← Back to search

WhatsApp Web MCP Server

mario-andreschak Scanned 11d ago

MCP server for WhatsApp via whatsapp-web.js: send/receive messages, media, chats, groups, contacts

MCP Registry ↗
B
78.4 / 100

Versions

1.1.0latest
first seen Jul 8, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 16

list_chats
annotations: none low

Get WhatsApp chats sorted by recent activity. Note: the

limit number include_last_message boolean
get_chat_by_id
annotations: none low

Get WhatsApp chat metadata by JID.

jid string include_last_message boolean
get_direct_chat_by_contact_number
annotations: none low

Get direct WhatsApp chat JID by contact phone number (less reliable, use get_chat_by_id if JID is known).

phone_number string
get_qr_code
annotations: none low

Get the latest WhatsApp QR code as an image for authentication

request_pairing_code
annotations: none low

Request a pairing code as a text-based alternative to scanning the QR code. The user enters the returned 8-character code on their phone under Settings > Linked Devices > Link a device >

check_auth_status
annotations: none low

Check if the WhatsApp client is authenticated and connected

logout
annotations: none low

Logout from WhatsApp and clear the current session

list_messages
annotations: none low

Get WhatsApp messages from a specific chat. This is the source of truth for actual message content: use it whenever the question is about what someone said/wrote. Entries include non-text events too (check the

limit number chat_id string
get_message_by_id
annotations: none low

Get a specific WhatsApp message by its ID.

message_id string
get_message_context
annotations: none low

Get recent messages around a specific message ID within its chat (context accuracy depends on fetch limit).

limit number message_id string
get_last_interaction
annotations: none low

Get the most recent event involving a specific contact or group JID. IMPORTANT: this returns the newest event of ANY type - including call logs, media, and system notifications, which have an empty

jid string
send_message
annotations: none low

Send a WhatsApp text message to a person or group.

message string recipient_jid string
search_contacts
annotations: none low

Search WhatsApp contacts by name or phone number.

query string
get_contact_by_id
annotations: none low

Get contact details by JID.

jid string
send_media
annotations: none low

Send media (image, video, document, audio) via WhatsApp.

caption string filename string media_url string mime_type string media_path string media_content string recipient_jid string as_audio_message boolean include_full_data boolean
download_media
annotations: none low

Download media from a WhatsApp message and return its content.

message_id string include_full_data boolean

Permissions 4

network medium
Server uses network capabilities via: fetch()
filesystem low
Server uses filesystem capabilities via: fs sync ops
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 44

low
Tool 'list_chats' has no annotations annotation_checker · 100%
low
Tool 'get_chat_by_id' has no annotations annotation_checker · 100%
low
Tool 'get_direct_chat_by_contact_number' has no annotations annotation_checker · 100%
low
Tool 'get_qr_code' has no annotations annotation_checker · 100%
low
Tool 'request_pairing_code' has no annotations annotation_checker · 100%
low
Tool 'check_auth_status' has no annotations annotation_checker · 100%
low
Tool 'logout' has no annotations annotation_checker · 100%
low
Tool 'list_messages' has no annotations annotation_checker · 100%
low
Tool 'get_message_by_id' has no annotations annotation_checker · 100%
low
Tool 'get_message_context' has no annotations annotation_checker · 100%
low
Tool 'get_last_interaction' has no annotations annotation_checker · 100%
low
Tool 'send_message' has no annotations annotation_checker · 100%
low
Tool 'search_contacts' has no annotations annotation_checker · 100%
low
Tool 'get_contact_by_id' has no annotations annotation_checker · 100%
low
Tool 'send_media' has no annotations annotation_checker · 100%
low
Tool 'download_media' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Buffer.from base64 in mario-andreschak-mcp-whatsapp-web-b05b278/src/tools/media.ts:91 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: list_chats manifest_parser · 70%
info
Tool: get_chat_by_id manifest_parser · 70%
info
Tool: get_direct_chat_by_contact_number manifest_parser · 70%
info
Tool: get_qr_code manifest_parser · 70%
info
Tool: request_pairing_code manifest_parser · 70%
info
Tool: check_auth_status manifest_parser · 70%
info
Tool: logout manifest_parser · 70%
info
Tool: list_messages manifest_parser · 70%
info
Tool: get_message_by_id manifest_parser · 70%
info
Tool: get_message_context manifest_parser · 70%
info
Tool: get_last_interaction manifest_parser · 70%
info
Tool: send_message manifest_parser · 70%
info
Tool: search_contacts manifest_parser · 70%
info
Tool: get_contact_by_id manifest_parser · 70%
info
Tool: send_media manifest_parser · 70%
info
Tool: download_media manifest_parser · 70%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (17) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 70%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 486 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%