WhatsApp MCP runs on your own machine — the client starts it, so there is no endpoint to ping. 112 installs a week from pypi. Last commit 2 Nov 2026.
WhatsApp MCP. SQLCipher-encrypted, scrubber-CI-gated, draft-and-confirm sends, voice transcription.
We read the source, 1 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
return subprocess.run(cmd, check=False, stdin=subprocess.DEVNULL, env=env).returncode
Found in continuous integration, deployment or infrastructure files, or in a neighbouring package of the same monorepo. None of this is installed when you add the server: it describes how the project is built and released. We list it because a leaked key in a build pipeline is still a real problem, but it is not something this server does on your machine.
path := filepath.Join(inboxRoot, base)
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add whatsapp-mcp -- uvx adelaidasofia-whatsapp-mcp
{
"mcpServers": {
"whatsapp-mcp": {
"command": "uvx",
"args": [
"adelaidasofia-whatsapp-mcp"
]
}
}
}
[mcp_servers.whatsapp-mcp]
command = "uvx"
args = ["adelaidasofia-whatsapp-mcp"]
{
"mcpServers": {
"whatsapp-mcp": {
"command": "uvx",
"args": [
"adelaidasofia-whatsapp-mcp"
]
}
}
}
{
"servers": {
"whatsapp-mcp": {
"type": "stdio",
"command": "uvx",
"args": [
"adelaidasofia-whatsapp-mcp"
]
}
}
}
Optional settings from the registry entry, left out of the block above:
WHATSAPP_BRIDGE_HOST (Hostname for the Go bridge REST API), WHATSAPP_BRIDGE_PORT (Port for the Go bridge REST API), WHATSAPP_VAULT_CRM_PATH (Absolute path to a vault CRM folder for auto-injection (e.g., Obsidian 'CRM/'). When unset, CRM injection is disabled), WHATSAPP_WHISPER_BACKEND (Voice-note transcription backend. 'local-cpp' (default, private) or 'openai-api' (opt-in)), WHATSAPP_WHISPER_API_KEY (OpenAI API key. Required only when WHATSAPP_WHISPER_BACKEND=openai-api), WHATSAPP_WHISPER_MODEL (whisper.cpp model name. Only used when backend is local-cpp), WHATSAPP_SCRUB_PROMPT_INJECTION (Strip known prompt-injection patterns from incoming messages before the LLM sees them), WHATSAPP_AUDIT_LOG (Log every tool call to audit.log), WHATSAPP_ENCRYPT_DB (Enable SQLCipher DB encryption with the key sourced from macOS Keychain).
Safety-first WhatsApp tools: draft-gated sends, enforced rate limits, append-only audit.
Send WhatsApp, SMS, email or voice to a business with the compliance gate enforced.
Read, search, and send personal WhatsApp messages from any MCP client, behind a send-confirm gate.
Multi-workspace Slack MCP server with draft+confirm safety, vault auto-export, and triple-mode…
Send and receive across email, SMS, WhatsApp, and voice. One API, one contract.
Manage WhatsApp, Telegram and MAX mailings: audiences, drafts, moderation and sending.
Your WhatsApp history in Claude and ChatGPT: search years of chats, voice notes transcribed.
MCP server for Twilio — global SMS, WhatsApp, Voice, Verify, and Lookup across 180+ countries
Answers built from our own checks of this server.