WAHA MCP Server

Bridges the WhatsApp HTTP API with AI assistants to enable full control over messaging, chat management, and interactive workflows through 63 specialized tools. It allows users to automate WhatsApp tasks and receive real-time AI feedback directly on their mobile devices.

→ dudu1111685/waha-mcp · listed on glama

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Known vulnerabilities in dependencies: 2 critical, 3 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 2 credentials: SONIOX_API_KEY, WAHA_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretSONIOX_API_KEY— export ="your-soniox-key" # Optional — enables voice note transcription

configTELEGRAM_API_HASH— Writes TELEGRAM_API_ID / / TELEGRAM_SESSION into .env:

configTELEGRAM_API_ID— Writes / TELEGRAM_API_HASH / TELEGRAM_SESSION into .env:

configTELEGRAM_SESSION— Writes TELEGRAM_API_ID / TELEGRAM_API_HASH / into .env:

🔐 secretWAHA_API_KEY— export ="your-api-key-here"

configWAHA_DEFAULT_SESSION— export ="default" # Optional — see Session policy below

configWAHA_MCP_FILES_DIR— 🔒 Secure - Environment-based API key management, optional local-file sandbox ()

configWAHA_THROTTLE— export =1 # Optional — enable anti-ban send pacing (off by default)

configWAHA_THROTTLE_DISABLED

configWAHA_TIMEOUT_MS— export ="30000" # Optional — WAHA request timeout

configWAHA_URL— export ="http://localhost:3001" # Optional, defaults to localhost:3001

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 3 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/dudu1111685-waha-mcp-171mvv)](https://m8ven.ai/mcp/dudu1111685-waha-mcp-171mvv)

commit: d0d5148de489d1237e32e7fd1c53eef3eee75e2f

code hash: 2be57ccbe3e7e2a4873f9657dba271b51a569516bc283836e5e536d6ffd32476

verified: 6/12/2026, 11:20:17 AM

view raw JSON →