wa_group_add_participants

What wa_group_add_participants does on WA MCP

AI agents use wa_group_add_participants to create or update resources in WA MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your WA MCP environment.

Why wa_group_add_participants is rated Medium

The tool modifies WhatsApp group state by adding participants, which is a write operation that changes data structure and relationships. While reversible (participants can be removed later), misuse by an AI agent could result in unauthorized group modifications, spam, or inclusion of unintended parties in private group communications.

From the tool's definition Tool name 'wa_group_add_participants' and description 'Add members to a WhatsApp group' indicate modification of group membership state. This creates new group relationships and modifies group composition, which is reversible (members can be removed).

The rule that runs wa_group_add_participants safely

PolicyLayer is an MCP gateway: it sits between your AI agents and WA MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For wa_group_add_participants, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "wa_group_add_participants": {
      "limits": [
        {
          "counter": "wa_group_add_participants_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about wa_group_add_participants