Whatsapp Mcp — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Whatsapp Mcp (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Connect your WhatsApp to Claude Code. Read messages, transcribe audio, analyze images — all from your terminal, with full codebase context.
The real unlock isn't just reading messages. It's that Claude Code already knows your project — the architecture, the decisions, the debt. Now it also knows what your client just said on WhatsApp. Ask it to diagnose the bug they described, draft a reply that references actual code, or triage who needs attention most urgently.
# From inside your project directory:
"Read the last messages from Lucas and tell me if the issue he described
is related to the auth refactor we did last week"
"Transcribe the audio João sent and create a GitHub issue with the requirements"
"Look at the screenshot Camila sent — what error is she seeing and where is it thrown?"
"Who's been waiting for a reply the longest?"Audio messages are automatically transcribed when you call get_media. Uses mlx-whisper with the large-v3-turbo model on Apple Silicon. No API key, no data leaving your machine, ~2–5s per message.
"Transcribe the voice note Rodrigo sent this morning"
→ [full transcript returned inline, ready for Claude to act on]Images aren't returned as file paths — they're sent as native MCP visual content blocks, so Claude receives and analyzes them directly.
"What does the screenshot Valentina sent show?"
→ Claude sees the image and describes the UI bug, error message, or whatever is in ittyping, recording, pausedClient support with codebase context
"Read the last 10 messages from [client] and check if what they're
describing matches the bug we logged in the database module"Requirements from voice
"Transcribe the 3 audios Pedro sent today and write a PRD from them"Visual debugging
"Daiana sent a screenshot — look at it and tell me what's broken and
which component would throw that error"Inbox triage
"I have 8 unread chats. Summarize each one in one sentence and tell
me which needs a reply today"Draft replies in your voice
"Reply to Camila — tell her the deploy is done and the image upload
issue she reported is fixed. Keep it casual."Turn WhatsApp into a task source
"Read everything Lucas sent this week and create Notion tasks for
each thing he asked for"git clone https://github.com/emawritz/whatsapp-mcp
cd whatsapp-mcp
npm install./setup.shThis creates a .venv, installs mlx-whisper, and pre-downloads the model (~1.5 GB, one-time). Sets WHISPER_PYTHON in .env automatically.
npm run build
npm startScan the QR code with WhatsApp on your phone → Settings → Linked Devices → Link a Device.
Session is saved in auth_info_baileys/ — you only scan once.
Add to ~/.claude.json:
{
"mcpServers": {
"whatsapp": {
"type": "http",
"url": "http://127.0.0.1:3001/mcp"
}
}
}Running via pm2 means one WhatsApp connection shared across all Claude Code sessions — no conflicts, auto-restarts on crash, starts on boot.
npm install -g pm2
npm run build
pm2 start ecosystem.config.js
pm2 save
pm2 startup # run the printed command with sudoWhy pm2? WhatsApp only allows one active session per linked device. Without pm2, each Claude Code terminal spawns its own process and they conflict (error 440). pm2 keeps one process alive for everyone.
Claude Code ←── MCP/HTTP ───► whatsapp-mcp ◄─── Baileys ───► WhatsApp
│
SQLite (local)
mlx-whisper (local)StreamableHTTPServerTransport on localhost:3001 — stateless, one shared processmlx-whisper with output silenced; transcript returned inline with the messageimage content blocks — Claude receives them visually, not as a path| Tool | What it does |
|---|---|
get_unread_messages | All chats with unread messages |
list_chats | N most recently active chats |
get_chat_messages | Last N messages from a specific chat |
search_messages | Full-text search across all history |
get_contact_info | Contact or group metadata |
load_more_history | Paginate further back in a chat's history |
send_message | Send a text message (with human-like delay) |
reply_to_message | Reply quoting a specific message |
send_image | Send an image file with optional caption |
react_to_message | Add or remove an emoji reaction |
mark_as_read | Mark a chat as read |
set_typing | Set typing / recording / paused presence |
get_media | Download media; auto-transcribes audio, returns images visually |
find_pending_replies | Chats waiting for your reply, newest first |
get_chat_stats | Message volume, media types, active hours, date range |
export_chat | Export full conversation to Markdown or JSON |
sync_recent | Force reconnect to recover messages missed during a gap |
backfill_media_proto | Recover downloadable media from historical connection gaps |
edit_message | Edit the text of a previously sent message |
delete_message | Delete (revoke for everyone) a previously sent message |
get_message_context | Get N messages before and after a specific message for context |
This project uses Baileys, an unofficial WhatsApp Web client. Using unofficial clients may violate WhatsApp's Terms of Service and could result in your account being banned. Use at your own risk. This project is not affiliated with or endorsed by WhatsApp or Meta.
MIT
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.