MCP.Market

WhatsApp MCP server

by adelaidasofia·io.github.adelaidasofia/whatsapp-mcp·v0.1.1
No reviews yet

WhatsApp MCP. SQLCipher-encrypted, scrubber-CI-gated, draft-and-confirm sends, voice transcription.

B83/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B83/100

full report

Adoption
Growing

0 stars26 downloads/wk

Reviews

Write one

Nobody has reviewed WhatsApp MCP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

WhatsApp MCP tools (11, 5 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • confirm_sendwrite action

    Commit a previously-drafted send. This is where the actual WhatsApp network send happens.

  • healthcheck

    Check the Go bridge is running and authenticated. Returns status, schema version, and feature flags.

  • list_chats

    List WhatsApp chats with metadata. Sorted by most recent message time.

  • list_messages

    List messages in a chat. Most recent first by default.

  • mark_chat_read

    Mark one or more messages as read. Affects your WhatsApp unread count on this device AND across your linked devices. Low-consequence: no draft+confirm needed, this is a one-step call.

  • search_contacts

    Find contacts by name or phone number. Accent-insensitive. "Muñoz" matches "munoz", "José" matches "jose", "Zürich" matches "zurich".

  • send_messagewrite action

    Create a DRAFT text message. Does NOT send until confirm_send is called.

  • send_reactionwrite action

    Create a DRAFT emoji reaction on a specific message.

  • send_reply_quotewrite action

    Create a DRAFT reply-quote message that cites a specific earlier message.

  • send_typing_indicatorwrite action

    Show a "typing..." or "paused" indicator to the chat recipient.

  • set_online_presence

    Signal your online/offline presence globally to all chats. Changing this affects your "last seen" visibility per WhatsApp's privacy settings.

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan2 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 11 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 83/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How WhatsApp MCP compares

Against every graded Developer tools MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
83/100
higher than 65% of 1,119 Developer tools servers
Tools
11
the typical Developer tools server has 7
Tools that change things
45%
typical: 5%. Fewer write tools means less an agent can break
Downloads a week
26
more than 10% of 430 Developer tools servers with a package

What its tools let an agent do: 4 read · 3 change · 4 send or post

Install WhatsApp MCP in Claude Code, Cursor or VS Code

claude mcp add whatsapp-mcp -- uvx adelaidasofia-whatsapp-mcp
Add to Cursor

What the publisher says

From the WhatsApp MCP repository's README, as published. We do not edit it. Read it on GitHub

whatsapp-mcp

<!-- mycelium-badges:start -->

<!-- mycelium-badges:end -->

<!-- mcp-name: io.github.adelaidasofia/whatsapp-mcp -->

A WhatsApp MCP server for Claude, built directly on whatsmeow. Encrypted at rest, prompt-injection-scrubbed, draft-and-confirm on every send, full audit trail, daily CI security gates. Actively maintained.

Why this one?

The most-starred WhatsApp MCP (lharries/whatsapp-mcp, 5.6K stars) is the architectural reference for this pattern, but has not shipped since July 2025 and leaves the lethal-trifecta problem entirely to the user. This implementation closes the gaps:

Not a fork. The Go bridge is built directly against whatsmeow; the Python MCP layer and SQLite schema are original. Other implementations (lharries, LukasHaas, verygoodplugins) were read as reference only.

What this gives you

Claude can:

  • Read your WhatsApp chats, messages, and contacts
  • Search messages with accent-insensitive, typo-tolerant matching
  • Transcribe voice notes locally via whisper.cpp (Spanish-tuned by default)
  • Resolve LID (Linked IDentifier) names instead of numeric placeholders
  • Send text messages, reactions, and reply-quotes, with a mandatory confirm_send step between draft and delivery
  • Pull matching CRM context from your Obsidian vault when reading a chat
  • See only prompt-injection-scrubbed message text, never raw adversarial input

Everything runs locally on your machine. No cloud sync. No telemetry. Optional OpenAI Whisper backend is opt-in, off by default.

Architecture

Two components, both local:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

WhatsApp MCP: common questions

Is WhatsApp MCP server safe?
Mostly: it is graded B (83/100). Read the WhatsApp MCP safety report
How do I install WhatsApp MCP?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does WhatsApp MCP need an API key?
Yes. The registry entry asks for WHATSAPP_WHISPER_API_KEY.
Is WhatsApp MCP maintained?
The last commit was 47 days ago (2026-09-16). The latest release is v0.1.1.
How does WhatsApp MCP compare with other Developer tools MCP servers?
safety score 83/100 (higher than 65% of 1,119 Developer tools servers); tools 11 (the typical Developer tools server has 7); tools that change things 45% (typical: 5%. Fewer write tools means less an agent can break). Full comparison.

More from adelaidasofia →