Is Wappmcp safe to use?

Wappmcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.

How do I install Wappmcp?

Wappmcp can be installed by cloning its GitHub repository and following the setup instructions in the README.

What AI clients work with Wappmcp?

Wappmcp is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio transport.

Is Wappmcp actively maintained?

Wappmcp is actively maintained — last commit was 1 day ago. It has 1 GitHub stars.

Wappmcp

wappmcp is an open-source WhatsApp Web CLI and stdio MCP server built on top of whatsapp-web.js, commander, and @modelcontextprotocol/sdk.

ActiveNot tested

Other

★ 1GitHub

31DNo CVEsactiveMIT

Quick Install

{
  "mcpServers": {
    "wappmcp": {
      "command": "<see-readme>",
      "args": []
    }
  }
}

Setup guide

No install config available. Check the server's README for setup instructions.

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/wappmcp)](https://mcppedia.org/s/wappmcp)

Should you use this server?

wappmcp is an open-source WhatsApp Web CLI and stdio MCP server built on top of whatsapp-web.js, commander, and @modelcontextprotocol/sdk.

✓

Is it safe?

No package registry to scan.

No authentication — any process on your machine can connect.

MIT. View license →

✓

Is it maintained?

Last commit 1 days ago. 1 stars.

Will it work with my client?

Transport: stdio. Works with Claude Desktop, Cursor, Claude Code, and most MCP clients.

Loading README…

Test This Server

No automated test available for this server. Check the GitHub README for setup instructions.

Help improve this page

This server is missing a description. Tools and install config are also missing.If you've used it, help the community.

Add information

Score Breakdown

MCPpedia Score

Click each category to see evidence

31D

Last scored 14h ago

How we score →

Security

5/30

No known vulnerabilities.

○

Known CVEs — No package registry to scan

○

Tool safety — No tools to analyze

○

Tool poisoning — No tools to analyze

○

Injection vectors — No tools to analyze

○

Tool stability — First scan — baseline recorded

○

Dependency health — No package to analyze

✓

License — License: MIT

○

Authentication — No authentication required

○

Repository — active repo

CVEs checked daily via OSV.dev. Score algorithm is open source.

Reviews

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is Wappmcp safe to use?: Wappmcp has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under MIT.
How do I install Wappmcp?: Wappmcp can be installed by cloning its GitHub repository and following the setup instructions in the README.
What AI clients work with Wappmcp?: Wappmcp is compatible with Claude Desktop, Cursor, Claude Code, and most MCP clients that support stdio transport. It uses stdio transport.
Is Wappmcp actively maintained?: Wappmcp is actively maintained — last commit was 1 day ago. It has 1 GitHub stars.

Similar servers

View all →

Memory MCP Server

OfficialNo CVEs98A

Persistent memory using a knowledge graph

5 toolsstdio84.0k81.6k/wk3d ago

Context Mode

No CVEs95A

Privacy-first. MCP is the protocol for tool access. We're the virtualization layer for context.

6 toolsremote7.4k10.0k/wk3d ago

Idea Reality MCP Server

No CVEs95A

Pre-build reality check. Scans GitHub, HN, npm, PyPI, Product Hunt — returns 0-100 signal.

1 toolsremote60643.6k/wk3d ago

Hash-verified file editing MCP server with token efficiency hook. 11 tools for AI coding agents.

No CVEs95A

Hash-verified file editing MCP server with token efficiency hook. 11 tools for AI coding agents.

5 toolsremote405698.1k/wk1d ago

MCP Security Weekly

Get CVE alerts and security updates for Wappmcp and similar servers.

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

wappmcp

wappmcp is an open-source WhatsApp Web CLI and stdio MCP server built on top of whatsapp-web.js, commander, and @modelcontextprotocol/sdk.

It lets MCP-compatible clients read WhatsApp data, send and manage messages, and optionally subscribe to incoming WhatsApp events through an MCP notification channel.

Highlights

Exposes WhatsApp as an MCP server over stdio.
Supports multiple local profiles.
Provides read tools for chats, contacts, messages, status, and account details.
Includes mutating tools for sending, replying, reacting, editing, deleting, forwarding, and typing.
Can emit incoming message events over an optional MCP notification channel.
Stores local app data under ~/.wappmcp/.

Requirements

Node.js 24+
A local Chrome or Chromium installation that puppeteer can launch

If browser auto-detection does not work in your environment, set either WAPPMCP_BROWSER_PATH or PUPPETEER_EXECUTABLE_PATH.

Installation

Use it without installing globally:

npx wappmcp profiles

Or with Bun:

bunx wappmcp profiles

If you prefer a global install:

npm install -g wappmcp

For local development:

npm install
npm run build
npm run dev -- profiles

Quick Start

Connect a profile and scan the QR code:

npx wappmcp connect --profile personal

Start the MCP server for that profile:

npx wappmcp mcp --profile personal

If your MCP host supports notifications and you want incoming WhatsApp events, provide a channel name:

npx wappmcp mcp --profile personal --channel claude/channel

The server uses stdio, so it is meant to be launched by an MCP client or wrapper rather than browsed directly in a terminal.

CLI Usage

Connect

npx wappmcp connect --profile sales
bunx wappmcp connect --profile sales

Starts WhatsApp for the profile, prints a QR code when needed, waits for the account to become ready, then exits.

MCP Server

npx wappmcp mcp --profile sales
bunx wappmcp mcp --profile sales

Starts the stdio MCP server for a connected profile.

Optional channel support:

npx wappmcp mcp --profile sales --channel claude/channel

Disconnect

npx wappmcp disconnect --profile sales
bunx wappmcp disconnect --profile sales

Starts the client, logs out if an active session exists, closes the client, deletes the stored local profile data, and exits.

List Profiles

npx wappmcp profiles
bunx wappmcp profiles

Lists locally stored profiles.

MCP Tools

The server currently exposes these tools:

whatsapp_get_me
whatsapp_get_status
whatsapp_list_chats
whatsapp_get_chat
whatsapp_get_chat_participants
whatsapp_get_chat_messages
whatsapp_search_messages
whatsapp_get_message
whatsapp_list_contacts
whatsapp_get_contact
whatsapp_search_contacts
whatsapp_get_contact_lid
whatsapp_lookup_number
whatsapp_send_message
whatsapp_send_media_from_base64
whatsapp_send_media_from_path
whatsapp_reply_to_message
whatsapp_react_to_message
whatsapp_edit_message
whatsapp_delete_message
whatsapp_forward_message
whatsapp_send_typing

Push Channel

When started with --channel <name>, the server:

advertises the experimental MCP capability <name>
emits notifications/<name> for incoming WhatsApp message events

The event payload includes:

source
self
message
text

If the incoming message or its quoted parent contains media, attachments are downloaded and included in the emitted event p

... View full README on GitHub