Back to MCP Directory

Model Context Protocol moderate risk

WhatsApp

An MCP server for WhatsApp enabling message retrieval, contact search, and message sending via the WhatsApp web API, storing data locally in SQLite.

Connections & Capabilities

Connects To

GitHubSQLite

Capabilities

readwrite

Quickstart

Config

{
  "mcpServers": {
    "whatsapp": {
      "command": "{{PATH_TO_UV}}", // Run `which uv` and place the output here
      "args": [
        "--directory",
        "{{PATH_TO_SRC}}/whatsapp-mcp/whatsapp-mcp-server", // cd into the repo, run `pwd` and enter the output here + "/whatsapp-mcp-server"
        "run",
        "main.py"
      ]
    }
  }
}

Exposed MCP Tools (12)

safe

search_contacts

Searches for contacts by name or phone number.

Read-only operation, no side effects.

safe

list_messages

Retrieves messages with optional filters and context.

Read-only operation, no side effects.

safe

list_chats

Lists available chats with metadata.

Read-only operation, no side effects.

safe

get_chat

Gets information about a specific chat.

Read-only operation, no side effects.

safe

get_direct_chat_by_contact

Finds a direct chat with a specific contact.

Read-only operation, no side effects.

safe

get_contact_chats

Lists all chats involving a specific contact.

Read-only operation, no side effects.

safe

get_last_interaction

Gets the most recent message with a contact.

Read-only operation, no side effects.

safe

get_message_context

Retrieves context around a specific message.

Read-only operation, no side effects.

moderate

send_message

Sends a WhatsApp message to a specified phone number or group JID.

Sends messages, potentially leading to unintended actions.

moderate

send_file

Sends a file (image, video, raw audio, document) to a specified recipient.

Sends files, potentially leading to unintended sharing of sensitive information.

moderate

send_audio_message

Sends an audio file as a WhatsApp voice message.

Sends audio messages, potentially leading to unintended sharing of sensitive information.

moderate

download_media

Downloads media from a WhatsApp message and gets the local file path.

Downloads media to local storage, potentially exposing sensitive content.

Safety Assessment

This server offers convenient access to WhatsApp data but requires careful management of tool permissions to mitigate the risk of unintended actions or data exfiltration. It is safer for read-only operations but becomes riskier when message sending and file operations are enabled. Regular security audits and monitoring are recommended.

Message data is stored locally in a SQLite database.
Access to WhatsApp data is mediated through MCP tools.
User retains control over which tools the agent can access.
No external accounts or services are directly exposed.

Subject to project injection leading to data exfiltration.
Requires access to a personal WhatsApp account.
Has tools to send messages and files, potentially leading to unintended actions.
Stores message history locally, posing a risk if the system is compromised.
Relies on third-party libraries (whatsmeow) for WhatsApp API interaction.

WhatsApp Review, Pricing & Alternatives (2026) | Flaex AI