wa_group_handle_request

What wa_group_handle_request does on WA MCP

AI agents use wa_group_handle_request to create or update resources in WA MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your WA MCP environment.

Why wa_group_handle_request is rated Medium

This tool creates or modifies group membership state reversibly. While it affects group composition, the action can be undone (a rejected member can request again, an approved member can be removed). This places it in Write rather than Execute, as it does not run arbitrary code or trigger external side effects beyond membership modification. It is not Destructive because membership changes are reversible.

From the tool's definition Tool description states it 'Approve or reject a pending join request for a WhatsApp group.' This modifies group membership state by accepting or declining a request, which is a reversible action that changes data (group membership list).

The rule that runs wa_group_handle_request safely

PolicyLayer is an MCP gateway: it sits between your AI agents and WA MCP, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For wa_group_handle_request, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "wa_group_handle_request": {
      "limits": [
        {
          "counter": "wa_group_handle_request_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}

Questions about wa_group_handle_request