74
/ 100
24 days ago
glama

wa-bridge

A self-hosted WhatsApp bridge that exposes a stdio MCP server with ~20 tools for reading conversations, sending messages, managing groups, contacts, and aliases, enabling AI agents to operate WhatsApp directly.

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings
🚨
Secret credentials may flow to a network call
1 flow detected: API_TOKEN. We can’t prove the destination matches the brand the credential belongs to.
🔐
You'll be asked for 10 credentials: API_TOKEN, AUTOREPLY_LLM_API_KEY, AUTOREPLY_NOTIFY_WEBHOOK_TOKEN, AUTOREPLY_SLACK_BOT_TOKEN, AUTOREPLY_TELEGRAM_BOT_TOKEN, AUTOREPLY_TOKEN, AUTOREPLY_WA_API_TOKEN, OPENAI_API_KEY, WEBHOOK_TOKEN, WHATSAPP_BRIDGE_TOKEN
These are read from process.env at runtime. Make sure you trust where they’ll be sent.
// required environment variables
This server reads these from process.env. You'll be asked to provide them before it can run.
🔐 secretAPI_TOKENgenerates and writes it to .env
configAUTOREPLY_ALLOW_GROUP_AUTOGroups group chats are never auto-answered unless =1, and even then only when the operator is explicitly @-mentioned
configAUTOREPLY_AUTO_SEND_COOLDOWN_MSCooldown an auto-send already happened in this chat within (default 10 min)
configAUTOREPLY_CLAUDE_BIN
configAUTOREPLY_DATA_DIR
configAUTOREPLY_DEFAULT_SESSION
configAUTOREPLY_HOST
🔐 secretAUTOREPLY_LLM_API_KEYanthropic Anthropic API (official SDK) or ANTHROPIC_API_KEY
configAUTOREPLY_LLM_BASE_URLopenai any OpenAI-compatible endpoint - OpenAI, OpenRouter, Groq, Mistral, Ollama, LM Studio + AUTOREPLY_LLM_MODEL
configAUTOREPLY_LLM_MODELopenai any OpenAI-compatible endpoint - OpenAI, OpenRouter, Groq, Mistral, Ollama, LM Studio AUTOREPLY_LLM_BASE_URL +
configAUTOREPLY_LLM_PROVIDERAny of them. in .env picks the backend:
configAUTOREPLY_MIN_CONFIDENCEConfidence confidence <
configAUTOREPLY_MODEL
configAUTOREPLY_NOTIFY_CHANNEL
configAUTOREPLY_NOTIFY_WA_SESSION
configAUTOREPLY_NOTIFY_WA_TO
🔐 secretAUTOREPLY_NOTIFY_WEBHOOK_TOKEN
configAUTOREPLY_NOTIFY_WEBHOOK_URL
configAUTOREPLY_PORT
configAUTOREPLY_SECOND_BRAIN_ROOT
🔐 secretAUTOREPLY_SLACK_BOT_TOKEN
configAUTOREPLY_SLACK_CHANNEL
configAUTOREPLY_SLACK_WEBHOOK_URL
configAUTOREPLY_STYLE_CORPUS_PATH
🔐 secretAUTOREPLY_TELEGRAM_BOT_TOKEN
configAUTOREPLY_TELEGRAM_CHAT_ID
🔐 secretAUTOREPLY_TOKENTOKEN=$(grep '^=' .env cut -d= -f2)
configAUTOREPLY_WA_API_BASE
🔐 secretAUTOREPLY_WA_API_TOKEN
configHOST127.0.0.1 Use 0.0.0.0 only behind a reverse proxy. Set WA_ALLOW_PUBLIC=1 to override the loopback guard.
🔐 secretOPENAI_API_KEY(none) Used by npm run transcribe-backlog to transcribe past audio messages.
configPORT
configWA_ALLOW_PUBLICHOST 127.0.0.1 Use 0.0.0.0 only behind a reverse proxy. Set =1 to override the loopback guard.
configWA_BACKUP_DIR
configWA_BACKUP_KEEP
configWA_CONTACTS_TSV
configWA_DB_PATH
configWA_FORCE_HISTORY_SYNC_ON_RESTORE
configWA_FORCE_REDUMP
configWA_KEEP_CONTACTS_TSV
configWA_TZdetects your system timezone and writes it as to .env (e.g. Europe/Berlin)
configWA_UPDATE_BRANCH
🔐 secretWEBHOOK_TOKENIf is set, it arrives as Authorization: Bearer <token> so the receiver can verify origin. Three attempts, 1s/3s backoff, 5s timeout per attempt. Outbound sends do not fire the webhook.
configWEBHOOK_URLPOST /v1/webhook/test — Pings the configured
configWHATSAPP_BRIDGE_BASE
🔐 secretWHATSAPP_BRIDGE_TOKEN
configWHATSAPP_BRIDGE_URL
// full audit trail
The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.
// improvement guidance — verified publishers only
We have 5 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.
// embed badge in your README
[![M8ven Score](https://m8ven.ai/badge/mcp/obirimensah05-whatsapp-bridge-1sdhxm)](https://m8ven.ai/mcp/obirimensah05-whatsapp-bridge-1sdhxm)
commit: 8b6dda879e4a336c887529b965ec33e27616f01d
code hash: ac1bf3876082637478cca2bfb4c7e328cba725a297f88d681e9e2576612ee5bc
verified: 7/7/2026, 10:04:41 AM
view raw JSON →