WhatsApp Web Server

5 tools. 5 can modify or destroy data without limits.

5 write tools that can modify data. Rate limits recommended.

Last updated:

5 can modify or destroy data
0 read-only
5 tools total
Read (0) Write / Execute (5) Destructive / Financial (0)

Write operations (whatsapp_send_contact, whatsapp_send_image, whatsapp_send_link) modify state. Without rate limits, an agent can make hundreds of changes in seconds — faster than any human can review or revert.

One command. Full control.

Intercept sits between your agent and WhatsApp Web Server. Every tool call checked against your policy before it executes — so your agent can do its job without breaking things.

npx -y @policylayer/intercept scan -- npx -y @samihalawa/whatsapp-go-mcp
Scans every tool. Generates a policy. Starts enforcing.
Works with Claude Code · Cursor · Claude Desktop · Windsurf · any MCP client
Rate limit write operations
whatsapp_send_contact:
  rules:
    - rate_limit: 30/hour

Prevents bulk unintended modifications from agents caught in loops.

How do I prevent bulk modifications through WhatsApp Web Server? +

The WhatsApp Web Server server has 5 write tools including whatsapp_send_contact, whatsapp_send_image, whatsapp_send_link. Set rate limits in your policy file -- for example, rate_limit: 10/hour prevents an agent from making more than 10 modifications per hour. Intercept enforces this at the transport layer.

How many tools does the WhatsApp Web Server MCP server expose? +

5 tools across 1 categories: Write. 0 are read-only. 5 can modify, create, or delete data.

How do I add Intercept to my WhatsApp Web Server setup? +

One line change. Instead of running the WhatsApp Web Server server directly, prefix it with Intercept: intercept -c samihalawa-whatsapp-go-mcp.yaml -- npx -y @samihalawa/whatsapp-go-mcp. Download a pre-built policy from policylayer.com/policies/samihalawa-whatsapp-go-mcp and adjust the limits to match your use case.

policylayer/intercept

Control every MCP tool call
your agent makes.

Set budgets, approvals, and hard limits across MCP servers.

npx -y @policylayer/intercept init
Protect your agent in 30 seconds. Scans your MCP config and generates enforcement policies for every server.
// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.