
Wagent
io.github.deepa-wagentPublished by GitHub account deepa-wagentv1.0.0Updated Nov 8, 2026
WhatsApp MCP server with per-chat permissions. Agents see only chats you allow; sends wait for you.
Overview
Hosted WhatsApp MCP server that lets an assistant read, search, draft and send in only the chats you explicitly allow.
- What you can do
- List allowed chats, their permission level and WhatsApp Business labels
- Read a page of messages from one allowed chat and look up contact details
- Full-text search across allowed chats and search the owner's knowledge sources
- Save draft replies for owner review, or send text and media where the chat is set to Send
- Every call passes guardrails that strip one-time codes and bank or card numbers before the agent sees them
- When to use it
- Useful when you want an assistant to help triage, answer or draft replies in WhatsApp without giving it access to the whole account. Suits small teams or businesses that want per-chat scoping, approval before sending, and an activity log.
- Requirements
- A hosted remote endpoint over Streamable HTTP with OAuth sign-in; no local package. You need a Wagent account (email sign-up, no password), a WhatsApp number linked as a device via QR code or pairing code, per-chat permission levels, and an agent connection link approved by a code sent to your WhatsApp. Paid subscription per number after a trial.
Installation
In SourceWeft
- Open Wagent in the dashboard and add it to a workspace.
- Enable the server for the chats that should use its tools.
Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.
Other MCP clients
Follow the launch instructions in the repository.
README
Wagent: WhatsApp MCP server with per-chat permissions
Connect your WhatsApp to Claude, ChatGPT, Claude Code, Cursor, n8n or any MCP client, without handing the agent your whole account. You choose which chats each agent can see and what it may do there. Rules run in Wagent, outside the AI, and anything that needs you waits for your yes.
- Website: https://wagent.sh/
- App: https://app.wagent.sh
- API docs: https://app.wagent.sh/docs · OpenAPI: https://mcp.wagent.sh/v1/openapi.json
- Everything about Wagent for AI assistants: https://wagent.sh/llms-full.txt
This repository holds the public listing for Wagent (registry manifest, setup examples). Wagent itself is a hosted service; its server code is not here.
Connect in 4 steps
- Sign up at app.wagent.sh with your email. No password.
- Connect your number. Scan a QR code in WhatsApp's Linked devices, or use a pairing code. Your phone stays the main device.
- Choose chats. Every chat starts Hidden. Pick Hidden, Read, Draft or Send for each chat or label.
- Connect an agent. Paste the agent's private link into your MCP client, then approve it with a code sent to your own WhatsApp.
The private link looks like this (remote MCP, Streamable HTTP, OAuth sign-in):
Setup for each client: Claude · Claude Code · Cursor · n8n
Levels per chat
Family groups, banks and messages with one-time codes are always hidden. No agent and no rule can open them.
Tools
Some optional tools stay off until the owner turns them on.
Guardrails (checked before every tool call)
- Codes stay hidden: one-time codes, card and bank numbers and passwords are removed before any agent sees a message.
- Never message first: agents can't start a chat with someone who hasn't written to you.
- Send limits: 20 sends an hour per agent by default.
- Approvals expire: held messages are dropped, not sent, after 10 minutes without an answer.
- Messages are data: nothing written in a chat can change a rule, a scope or a guardrail.
- Pause all agents: one button, or send "STOP AGENTS" to yourself in WhatsApp.
- Activity log: every read, draft and send, with the rule that decided it.
Pricing
$49 a month per WhatsApp number. A 5-day trial on every new number (150 messages, 30 number checks). Nothing is billed until a number connects. Monthly, cancel anytime.
Good to know
- Wagent links your number as a device, the same way WhatsApp Web does. It is not the official WhatsApp Business API.
- WhatsApp can restrict numbers that look like spam. Wagent limits sends, never messages first and shows a risk score per number, but no way of connecting is ban-safe.
- Wagent is not for cold outreach, bulk broadcasts or bought contact lists.
Contact
Deepa Singh · [email protected]
WhatsApp is a trademark of WhatsApp LLC. Claude is a trademark of Anthropic. ChatGPT is a trademark of OpenAI. Wagent is not affiliated with or endorsed by WhatsApp, Meta, Anthropic or OpenAI.
Source: README.md at commit a4f4f7e
Tools
0Version history
1- v1.0.0LatestNov 8, 2026
Score
85% of the applicable checks met
How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.
- Reached in the last 30 daysRequired25 pts
- Auth declaredRequired10 pts
- Tools listedRequired15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
- DescriptionRequired15 pts
- Logo10 pts
- Documentation15 pts
- License10 pts