MCP.Market

Whatsapp MCP server

by meharajM·io.github.meharajM/whatsapp-mcp·v2.0.1

WhatsApp MCP Server - Human-in-the-loop for AI agents via WhatsApp

B82/100grade B
What users say
No reviews yet
Be the first
Safety scan
B82/100

full report

Adoption
New

0 stars62 downloads/wk

Reviews

Write one

Nobody has reviewed Whatsapp yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Whatsapp tools (5, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • ask_question

    CRITICAL INSTRUCTION: Use this tool to send a question or prompt to the user via WhatsApp and wait for their reply.

  • connect

    Establish or verify the WhatsApp connection. Required before sending or receiving messages. MUST CALL THIS FIRST. If unauthenticated, this returns a local HTML file path containing the QR code. IMPORTANT INSTRUCTION FOR AI AGENTS (Claude, Perplexity, Cursor, etc.): You MUST explicitly instruct the user to open this HTML file path in their web browser (Chrome, Safari, etc.) to view and scan the QR

  • disconnect

    Disconnect from WhatsApp and clear the active session. This acts as a logout. You will need to scan a new QR code upon the next connect attempt.

  • get_status

    Returns the current status of the WhatsApp MCP server.

  • send_messagewrite action

    CRITICAL INSTRUCTION: Send a one-way notification or status update to the user via WhatsApp.

Public scan report

scanner v0.1.10 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan13 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 104 days ago8/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 82/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Whatsapp compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
82/100
higher than 63% of 48,273 servers
Tools
5
the typical server has 7
Tools that change things
20%
typical: 0%. Fewer write tools means less an agent can break
Downloads a week
62
more than 52% of 11,915 servers with a package

What its tools let an agent do: 4 read · 1 send or post

Install Whatsapp in Claude Code, Cursor or VS Code

Runs npx -y @mhrj/whatsapp-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add whatsapp-mcp -- npx -y @mhrj/whatsapp-mcp
Add to Cursor

What the publisher says

From the Whatsapp repository's README, as published. We do not edit it. Read it on GitHub

WhatsApp MCP Human-in-the-Loop for AI Agents via WhatsApp

This is an MCP (Model Context Protocol) server that enables AI agents (like Claude or Cursor) to interact directly with you via WhatsApp. It bridges the gap between your autonomous AI and your phone, allowing for runtime confirmations, permission requests, or simple status updates while you are away from your computer.

  • AI agent messaging
  • AI agent confirmations
  • Agent interrupt system
  • AI alerts
  • MCP server
  • Cursor MCP
  • Claude Desktop MCP
  • AI notifications

Perfect for

  • Cursor
  • Claude Desktop
  • Claude Code
  • OpenCode
  • Codex
  • Autonomous AI workflows

Example

AI: Deploy to production?

WhatsApp: [YES] [NO]

You: YES

Agent continues.

🚀 Quick Start (NPX)

Since this package is published to NPM, you can run it directly via npx in your MCP configuration.

Cursor / Claude Configuration

Add this to your MCP configuration file:

{
  "mcpServers": {
    "whatsapp-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@mhrj/whatsapp-mcp"
      ],
      "env": {
        "WHATSAPP_TARGET_NUMBER": "1234567890@s.whatsapp.net"
      }
    }
  }
}

Note about Allowed Numbers: WHATSAPPTARGETNUMBER is the default recipient for all messages. However, if your target is a Whatsapp Group, any member of the group would be able to answer the AI by default. To restrict replies only to specific numbers (to prevent unauthorized people from answering), you can optionally add a comma-separated list of numbers as an environment variable: "WHATSAPPALLOWEDNUMBERS": "123@s.whatsapp.net,456@s.whatsapp.net". If set, the AI will ONLY honor responses from these specific matching users.

Troubleshooting npx: executable file not found in $PATH or env: node: No such file or directory:

If your IDE/Agent complains it cannot find npx or node, it's because GUI apps (like Cursor) don't inherit your terminal's $PATH. To fix this, explicitly pass your PATH in the MCP env config.

json

"env": {

"PATH": "/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin",

"WHATSAPPTARGETNUMBER": "1234567890@s.whatsapp.net"

}

Authentication (First time only)

The very first time you use the MCP server, it needs to authenticate with WhatsApp Web:

  1. Call the connect tool via your Agent, or just use any WhatsApp tool normally. If the session is not authenticated yet, the server will trigger authentication automatically.
  2. The tool result will return the QR code image directly in MCP content so modern clients can render it inline.
  3. If your client does not render inline images, the server also tries to write a local fallback HTML page under ~/.whatsapp-mcp/qr.html.
  4. Open WhatsApp on your phone -> Linked Devices -> Link a Device, and scan the QR.
  5. The authentication session is saved to your home directory (~/.whatsapp-mcp/baileysauthinfo), so you don't need to scan it again across restarts.

Remote "Auto-Pilot" Workflow (Skip IDE Prompts)

To make your AI agent run fully autonomously and only ask for permissions/guidance via WhatsApp (allowing you to step away from your computer):

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Whatsapp: common questions

Is Whatsapp MCP server safe?
Mostly: it is graded B (82/100). Read the Whatsapp safety report
How do I install Whatsapp?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Whatsapp need an API key?
No secret keys are declared. It reads 2 settings from the environment.
Is Whatsapp maintained?
The last commit was 140 days ago (2026-06-15). The latest release is v2.0.1.
How does Whatsapp compare with other MCP servers?
safety score 82/100 (higher than 63% of 48,273 servers); tools 5 (the typical server has 7); tools that change things 20% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.