// the take
A reverse-engineered Python client for Clubhouse's private API, built by a security researcher poking at the app rather than by Clubhouse itself. It includes a working standalone CLI (voice chat via Agora SDK) and is aimed at people curious about how the app's auth and room protocols work, not at anyone building a product on top of it.
The auth flow, phone verification, and room/channel endpoints are implemented and documented well enough to actually run the CLI client, not just stub calls. The README's Q&A is unusually technical for a scraped API project, pointing to real findings (unencrypted voice traffic as of the author's analysis, unused encryption flags in the SDK calls) backed by an external writeup rather than vague claims. Packaging as a pip-installable module (`clubhouse-py`) alongside the raw source is a nice touch for quick experimentation.
The author explicitly killed the project (no more updates after the Android app shipped officially) and disabled issues/PRs, so any API break on Clubhouse's side — which the author themselves warns is likely — just bricks the client with no fix path. It's an unofficial reverse-engineered client hitting undocumented endpoints with aggressive rate limiting, and the author warns requests can get you permanently banned, which rules out any real-world use beyond poking at it locally. PubNub-based in-room notifications were never implemented, just left as raw keys for someone else to wire up. Last pushed in January 2023 against an app (Clubhouse) that has itself largely faded, so even the reverse-engineered surface is stale against whatever the current API looks like.
We read the README, the directory tree and a key source file in October 2026. Nobody pays to be listed. How we judge →