wa2agent

io.github.rosroyrosPublished by GitHub account rosroyrosv1.1.1Updated Oct 26, 2026

Read-only WhatsApp MCP for your AI agent: it reads the chats you choose. Try the public demo.

VerifiedStreamable HTTPWeb executableProductivity & Workflow Communication & Collaboration

Server details

Identifier: io.github.rosroyros/wa2agent
Transport: Streamable HTTP
Runtime: Web executable
Trust: Verified
Published: Oct 22, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified the GitHub account rosroyros for this listing. That does not show the account is the product's maker.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.rosroyros%2Fwa2agent.svg)](https://sourceweft.com/mcp/io.github.rosroyros%2Fwa2agent?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Hosted, read-only WhatsApp MCP server that lets an AI agent read the chats you choose and turn them into tasks, events and briefs.

What you can do: Read selected WhatsApp chats: single groups and DMs, all groups, all DMs, or everything you share from a vault.
Turn group conversations into events, tasks, follow-ups and a daily brief.
Optionally deliver new messages by email to an inbox the agent already reads.
Connect from Claude, Claude Code, Codex or any MCP client using the vault's MCP address.
Try a public demo with fictional chats and synthetic data.
When to use it: Useful when you want an agent to follow school, family or work WhatsApp groups without running a bridge on your own machine, and you only need reading, not sending. It suits agents that summarize chats, extract action items or produce a daily brief.
Requirements: A remote MCP endpoint at your vault's address; nothing runs locally. An invite-only account with a vault created at the provider's site, WhatsApp linked as a linked device from your phone, and chosen chats shared. A bearer agent access key from the vault page sent in the Authorization header. Network access required.

Before you install

The Authorization bearer key is a secret granting read access to the shared chats; keep it private and revocable. Anyone in a shared chat can write text the agent will read, so prompt injection is possible, though read-only access prevents messaging contacts. New messages pass through the service before encryption, and the service handles chat names and message times; selected text is kept 30 days. It is not an official WhatsApp product, and WhatsApp decides what it allows on linked devices.

Installation

In SourceWeft

Open wa2agent in the dashboard and add it to a workspace.
Connect Authorization token credentials. They are stored privately and never shown on public pages.
Enable the server for the chats that should use its tools.

Web executable via Streamable HTTP. Remote servers run from the web runtime once configured in a workspace.

Other MCP clients

Follow the launch instructions in the repository.

README

wa2agent: read-only WhatsApp MCP for Claude, Codex and other AI agents

wa2agent gives your AI agent read-only access to the WhatsApp chats you choose. It is a hosted WhatsApp MCP server: your agent connects over MCP (or reads new messages by email), and you do not run anything on your own computer.

This repo holds the agent skill that sets it up.

How do I let Claude (or another agent) read my WhatsApp?

Create a vault at https://wa2agent.link and link WhatsApp from your phone, like adding WhatsApp Web.
Choose which chats to share: single groups and DMs, all groups, all DMs, or everything.
Connect your agent: add your vault's MCP address to Claude, Claude Code, Codex or any MCP client, or turn on email delivery to an inbox your agent already reads.

Your agent can then turn school, family and work groups into events, tasks, follow-ups and a daily brief.

How is this different from lharries/whatsapp-mcp and other free servers?

Self-hosted servers such as lharries/whatsapp-mcp are a good choice if you want full control and can keep a computer running, update the bridge and repair it when it breaks. wa2agent runs the connection for you, so your agent can read shared chats while your laptop is closed. It is also read-only by design: your agent cannot send WhatsApp messages through it.

Is it safe?

Read-only. Your agent cannot send messages through wa2agent.
You choose the chats. Change or revoke them anytime.
Encrypted storage. Stored messages are encrypted with a key only your agent holds, so wa2agent can't read them. New messages pass through the service before they are encrypted, and the service handles chat names and message times so it can deliver them.
Short retention. Selected text messages are kept for 30 days. Media files are not downloaded.
Prompt injection. Anyone in a shared chat can write text your agent will read. The skill tells your agent to treat messages as source material, never as instructions, and read-only access means a tricked agent still cannot message your contacts.
WhatsApp account. wa2agent connects as a linked device, the same way WhatsApp Web does. It is not an official WhatsApp product, and WhatsApp decides what it allows on linked devices.

Details: privacy and storage.

Try it without an invite

A public demo with fictional chats: connect any MCP client to https://demo.wa2agent.link/mcp with the public key on wa2agent.link/demo. Read-only, synthetic data only.

Other ways to connect WhatsApp to AI

Comparing options? Awesome WhatsApp MCP lists self-hosted servers, hosted services, the Business API and the free export route, with their risks. It also has a free skill that reads WhatsApp chat exports, no account needed.

Install the skill

With the skills CLI:

Or copy skills/wa2agent-whatsapp/ into your agent's skills folder, for example .claude/skills/ (Claude Code) or .agents/skills/ (Codex).

Then ask your agent: "Connect my WhatsApp with wa2agent so you can read my school and family groups."

Tested with fresh Claude Code and Codex agents: set up a vault, then read a message and an export email in new sessions.

Agent guides

About

wa2agent is invite-only for now; join the waitlist at https://wa2agent.link/login. Questions: [email protected].

Built and operated by Roy Rosenfeld. Built on open-source WhatsApp connection tools, including wacli and whatsmeow.

Source: README.md at commit b9a9d0f

Tools

SourceWeft has not read this server's tools yet.

Version history

v1.1.1LatestOct 26, 2026
v1.0.0Oct 22, 2026

Score

85% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 daysRequired25 pts
Auth declaredRequired10 pts
Tools listedRequired15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts