# wa_send_image

Send an image to a WhatsApp contact or group. Image can be provided as a URL or base64-encoded data. Optional caption.

Agent View of the PolicyLayer registry record for `wa_send_image`. HTML page: https://policylayer.com/tools/delltrak-wamcp/wa-send-image

## Facts

- Tool: `wa_send_image`
- Server: WA MCP (`delltrak/wamcp`) — https://policylayer.com/tools/delltrak-wamcp.md
- Homepage: https://github.com/delltrak/wamcp
- Risk category: Write (Medium risk)
- Registry record: grade F, identity unverified
- Server rate-limited: no
- Parameters: 0
- Recommended policy verdict: Rate-limited

## Example call (MCP tools/call, JSON-RPC 2.0)

```json
{
  "jsonrpc": "2.0",
  "id": 1,
  "method": "tools/call",
  "params": {
    "name": "wa_send_image",
    "arguments": {}
  }
}
```

## Why wa_send_image is rated Medium

This tool modifies state by creating a new message artifact in WhatsApp chats—a reversible action. It does not execute arbitrary code, delete data, or move money. However, it carries high severity because an AI agent misusing it could spam, harass, or deceive recipients at scale (sending malicious, fraudulent, or unwanted images to many contacts/groups), causing reputational and interpersonal harm.

From the tool's own definition: "Tool name 'wa_send_image' and description 'Send an image to a WhatsApp contact or group' indicate the tool creates and transmits new message content (an image with optional caption) to recipients."

## Use case

AI agents use wa_send_image to create or update resources in WA MCP, usually the action step of a workflow, after the agent has gathered context. Every call changes real data in your WA MCP environment.

## Recommended policy (PolicyLayer)

Verdict: **Rate-limited**. Enforced by the PolicyLayer MCP gateway (https://policylayer.com/mcp-gateway) before a call reaches WA MCP:

```json
{
  "version": "1",
  "default": "deny",
  "tools": {
    "wa_send_image": {
      "limits": [
        {
          "counter": "wa_send_image_rate",
          "window": "minute",
          "max": 30,
          "scope": "grant"
        }
      ]
    }
  }
}
```

## Other tools on WA MCP (61)

- `wa_clear_chat` — Destructive — https://policylayer.com/tools/delltrak-wamcp/wa-clear-chat.md
- `wa_delete_chat` — Destructive — https://policylayer.com/tools/delltrak-wamcp/wa-delete-chat.md
- `wa_delete_instance` — Destructive — https://policylayer.com/tools/delltrak-wamcp/wa-delete-instance.md
- `wa_delete_message` — Destructive — https://policylayer.com/tools/delltrak-wamcp/wa-delete-message.md
- `wa_group_remove_participants` — Destructive — https://policylayer.com/tools/delltrak-wamcp/wa-group-remove-participants.md
- `wa_remove_profile_picture` — Destructive — https://policylayer.com/tools/delltrak-wamcp/wa-remove-profile-picture.md
- `wa_connect_instance` — Execute — https://policylayer.com/tools/delltrak-wamcp/wa-connect-instance.md
- `wa_disconnect_instance` — Execute — https://policylayer.com/tools/delltrak-wamcp/wa-disconnect-instance.md
- `wa_group_leave` — Execute — https://policylayer.com/tools/delltrak-wamcp/wa-group-leave.md
- `wa_reject_call` — Execute — https://policylayer.com/tools/delltrak-wamcp/wa-reject-call.md
- `wa_restart_instance` — Execute — https://policylayer.com/tools/delltrak-wamcp/wa-restart-instance.md
- `wa_send_presence` — Execute — https://policylayer.com/tools/delltrak-wamcp/wa-send-presence.md
- `wa_check_number_exists` — Read — https://policylayer.com/tools/delltrak-wamcp/wa-check-number-exists.md
- `wa_get_business_profile` — Read — https://policylayer.com/tools/delltrak-wamcp/wa-get-business-profile.md
- `wa_get_messages` — Read — https://policylayer.com/tools/delltrak-wamcp/wa-get-messages.md
- `wa_get_pairing_code` — Read — https://policylayer.com/tools/delltrak-wamcp/wa-get-pairing-code.md
- `wa_get_qr_code` — Read — https://policylayer.com/tools/delltrak-wamcp/wa-get-qr-code.md
- `wa_group_get_invite_code` — Read — https://policylayer.com/tools/delltrak-wamcp/wa-group-get-invite-code.md
- `wa_search_contact` — Read — https://policylayer.com/tools/delltrak-wamcp/wa-search-contact.md
- `wa_archive_chat` — Write — https://policylayer.com/tools/delltrak-wamcp/wa-archive-chat.md
- `wa_block_contact` — Write — https://policylayer.com/tools/delltrak-wamcp/wa-block-contact.md
- `wa_create_group` — Write — https://policylayer.com/tools/delltrak-wamcp/wa-create-group.md
- `wa_create_instance` — Write — https://policylayer.com/tools/delltrak-wamcp/wa-create-instance.md
- `wa_edit_message` — Write — https://policylayer.com/tools/delltrak-wamcp/wa-edit-message.md
- `wa_forward_message` — Write — https://policylayer.com/tools/delltrak-wamcp/wa-forward-message.md
- `wa_group_add_participants` — Write — https://policylayer.com/tools/delltrak-wamcp/wa-group-add-participants.md
- `wa_group_demote` — Write — https://policylayer.com/tools/delltrak-wamcp/wa-group-demote.md
- `wa_group_handle_request` — Write — https://policylayer.com/tools/delltrak-wamcp/wa-group-handle-request.md
- `wa_group_join` — Write — https://policylayer.com/tools/delltrak-wamcp/wa-group-join.md
- `wa_group_promote` — Write — https://policylayer.com/tools/delltrak-wamcp/wa-group-promote.md
- …and 31 more: https://policylayer.com/tools/delltrak-wamcp.md

## For agents

This record is a snapshot. Live verdicts and the full registry:

- Check every server in your MCP config at once: `npx -y policylayer stack`
- Vet a server before you add it: install the mcp-precheck skill — `npx skills add https://policylayer.com` (skill text: https://policylayer.com/skill.md)
- Query the registry over MCP: endpoint `https://api.policylayer.com/mcp` — tools `check_mcp_server`, `check_mcp_stack`, `check_tool`, `search_registry`, `get_change_events`

---

Source: the PolicyLayer MCP registry — one continuously verified record per MCP server. Full record: https://policylayer.com/registry?q=delltrak-wamcp · API: https://policylayer.com/registry/api · Policy library: https://policylayer.com/policies/delltrak-wamcp