Verified

WhatsApp MCP Server

WhatsApp personal account messaging and media access for AI models.

Data last scanned yesterday · Reviewed 2 months ago

4612 tools★ 5,960GoMIT

Overview

This server integrates your WhatsApp account with AI models, allowing you to read personal messages and search contact lists directly from your AI assistant. It supports fetching various media formats, including images, videos, documents, and audio messages.

Our verdict

This server holds a high-risk security score of 46/100, primarily because it lacks a read-only mode and grants full write access upon installation. Furthermore, the codebase has not been updated in over a year, with the last commit occurring 382 days ago. Given the potential for prompt injection to facilitate private data exfiltration as noted by the maintainer, this tool should only be used by individuals comfortable with managing sensitive personal account data and the associated privacy implications.

Supports reading and sending media, including images and audio
Zero direct dependencies reduces the supply-chain attack surface
Includes documentation for local SQLite-based message storage

High security risk due to lack of read-only mode
Project is stagnant with no commits for over a year
Community-maintained rather than official vendor support

Tools

Tool	Description	Risk
search_contacts	Search for contacts by name or phone number	low
list_messages	Retrieve messages with optional filters and context	low
list_chats	List available chats with metadata	low
get_chat	Get information about a specific chat	low
get_direct_chat_by_contact	Find a direct chat with a specific contact	low
get_contact_chats	List all chats involving a specific contact	low
get_last_interaction	Get the most recent message with a contact	low
get_message_context	Retrieve context around a specific message	low
send_message	Send a WhatsApp message to a specified phone number or group JID	medium
send_file	Send a file (image, video, raw audio, document) to a specified recipient	medium

Compatibility

Client	Local	Docker	Remote	Read-only
ChatGPT
Claude Desktop
Cursor
VS Code
Windsurf

Frequently asked questions

›Do I need any specific software installed to run this server?

Yes, you need Go, Python 3.6+, the UV package manager, and either the Anthropic Claude Desktop app or Cursor. Additionally, FFmpeg is optional but required if you want to automatically convert audio files into playable WhatsApp voice messages.

›How do I authenticate the WhatsApp account?

The authentication is handled by the Go WhatsApp bridge. Upon the first run of the bridge, you will be prompted to scan a QR code using your WhatsApp mobile app.

›Is re-authentication required periodically?

Yes, you may need to re-authenticate the WhatsApp bridge approximately every 20 days.

›Are there specific requirements for running this on Windows?

Yes, you must have a C compiler installed (such as MSYS2) and explicitly enable CGO by running 'go env -w CGO_ENABLED=1' before starting the Go bridge, as go-sqlite3 requires CGO to function.

›Where is my WhatsApp message data stored?

All your message history is stored locally in a SQLite database located within the 'whatsapp-bridge/store/' directory of the repository.

›What are the security implications of using this server?

As with many MCP servers, this project is subject to potential prompt injection risks, which could lead to private data exfiltration if the model is compromised.