WhatsApp

Overview

From the repository's own README, as read at the audited commit.

# WhatsApp MCP ServerThis is a Model Context Protocol (MCP) server for WhatsApp.With this you can search and read your personal Whatsapp messages (including images, videos, documents, and audio messages), search your contacts and send messages to either individuals or groups. You can also send media files including images, videos, documents, and audio messages.It connects to your **personal WhatsApp account** directly via the Whatsapp web multidevice API (using the [whatsmeow](https://github.com/tulir/whatsmeow) library). All your messages are stored locally in a SQLite database and only sent to an LLM (such as Claude) when the agent accesses them through tools (which you control).Here's an example of what you can do when it's connected to Claude.![WhatsApp MCP](./example-use.png)> To get updates on this and other projects I work on [enter your email here](https://docs.google.com/forms/d/1rTF9wMBTN0vPfzWuQa2BjfGKdKIpTbyeKxhPMcEzgyI/preview)> *Caution:* as with many MCP servers, the WhatsApp MCP is subject to [the lethal trifecta](https://simonwillison.net/2025/Jun/16/the-lethal-trifecta/). This means that project injection could lead to private data exfiltration.## Installation### Prerequisites- Go- Python 3.6+- Anthropic Claude Desktop app (or Cursor)- UV (Python package manager), install with `curl -LsSf https://astral.sh/uv/install.sh | sh`- FFmpeg (_optional_) - Only needed for audio messages. If you want to send audio files as playable WhatsApp voice messages, they must be in `.ogg` Opus format. With FFmpeg installed, the MCP server will automatically convert non-Opus audio files. Without FFmpeg, you can still send raw audio files using the `send_file` tool.### Steps1. **Clone this repository**   ```bash   git clone https://github.com/lharries/whatsapp-mcp.git   cd whatsapp-mcp   ```2. **Run the WhatsApp bridge**   Navigate to the whatsapp-bridge directory and run the Go application:   ```bash   cd whatsapp-bridge   go run main.go   ```   The first time you run

Connect

Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control.

claude mcp add whatsapp-mcp-server -- uvx whatsapp-mcp-server

{
  "mcpServers": {
    "whatsapp-mcp-server": {
      "command": "uvx",
      "args": [
        "whatsapp-mcp-server"
      ]
    }
  }
}

Exposed tools (12) 9 read · 3 write · 0 destructive

Details

Source

lharries/whatsapp-mcp

PyPI

whatsapp-mcp-server

Transports

stdio

License

MIT

Stars

6,256 · pushed 426d ago

Trust audit

Nothing in the source contradicts what it says it does. Grade A is reserved for packages that have also passed the behavioural sandbox.

What the source does

Filesystem

none-observed

Network

declared (5 observation(s))

Shell

none-observed

Dependencies

pinned

Secrets in source

none-found

Findings (2)

- UV (Python package manager), install with `curl -LsSf https://astral.sh/uv/install.sh | sh`

example-use.png

Gates applied: no_behavioural_pass.

Audited 2026-09-13 · audit v0.4.0 · source sha b3c2312ef81a · full audit: observations/trust-audit/mcp-server/lharries__whatsapp-3.json · Report an issue or request a re-scan

Audit history

Alternatives

Other servers in the same categories, safer ones first.

Questions