// SCAN REPORT

WAHA MCP Server

52 tools. 35 can modify or destroy data without limits.

6 destructive tools with no built-in limits. Policy required.

Last updated: 12 Jun 2026

35 can modify or destroy data

17 read-only

52 tools total

Community server · catalogue entry verified 12/06/2026

How to control WAHA MCP Server ↓

TOOL MAP

What WAHA MCP Server exposes to your agents

Read (17) Write / Execute (29) Destructive / Financial (6)

Running more than one server? Check your whole stack →

MOST DANGEROUS TOOLS

Critical Risk

The most dangerous WAHA MCP Server tools

Destructive · High waha_clear_chat_messages This tool permanently deletes all messages from a chat without recovery option, making it irreversible. Destructive · High waha_remove_group_participants Removing group participants is a destructive, non-reversible operation. Destructive · High waha_delete_chat Deleting a chat irreversibly removes an entire conversation thread and its history. Destructive · High waha_delete_group_picture Deleting a group picture is an irreversible destructive action that cannot be undone without re-uploading.

35 of WAHA MCP Server's 52 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

POLICY

How to control WAHA MCP Server

PolicyLayer is an MCP gateway — it sits between your AI agents and WAHA MCP Server, and nothing reaches the server without passing your rules. These are the rules we recommend:

Deny destructive operations

{
  "waha_clear_chat_messages": {
    "deny_if": [
      {
        "conditions": [],
        "on_deny": "Blocked by default. Requires approval."
      }
    ]
  }
}

Destructive tools should never be available to autonomous agents without human approval.

Rate limit write operations

{
  "waha_demote_group_admin": {
    "limits": [
      {
        "counter": "waha_demote_group_admin_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations

{
  "waha_check_contact_exists": {
    "limits": [
      {
        "counter": "waha_check_contact_exists_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

Create a free account and register WAHA MCP Server — nothing to install.
Add these rules — paste them, or build them visually. Tune the limits to your setup.
Point your MCP client (Claude, Cursor, anything) at your gateway URL.

ENFORCE POLICY ON WAHA →

Free to start. No card required.

FULL CATALOGUE

All 52 WAHA MCP Server tools

DESTRUCTIVE 6 tools

Destructive waha_clear_chat_messages Clear all messages from a chat. WARNING: This is a destructive operation that cannot be undone. Destructive waha_delete_chat Delete a chat completely. WARNING: This is a destructive operation that cannot be undone. Destructive waha_delete_group_picture Remove group profile picture. Destructive waha_delete_message Delete a specific message from a chat. This is a destructive operation and cannot be undone. Destructive waha_remove_group_participants Remove member(s) from a group. Requires admin privileges. Destructive waha_leave_group Leave a group.

EXECUTE 1 tools

Execute waha_revoke_group_invite_code Revoke current invite link and generate a new one. Requires admin privileges.

WRITE 28 tools

Write waha_demote_group_admin Remove admin privileges from participant(s). Requires admin privileges. Write waha_react_to_message Add an emoji reaction to a message. To remove a reaction, send an empty string. Write waha_add_group_participants Add member(s) to a group. Requires admin privileges. Write waha_archive_chat Archive a chat. Archived chats are hidden from the main chat list. Write waha_block_contact Block a contact. Write waha_create_group Create a new WhatsApp group. Write waha_edit_message Edit a sent message in a chat. Only works for messages sent by the bot. Write waha_join_group Join a group using invite code/link. Write waha_mark_chat_read Mark messages in a chat as read. Can specify number of recent messages or time range in days. Write waha_mark_chat_unread Mark a chat as unread. This adds an unread indicator to the chat. Write waha_pin_message Pin a message in a chat. Pinned messages appear at the top of the chat. Write waha_promote_group_admin Promote participant(s) to group admin. Requires admin privileges. Write waha_send_audio Send audio/voice messages to a WhatsApp chat. Supports URL or base64 data. Write waha_send_contact Send contact card(s) to a WhatsApp chat using vCard format. Write waha_send_location Send location coordinates to a WhatsApp chat. Write waha_send_media Send media files (images, videos, or documents) to a WhatsApp chat. Supports URL or base64 data. Write waha_send_message Send a text message to a WhatsApp chat. Returns message ID and delivery timestamp. Write waha_set_group_info_admin_only Toggle whether only admins can edit group info. Requires admin privileges. Write waha_set_group_messages_admin_only Toggle whether only admins can send messages. Requires admin privileges. Write waha_set_group_picture Set or update group profile picture. Write waha_set_presence Set your own presence status (online, offline, typing, recording, or paused). Write waha_star_message Star or unstar a message. Write waha_subscribe_presence Subscribe to presence updates for a chat. Write waha_unarchive_chat Unarchive a chat. Moves the chat back to the main chat list. Write waha_unblock_contact Unblock a contact. Write waha_unpin_message Unpin a message in a chat. Write waha_update_group_description Update group description. Write waha_update_group_subject Change group name/subject.

READ 17 tools

Read waha_check_contact_exists Check if phone number is registered on WhatsApp. Read waha_get_all_contacts List all contacts with pagination. Read waha_get_all_presence Get all subscribed presence information. Read waha_get_chat_picture Get the profile picture URL for a chat. Uses 24-hour cache by default. Read waha_get_chats Get overview of recent WhatsApp chats. Returns chat ID, name, last message preview, and unread count. Default Read waha_get_contact Get contact information by ID. Read waha_get_contact_about Get contact Read waha_get_contact_profile_picture Get contact Read waha_get_group_info Get detailed information about a specific group. Read waha_get_group_invite_code Get group invite link. Read waha_get_group_join_info Get group information from invite link without joining. Read waha_get_group_participants List all members in a group. Read waha_get_group_picture Get group profile picture URL. Read waha_get_groups List all groups with filtering and pagination options. Read waha_get_groups_count Get total number of groups. Read waha_get_messages Get messages from a specific WhatsApp chat. Returns message content, sender, timestamp, and status. Default li Read waha_get_presence Get online/offline/typing status for a chat. Auto-subscribes if not already subscribed.

EXPLORE

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

FAQ

Questions about WAHA MCP Server

Can an AI agent delete data through the WAHA MCP Server MCP server? +

Yes. The WAHA MCP Server server exposes 6 destructive tools including waha_clear_chat_messages, waha_delete_chat, waha_delete_group_picture. These permanently remove resources with no undo. PolicyLayer blocks destructive tools by default so they never reach the upstream server.

How do I prevent bulk modifications through WAHA MCP Server? +

The WAHA MCP Server server has 28 write tools including waha_demote_group_admin, waha_react_to_message, waha_add_group_participants. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach WAHA MCP Server.

How many tools does the WAHA MCP Server MCP server expose? +

52 tools across 3 categories: Destructive, Read, Write. 17 are read-only. 35 can modify, create, or delete data.

How do I enforce a policy on WAHA MCP Server? +

Register the WAHA MCP Server MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every WAHA MCP Server tool call.

Deterministic rules across all 52 WAHA MCP Server tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

ENFORCE POLICY ON WAHA →

Free to start. No card required.

52 WAHA MCP Server tools catalogued and risk-classified — across an index of 43,000+ MCP servers.