Is it safe to let an AI assistant set up your buzzer?
Letting an assistant set up BuzzMeBro is reasonably safe, because the two steps that matter stay with you. With BuzzMeBro, an assistant sees only your postal code, unit and mobile, then your new number and the message for your building. It never sees your card, which goes to Stripe, and it cannot finish without the code we text to your phone. Give that code only to an assistant you asked.
Live with others? BuzzMeBro makes your buzzer ring everyone at once. First month free. Start free
Handing a task to an assistant is a trust question, and a buzzer is connected to your front door. So here is exactly what passes through the assistant when it sets up BuzzMeBro, and the safeguards that do not depend on trusting it.
What does the assistant see?
| Information | Seen by the assistant? | Why |
|---|---|---|
| Your postal code, unit and mobile | Yes | You tell it, so it can check the building and set up the apartment |
| The code we text you | Yes, if you read it out | It proves the phone is yours |
| Your card | No | You enter it on Stripe’s page, which goes to Stripe only |
| Your new BuzzMeBro number | Yes, once it is live | So it can hand it to you and write the building request |
| Other apartments’ setups | No | Its private token reads one setup and nothing else |
The ready-written building messages carry the new number and your unit. None of them contains the digit that opens your door.
Why does the texted code stay with you?
Every buzz rings the phones on the apartment, and whoever answers can open the lobby door. A setup that skipped the code would let anybody point a buzzer number at a phone that is not theirs. So the code goes to your mobile, and only you can pass it on.
NIST’s digital identity guideline treats a code sent over the phone network as a restricted method, and asks the sender to watch for signs like a SIM change or a ported number. It is not a perfect proof. Here it proves one specific thing well enough: the person setting this up holds the phone that will ring.
What protects the payment?
The assistant gives you a Stripe checkout page, and you approve the payment there. Stripe states it is certified to PCI Service Provider Level 1, the strictest level in the payments industry. BuzzMeBro never holds your card number, and neither does the assistant.
A card is needed to start the free month where it is offered, and nothing is charged until the month ends. What the whole setup looks like.
How long is the setup kept?
- The setup link works for 3 days.
- The record of the assistant’s setup is deleted 30 days after it was created.
- The assistant’s token is stored only in a scrambled form, so a copy of our records cannot be used to read your setup.
BuzzMeBro does not record calls, does not sell your data, and never uses it to train AI. The details are in the privacy policy.
Checking the connector itself
Claude’s help centre warns that a malicious MCP server can carry hidden instructions, and advises connecting only to servers you trust. The genuine BuzzMeBro address is https://buzzmebro.com/api/mcp, also listed on the page for AI assistants. How to add it.
Prefer not to involve an assistant at all? The same steps take about two minutes at buzzmebro.com. Start free.
From our own door
- You prove the mobile is yours with a code we text to it and read to your assistant; the step cannot be skipped because that phone will open your front door.
- Payment is on Stripe’s own checkout page; card details go to Stripe, never to BuzzMeBro or the assistant.
- The assistant reads progress with its own private token, which reads only that setup; we keep only a scrambled copy. The setup link works for 3 days and the record is deleted after 30.
- We do not record calls, do not sell data, never use it to train AI, and delete it before any sale of the company.
Questions people ask
Should I ever paste my card number into the chat?
No. BuzzMeBro never needs it there. Payment happens on Stripe’s checkout page, and your card details go to Stripe only.
What if someone else’s assistant texts me a code?
Ignore it. Without the code, nothing is set up on your phone. Codes only matter when you read them to an assistant you asked.
Does the assistant learn how to open my door?
No. The building messages it receives carry your new number and unit, and none of them contains the door digit.
Can the assistant change my account later?
Its token reads the progress of the one setup it created, and that setup record is deleted 30 days after it was made. Your account itself is signed into with your own phone.
Is my information used to train AI?
Not by BuzzMeBro, which never uses customer data to train AI. Your assistant’s own provider has its own policy, which is worth reading too. Ours.
Sources
- National Institute of Standards and Technology, NIST Special Publication 800-63B: Authentication and Authenticator Management
- Stripe, Security at Stripe
- Anthropic (Claude Help Center), Get started with custom connectors using remote MCP