WhatsApp MCP

What it does

• Read-only by construction: any MCP client can search and read your WhatsApp history; nothing can be sent
• Hosted free beta at whatsapp.finereli.com — Google sign-in, QR link like WhatsApp Web, add the /mcp endpoint to your agent
• Self-host on Cloudflare Workers: KV for sign-in tokens, an OWNER_PASSWORD that locks your messages, deploy with npm run deploy
• Encrypted at rest with a per-account data key derived from a secret only the login service holds — the README states the honest limit that its operator could derive every key
• Sync on read: every read tool tops up from WhatsApp when the stored copy is over ten minutes old; no background pull, since the key only exists while someone is signed in

When to use it

People who want their agent to answer questions from their own chats — what did I promise someone, when did we agree on X, find that address someone sent — without granting any send capability or pasting chats into prompts.

Getting started

# hosted (free beta): add https://whatsapp.finereli.com/mcp to your MCP client, then scan the QR with your phone

# or self-host (Cloudflare Workers; Workers Paid plan needed for large history imports, ~$5/mo; Node 20+):
git clone https://github.com/finereli/whatsapp-mcp && cd whatsapp-mcp
npm install
npx wrangler kv namespace create OAUTH_KV      # paste the id into wrangler.jsonc
npx wrangler secret put OWNER_PASSWORD         # 12+ chars; this is what locks your messages
npm run deploy

# then open your workers.dev URL: sign in with the password, scan the QR (Settings, Linked Devices),
# and point your MCP client at https://your-url/mcp

Things to know

Read-only, but chat history is sensitive: on the hosted beta the operator runs the login service and says plainly they could derive your key — run your own copy if that is not acceptable (the README's own framing). Large history imports need the Workers Paid plan; on the free plan the first import is fragile by the author's own account. An account unused for weeks may have lost messages WhatsApp was holding for the linked device — relink and resync. 404 stars as of writing (2026-11-06). MIT.