// SCAN REPORT

WhatsApp MCP Stream

29 tools. 5 can modify or destroy data without limits.

1 destructive tool with no built-in limits. Policy required.

Last updated: 29 Jun 2026

5 can modify or destroy data

24 read-only

29 tools total

Community server · catalogue entry verified 29/06/2026

How to control WhatsApp MCP Stream ↓

TOOL MAP

What WhatsApp MCP Stream exposes to your agents

Read (24) Write / Execute (4) Destructive / Financial (1)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous WhatsApp MCP Stream tools

Destructive · High logout Logout destroys session state that cannot be automatically recovered. Execute · High force_resync This tool triggers an external operation that clears application state and forces a reconnection to WhatsApp. Write · High send_media This tool creates and sends new messages with media attachments to WhatsApp contacts or groups. Write · High send_message Sending a message is a write operation that creates new data (messages) and modifies chat state reversibly.

5 of WhatsApp MCP Stream's 29 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control WhatsApp MCP Stream

PolicyLayer is an MCP gateway — it sits between your AI agents and WhatsApp MCP Stream, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "logout": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "send_media": {
    "limits": [
      {
        "counter": "send_media_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "analyze_group_overlaps": {
    "limits": [
      {
        "counter": "analyze_group_overlaps_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register WhatsApp MCP Stream — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON WHATSAPP MCP STREAM →

Instant setup, no code required.

FULL CATALOGUE

All 29 WhatsApp MCP Stream tools

DESTRUCTIVE 1 tools

Destructive logout Logout from WhatsApp and clear the current session

EXECUTE 1 tools

Execute force_resync Force a full WhatsApp resync (clears app state and reconnects).

WRITE 3 tools

Write send_media Send media (image, video, document, audio) via WhatsApp. Write send_message Send a WhatsApp text message to a person or group. Write stage_media Save a file to the server

READ 24 tools

Read analyze_group_overlaps Find members that appear across multiple groups and return overlap details. Read check_auth_status Check if the WhatsApp client is authenticated and ready Read download_media Download media from a WhatsApp message and return its content. Read find_members_not_in_contacts Find group members that are not in your contacts. Read find_members_without_direct_chat Find group members that do not have a direct chat with you. Read get_chat_by_contact Resolve a contact by name or phone number and return the chat metadata. Read get_chat_by_id Get WhatsApp chat metadata by JID. Read get_contact_by_id Get contact details by JID. Read get_direct_chat_by_contact_number Get direct WhatsApp chat JID by contact phone number (less reliable, use get_chat_by_id if JID is known). Read get_group_info Get group metadata and participants by group JID. Read get_last_interaction Get the most recent message involving a specific contact or group JID. Read get_message_by_id Get a specific WhatsApp message by its ID. Read get_message_context Get recent messages around a specific message ID within its chat (context accuracy depends on fetch limit). Read get_profile_pic Get profile picture URL for a contact or group JID. Read get_qr_code Get the latest WhatsApp QR code as an image for authentication Read list_chats Get WhatsApp chats, optionally filtered and sorted. Read list_groups List group chats only. Read list_messages Get WhatsApp messages from a specific chat. Read list_system_chats List system chats (status/protocol events). Read ping ping Read resolve_contact Resolve a contact by name or phone number (returns best matches). Read run_group_audit Run a combined group-membership audit (overlaps, no direct chat, not in contacts). Read search_contacts Search WhatsApp contacts by name or phone number. Read search_messages Search messages by text, optionally within a specific chat.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about WhatsApp MCP Stream

Can an AI agent delete data through the WhatsApp MCP Stream MCP server? +

Yes. The WhatsApp MCP Stream server exposes 1 destructive tools including logout. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through WhatsApp MCP Stream? +

The WhatsApp MCP Stream server has 3 write tools including send_media, send_message, stage_media. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach WhatsApp MCP Stream.

How many tools does the WhatsApp MCP Stream MCP server expose? +

29 tools across 4 categories: Destructive, Execute, Read, Write. 24 are read-only. 5 can modify, create, or delete data.

How do I enforce a policy on WhatsApp MCP Stream? +

Register the WhatsApp MCP Stream MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every WhatsApp MCP Stream tool call.

Deterministic rules across all 29 WhatsApp MCP Stream tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON WHATSAPP MCP STREAM →

Instant setup, no code required.

29 WhatsApp MCP Stream tools catalogued and risk-classified — across an index of 43,000+ MCP servers.