WhatsApp MCP by Finereli
An MCP server searches and reads owned WhatsApp history as a linked device so agents can find messages and prepare summaries.
- 404 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- MCP exposes broad access to private conversations and passes selected messages to the client model.
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add mcp/whatsapp-mcp-by-finereliDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- MCP exposes broad access to private conversations and passes selected messages to the client model.
This is third-party code. Review the repository files before installing.
What it does
WhatsApp MCP by Finereli exposes search and reading for an owned WhatsApp account. The phone links like WhatsApp Web, and a separate database retains received history. No tools send, edit or delete WhatsApp messages. Users can choose the hosted beta or self-host on Cloudflare. Messages are encrypted at rest and decrypted for queries. Sync happens when the agent asks rather than through a permanent background connection. Retrieved text then reaches the selected client’s model.
Who it is for. For WhatsApp account owners searching past agreements while explicitly authorizing agent processing.
Good fit when
- Find a message by specific words.
- Recall an agreement from owned chats.
- Summarize a group’s history.
- Choose self-hosting instead of the hosted service.
Not a fit when
- You need MCP to send or edit messages.
- Chat contents cannot be shared with the selected model.
- You need a guaranteed complete history and media import.
Example request
Find the date agreement in an authorized test chat and show only the relevant passage.MCP
- Transport
- http
- Authentication
- OAuth
Limitations
Linking uses the unofficial Baileys library, and WhatsApp may restrict an account, so assess that before connecting. During requests the server decrypts messages, and the hosted login operator can derive the key; choose who you trust to process them. Retrieved messages include other participants’ words and reach the client model; limit queries to authorized conversations. Import covers history supplied to the linked device; media appear as labels without files or transcription.
How to disable. Revoke the linked device and MCP client. “Delete my data” removes the server copy and disconnects agents; original WhatsApp messages remain.
FAQ
What does self-hosting require?
Cloudflare Workers Paid, Node.js 20 or later and the phone for linking.
What is the MCP endpoint?
The selected instance’s `/mcp` path with browser authorization.
Does sync run continuously?
No. Reads refresh the copy as the agent requests it.
How does search work?
Whole words, exact phrases and wildcard prefixes.
Can a forgotten self-hosted password be recovered?
No. Relink the phone and import available history again.
Discussion
No questions or reviews yet.
Related
MCP serversAn MCP server for your personal WhatsApp account: search and read chats, contacts, send messages and files through an agent
An MCP server for personal WhatsApp: read and search chats, send text and files, react, send voice notes and transcribe them
An MCP server for macOS: an agent reads, searches and sends messages in the Messages app on your Mac
An MCP server for Slack: channel history, threads, DMs, search and unreads, with posting off by default
The official Kibela MCP server searches, reads and edits notes, folders and comments of your wiki straight from an assistant chat
Telegram MCP by chaindead
Telegram MCP
A Go MCP server for your Telegram account: the agent reads dialogs and unread messages, marks them read, leaves replies as drafts
README in short
Hosted and self-hosted setups derive storage keys differently. That distinction matters when choosing who processes chat history.