WhatsApp MCP Server
An MCP server for your personal WhatsApp account: search and read chats, contacts, send messages and files through an agent
- 6,866 ★ on the repository
- Last commit
- MIT
Broad access
Why this level
- Sends messages and files on your behalf from a personal WhatsApp account
- Reads all personal chats, which creates an exfiltration risk under prompt injection
Meta, the owner of Facebook, Instagram and WhatsApp, is designated an extremist organization in Russia and its activities are banned there.
Install
- Works in
In your terminal, with SkillFoxx CLI
npx skillfoxx add mcp/whatsapp-mcp-serverDetects the agents on your machine, shows the access level and pins the version.
Other ways to install
Access and checks
How we reviewBroad accessThe tool can change data, run commands or handle secrets.
- Sends messages and files on your behalf from a personal WhatsApp account
- Reads all personal chats, which creates an exfiltration risk under prompt injection
This is third-party code. Review the repository files before installing.
What it does
The server connects to a personal WhatsApp account through the multidevice web API built on the whatsmeow library. It has two parts: a Go bridge that authenticates via QR code and stores message history in a local SQLite database, and a Python server that exposes MCP tools to the agent. The agent can search contacts and chats, read messages with context, send text to direct chats and groups, send images, video, documents and voice notes, and download attachments. Messages stay on your machine and reach the model only when the agent calls a tool that reads them.
Who it is for. For anyone who wants to work with their own WhatsApp chats from an agent: support, sales, personal automation.
Good fit when
- You need to find and read messages or attachments in your chats through an agent
- You need to send a message, file or voice note to a contact or group
- You need to pull the history with a person without scrolling by hand
Not a fit when
- You need the official WhatsApp Business API rather than a personal account
- You cannot link your personal number as an extra device
Example request
Find my latest chat with Anna and send her a message that the meeting moves to tomorrowMCP
- Transport
- stdio
- Authentication
- not required
Limitations
Works only with a personal account through device linking; it does not use the official business channel. It needs Go and Python, and the bridge and server must run at the same time. Roughly every 20 days you re-authenticate by QR code, and WhatsApp caps the number of linked devices. WhatsApp voice notes require FFmpeg. The author warns about data exfiltration through prompt injection: an agent that can both read chats and send messages can leak data if fed malicious text.
How to disable. Remove the whatsapp block from the agent's MCP configuration and stop the Go bridge. To unlink the device, open WhatsApp on your phone, go to Linked Devices, and remove the session. The local databases can be deleted from the whatsapp-bridge/store folder.
FAQ
Where are messages stored?
In a local SQLite database in whatsapp-bridge/store. They reach the model only when the agent reads them through a tool.
Is this the official WhatsApp Business API?
No. The server connects to a personal account via the multidevice web API, like an ordinary linked device.
Discussion
No questions or reviews yet.
Related
MCP serversAn MCP server for personal WhatsApp: read and search chats, send text and files, react, send voice notes and transcribe them
An MCP server searches and reads owned WhatsApp history as a linked device so agents can find messages and prepare summaries.
An MCP server for macOS: an agent reads, searches and sends messages in the Messages app on your Mac
A local MCP server for Mac and Windows that lets an agent work with mail, messengers, calendars and files.
A Go utility with JSON output: an agent reads WhatsApp chats, searches messages and contacts and sends texts from your number
A Telethon MCP server: the agent reads and sends messages and manages chats, contacts and folders in your Telegram account
Comparison with similar tools
Cards that share the main search query, and how they differ.
| Tool | Official | Authentication | Repository stars | Main difference |
|---|---|---|---|---|
| WhatsApp MCP Server (this card) | no | not required | 6,866 | |
| Instagram MCP | no | API key | 78 | managing an Instagram business account: publishing, comments, analytics |
| Facebook MCP | no | API key | 7 | reading public Facebook pages through the paid HasData API |
README in short
The README covers a two-part setup: a Go bridge that connects to WhatsApp, authenticates by QR code and keeps a local SQLite database, and a Python MCP server. It then gives the JSON config for Claude Desktop and Cursor with paths to uv and the server folder. It lists the tools: contact and chat search, reading messages and their context, sending messages, files and voice notes, and downloading media. Separate sections cover the Windows build with CGO, media handling and common authentication issues. MIT licensed.