wa_forward_message

What wa_forward_message does on WA MCP

AI agents use wa_forward_message to create or update resources in WA MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your WA MCP environment.

Why wa_forward_message is rated Medium

Forwarding a message is a write operation that creates new data (a message copy) in another chat. While it doesn't execute code or delete data irreversibly, it does modify chat state and could be misused to send unwanted messages, spam, or sensitive information to unintended recipients. Severity is medium because the blast radius is limited to message creation—serious but not financial or destructive.

From the tool's definition Tool description states 'Forward an existing message to another chat' — this creates a new copy of a message in a different chat, modifying the state of the destination chat by adding content. The action is reversible (the forwarded message can be deleted).

The rule that runs wa_forward_message safely

PolicyLayer is an MCP gateway: it sits between your AI agents and WA MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For wa_forward_message, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "wa_forward_message": {
      "limits": [
        {
          "counter": "wa_forward_message_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about wa_forward_message