI agent, and tools to build live voice apps. It also adds licence extension caps, split recording permissions, and outbound DID selection. 3CX posted it July 30, 2026.
What is MCP on 3CX?
A standard plug so AI apps can talk to the phone system without a one-off hook-up for each tool. Access follows the user’s 3CX rights.
Can ChatGPT read my 3CX call recordings?
Only if you connect an account that already has access to them. MCP inherits the permissions of the 3CX user you sign in with, database queries are read-only, and each tool can be set to allow, ask, or deny. Use a least-privilege account, not an admin login.
Is Update 10 on DVGVoIP hosted phones?
No. 3CX says Alpha is for testing only. Our hosted boxes stay on the current live version until we can run this for real.
Should I install Update 10 Alpha?
Not on a live customer system. 3CX says that. Wait for a production release, or a test box that is not taking real calls.
Sources: 3CX, V20 Update 10 Alpha: MCP, AI Server & More (July 30, 2026) and 3CX MCP Server: Manage Your PBX With AI (August 26, 2026). Not a contract. Features above are what 3CX listed for the Alpha, not a promise they are on your hosted system.