Mmcp.market

Wapiworld MCP server

by wapiworld.com·com.wapiworld/wapiworld·v0.1.0
No reviews yet

Inspect Wapiworld sender and webhook health, and send one explicitly confirmed WhatsApp text.

C56/100grade C
Write a reviewRun it
What users say
No reviews yet
Be the first
Safety scan
C56/100

full report

Adoption
New

Little public usage data yet

Reviews

Write one

Nobody has reviewed Wapiworld yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Wapiworld tools (8, 1 write)

write = sends, deletes, buys or posts
  • get_instanceFree

    Fetch safe operational details for one tenant-scoped Wapiworld WhatsApp instance. QR pairing codes, instance secrets, API keys, proxy addresses, organization ids, and arbitrary stored metadata are never returned.

  • get_instance_statusFree

    Fetch the current safe connection health for one tenant-scoped Wapiworld instance without returning QR pairing codes or authentication data.

  • get_message_recording_policyFree

    Inspect whether message-content persistence is enabled by default for one tenant-scoped Wapiworld instance and how long recorded rows are retained. This directory-safe diagnostic never reads message bodies, previews, sender names, contact identifiers, chat-level override keys, or WhatsApp message ids.

  • list_instancesFree

    List a bounded page of tenant-scoped Wapiworld WhatsApp instances, optionally filtered by project. Results include operational status and phone metadata but never QR pairing codes, instance secrets, API keys, proxy data, or arbitrary stored fields.

  • list_projectsFree

    List a bounded page of Wapiworld projects available to the authenticated organization. API-key sessions remain pinned to their single project. Internal organization ids and project configuration are omitted.

  • list_webhook_subscriptionsFree

    List a bounded page of the organization’s Wapiworld webhook subscriptions with their subscribed events and delivery health, so a stopped webhook can be diagnosed. An endpoint that fails 20 deliveries in a row is disabled automatically. Requires an operator OAuth session; API-key sessions cannot read this route. The signing secret is never returned, and only the scheme and host of the delivery URL are shown because hook paths often embed a credential.

  • send_messagewrite actionFree

    Send one real external WhatsApp text message through a tenant-scoped Wapiworld instance. This destructive, open-world action is non-idempotent: show the exact sender instance, recipient and complete text, obtain explicit confirmation for one send, call once, and never retry automatically when the outcome is uncertain. Do not include restricted data. Existing Wapiworld recording settings may persist outbound content.

  • show_project_overviewFree

    Render a bounded operational overview for one tenant-scoped Wapiworld project, including WhatsApp instance health and safe phone metadata. QR pairing codes, instance credentials, API keys, proxy data, and arbitrary stored fields are excluded.

Public scan report

scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it

1 high1 low
  • –Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 2387ms17/20
  • Tool poisoning8 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
  • Maintenanceno repository listed3/15
  • Maintainer identityverified namespace with website, no repo4/10

Findings (2)

  • highWrite-action tools reachable without authenticationauth.open-write
  • lowNo source repository listedmaint.no-repo
Overall 56/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

claude mcp add --transport http wapiworld https://mcp.wapiworld.com/mcp
Add to Cursor

Wapiworld: common questions

Is Wapiworld MCP server safe?
With care: it is graded C, so read the findings first (56/100). Read the Wapiworld safety report
How do I install Wapiworld?
It runs remotely at mcp.wapiworld.com. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Wapiworld need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Wapiworld maintained?
The latest release is v0.1.0.
Is Wapiworld up?
100% of our last 19 checks got an answer. We check remote servers about four times a day.

More from wapiworld.com →