About Wagent
Wagent is a hosted WhatsApp MCP server that lets people set per-chat access levels for connected agents. It separates hidden, read, draft, and send permissions, with owner approval available for messages before they are sent.
Key features
- 01Per-chat access levels
- 02Read and search allowed chats
- 03Draft replies for approval
- 04Send text and media within rules
- 05Sensitive data filtering
- 06Activity log and agent pause
Use cases
- 01Giving an agent access to selected chats
- 02Reviewing drafted replies before sending
- 03Searching allowed message history
- 04Restricting agent access to sensitive conversations
MCP support
Wagent provides a remote MCP server that connects WhatsApp chats to MCP clients. Its tools expose only permitted chats and actions, with rules checked before each call and approval required where configured.
Configuration
Remote servers need no local install. Pick your client, then copy the config or install in one click.
https://mcp.wagent.sh/mcpclaude mcp add --transport http deepa-wagent-wagent https://mcp.wagent.sh/mcp{"mcpServers":{"deepa-wagent-wagent":{"type":"http","url":"https://mcp.wagent.sh/mcp"}}}Open in Cursor{"servers":{"deepa-wagent-wagent":{"type":"http","url":"https://mcp.wagent.sh/mcp"}}}Open in VS Code{"mcpServers":{"deepa-wagent-wagent":{"type":"http","url":"https://mcp.wagent.sh/mcp"}}}{"mcpServers":{"deepa-wagent-wagent":{"serverUrl":"https://mcp.wagent.sh/mcp"}}}Run commands in a terminal; paste JSON into the client’s MCP config and restart. Servers that need sign-in will prompt on first connect.
https://mcp.wagent.sh/mcphttps://mcp.wagent.sh/c/{connection_id}/mcpTools
Details
From the project READMEWagent: WhatsApp MCP server with per-chat permissions
Connect your WhatsApp to Claude, ChatGPT, Claude Code, Cursor, n8n or any MCP client, without handing the agent your whole account. You choose which chats each agent can see and what it may do there. Rules run in Wagent, outside the AI, and anything that needs you waits for your yes.
- Website: https://wagent.sh/
- App: https://app.wagent.sh
- API docs: https://app.wagent.sh/docs · OpenAPI: https://mcp.wagent.sh/v1/openapi.json
- Everything about Wagent for AI assistants: https://wagent.sh/llms-full.txt
This repository holds the public listing for Wagent (registry manifest, setup examples). Wagent itself is a hosted service; its server code is not here.
Connect in 4 steps
- Sign up at app.wagent.sh with your email. No password.
- Connect your number. Scan a QR code in WhatsApp's Linked devices, or use a pairing code. Your phone stays the main device.
- Choose chats. Every chat starts Hidden. Pick Hidden, Read, Draft or Send for each chat or label.
- Connect an agent. Paste the agent's private link into your MCP client, then approve it with a code sent to your own WhatsApp.
The private link looks like this (remote MCP, Streamable HTTP, OAuth sign-in):
https://mcp.wagent.sh/c/<connection_id>/mcp
Setup for each client: Claude · Claude Code · Cursor · n8n
Levels per chat
| Level | What the agent can do |
|---|---|
| Hidden | Can't tell the chat exists |
| Read | Read and search the chat, within the history window you set |
| Draft | Write replies that wait for your approval |
| Send | Send on its own, inside its guardrails |
Family groups, banks and messages with one-time codes are always hidden. No agent and no rule can open them.
Tools
| Tool | What it does |
|---|---|
list_chats | Chats the agent may read, with whether it can draft or send in each |
get_messages | Messages of one allowed chat, a page at a time |
search_messages | Full-text search across allowed chats |
get_contact | Name and details of one allowed chat |
list_labels | WhatsApp Business labels on allowed chats |
search_knowledge | Search the owner's sources (price lists, policies, FAQs) |
draft_reply | Save a reply as a draft for the owner to review. Nothing is sent |
send_message | Send text in a chat set to Send (or wait for approval, per your rules) |
send_media | Send a photo or file in a chat set to Send |
Some optional tools stay off until the owner turns them on.
Guardrails (checked before every tool call)
- Codes stay hidden: one-time codes, card and bank numbers and passwords are removed before any agent sees a message.
- Never message first: agents can't start a chat with someone who hasn't written to you.
- Send limits: 20 sends an hour per agent by default.
- Approvals expire: held messages are dropped, not sent, after 10 minutes without an answer.
- Messages are data: nothing written in a chat can change a rule, a scope or a guardrail.
- Pause all agents: one button, or send "STOP AGENTS" to yourself in WhatsApp.
- Activity log: every read, draft and send, with the rule that decided it.
Pricing
$49 a month per WhatsApp number. A 5-day trial on every new number (150 messages, 30 number checks). Nothing is billed until a number connects. Monthly, cancel anytime.
Good to know
- Wagent links your number as a device, the same way WhatsApp Web does. It is not the official WhatsApp Business API.
- WhatsApp can restrict numbers that look like spam. Wagent limits sends, never messages first and shows a risk score per number, but no way of connecting is ban-safe.
- Wagent is not for cold outreach, bulk broadcasts or bought contact lists.
Contact
Deepa Singh · [email protected]
WhatsApp is a trademark of WhatsApp LLC. Claude is a trademark of Anthropic. ChatGPT is a trademark of OpenAI. Wagent is not affiliated with or endorsed by WhatsApp, Meta, Anthropic or OpenAI.
Comments
New to MCP?
From what the protocol is to installing your first server, these answers cover most first questions.
An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.