← Back to search

Guarded WhatsApp

peter-tnc-453 Scanned 22h ago

Security gate for agent-driven WhatsApp: allowlist, secret scan, rate limit, audit log.

MCP Registry ↗
B
78.5 / 100

Versions

0.1.0latest
first seen Jun 30, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 5

wa_list_recipients
annotations: none low

List the allowlisted WhatsApp recipients this engine is permitted to message. Read-only. Numbers are masked. Use the returned `name` as the `recipient` argument to wa_preview / wa_send_message / wa_send_file.

wa_preview
annotations: none low

Dry-run a send: run every security check and report exactly what WOULD happen, WITHOUT sending. Returns a verdict and, when the send needs confirmation, a `confirm_token` to pass back to the send tool. Use this before any send you are unsure about.

message string file_path string recipient str
wa_audit_tail
annotations: none low

Return the most recent send-attempt audit records (allowed, blocked, or failed). Read-only. Message bodies are stored as a short preview + hash only.

limit int
wa_send_message
annotations: none low

Send a WhatsApp text message to an allowlisted recipient. Passes through the full security gate (allowlist, secret scan, rate limit, confirmation). If the result has needs_confirm=true, re-call with the returned confirm_token.

message str recipient str confirm_token string
wa_send_file
annotations: none low

Send a file to an allowlisted recipient. The filename is auto-sanitized to an ASCII-safe name (so WhatsApp shows a real name, not 'Untitled', and no path traversal is possible), the type/size are validated, and the caption is secret-scanned. Sending files may require a confirm_token (see wa_preview).

caption str file_path str recipient str confirm_token string

Permissions 3

network medium
Server uses network capabilities via: httpx
filesystem low
Server uses filesystem capabilities via: open(), os, pathlib, shutil, tempfile
env_vars low
Server uses env_vars capabilities via: os.environ

Scan Findings 29

low
Tool 'wa_list_recipients' has no annotations annotation_checker · 100%
low
Tool 'wa_preview' has no annotations annotation_checker · 100%
low
Tool 'wa_audit_tail' has no annotations annotation_checker · 100%
low
Tool 'wa_send_message' has no annotations annotation_checker · 100%
low
Tool 'wa_send_file' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-3qhf-m339-9g5v) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-9h52-p55h-vw2f) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-j975-95f5-7wqh) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-jpw9-pfvf-9f58) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (GHSA-vj7q-gjh5-988w) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-1616) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-1617) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-1618) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-3482) dependency_analyzer · 95%
medium
Vulnerable dependency: mcp@1.2.0 (PYSEC-2026-3483) dependency_analyzer · 95%
info
pyproject.toml metadata manifest_parser · 100%
info
Tool: wa_list_recipients manifest_parser · 90%
info
Tool: wa_preview manifest_parser · 90%
info
Tool: wa_audit_tail manifest_parser · 90%
info
Tool: wa_send_message manifest_parser · 90%
info
Tool: wa_send_file manifest_parser · 90%
info
Required env vars (1) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
low
Permission: env_vars access detected permission_analyzer · 90%
info
No dependency files found for SBOM generation sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%