wazap-mcp

MCPcon attestation
v1.3.7io.github.razvangirgizUnknownActualizado hace 2 dnpmGitHub

WhatsApp for your agent: chats, messages, media, contacts and groups behind MCP tools.

Funciona en
ClaudeCursorCopilotGemini

Inferido de los transportes que declara este listado (stdio). Que un cliente no aparezca aquí no significa que se haya descartado: simplemente Forge no puede confirmarlo.

Build con attestation
Una attestation de procedencia verificada vincula este artefacto al repositorio listado. Nadie ha reclamado todavía el listado: esto demuestra dónde se construyó el código, no quién lo respalda.
hace 2 dÚltima actualización
Paquete
Autorio.github.razvangirgiz
LicenciaUnknown
Versión1.3.7
Fuentenpm+mcp-registry
Estado de confianza
A
85/100Fiable
✓Listado en el índice de Forge+10/10
✓Identidad verificada · build con attestation+20/20
—Firma de publicación Ed25519+0/5
→ Se incluye automáticamente cuando el publicador ejecuta `forge publish`
—Verificación de dominio+0/5
→ Publicador: aloja /.well-known/forge.json en la página del paquete con { "publisher": "<github-login>" }
✓npm Trusted Publishing (Sigstore)+5/5
—Coincidencia de maintainer en npm+0/5
→ Publicador: añade el login de GitHub verificado a los maintainers del paquete de npm (npm owner add <login>)
✓Análisis CVE · limpio+30/30
✓Análisis estático · limpio+20/20
Pégalo en Claude Code, Cursor o cualquier asistente de IA para corregir todas las carencias
EstadoIdentidad verificada
PublicadorSin verificar
FirmaSin firmar
Dominio—
Procedencia✓ Verificado con Sigstore · 6c721ca
Dependencias✓ 60 resueltas+ · ninguna vulnerable
Superficie de herramientas38 herramientas · 3 privilegiadas
Análisis de seguridad✓ Limpiov0.23.1 · hace 22 d¿Qué tan bien funciona este análisis?
EvaluacionesNinguna
Indexado26 ago 2026

La verificación confirma la identidad del publicador (la propiedad del repo), no la seguridad del código. El análisis de seguridad cubre los CVE conocidos y los scripts de instalación sospechosos.

Herramientas

38 herramientas · 3 privilegiadas
Extraído estáticamente del paquete publicadov0.23.1 · 22d ago

Leído del código que npm publica realmente, en el momento del análisis. El paquete nunca se ejecutó. Las herramientas registradas dinámicamente en tiempo de ejecución, o escondidas en código empaquetado o minificado, pueden pasarse por alto — así que esto es un mínimo de la superficie de herramientas, no un censo completo.

learnRead this FIRST, before any other WhatsApp tool. Returns the guide to the tools, the id formats, the recommended workflows, the message shape and every error code with what to do about it. Takes no arguments and never touches WhatsApp.

Read this FIRST, before any other WhatsApp tool. Returns the guide to the tools, the id formats, the recommended workflows, the message shape and every error code with what to do about it. Takes no arguments and never touches WhatsApp.

No se publicó ningún esquema de entrada para esta herramienta.

get_statusSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

list_accountsList every configured WhatsApp account: id, name, connection status, masked phone, owner name, and whether that account allows writes. Call this first when more than one account is linked, then pass account_id on the other tools. Takes no arguments besides the optional account_id (ignored for the l…

List every configured WhatsApp account: id, name, connection status, masked phone, owner name, and whether that account allows writes. Call this first when more than one account is linked, then pass account_id on the other tools. Takes no arguments besides the optional account_id (ignored for the l…

No se publicó ningún esquema de entrada para esta herramienta.

link_accountSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

list_chatsList conversations, most recently active first. Use it to discover the chat_id values the other tools need. Each chat has: chat_id, name, type, unread_count, last_message {text, timestamp, from_me}, archived, pinned, muted_until, and left (groups you are no longer in).

List conversations, most recently active first. Use it to discover the chat_id values the other tools need. Each chat has: chat_id, name, type, unread_count, last_message {text, timestamp, from_me}, archived, pinned, muted_until, and left (groups you are no longer in).

No se publicó ningún esquema de entrada para esta herramienta.

read_messagesRead messages from one chat, oldest to newest. Without `before` you get the most recent messages. Pass `before` (the oldest message_id you already have) to page further back; wazap asks the phone for older history when the local store runs out, which takes a few seconds.

Read messages from one chat, oldest to newest. Without `before` you get the most recent messages. Pass `before` (the oldest message_id you already have) to page further back; wazap asks the phone for older history when the local store runs out, which takes a few seconds.

No se publicó ningún esquema de entrada para esta herramienta.

get_recent_messagesEverything that happened recently, grouped by chat. This is the catch-up tool: one call instead of list_chats plus a read_messages per chat. WhatsApp's own notices — device linking, group membership changes, encryption notices — are left out so the counts are conversation; pass include_system to se…

Everything that happened recently, grouped by chat. This is the catch-up tool: one call instead of list_chats plus a read_messages per chat. WhatsApp's own notices — device linking, group membership changes, encryption notices — are left out so the counts are conversation; pass include_system to se…

No se publicó ningún esquema de entrada para esta herramienta.

get_unansweredSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

get_storiesThe stories (status updates) the linked account has received in the last N hours, newest first, each with its author, its text or caption and its time. WhatsApp keeps a story for a day and so does wazap; nothing older is held. With include_previews the photos come as small images, and download_medi…

The stories (status updates) the linked account has received in the last N hours, newest first, each with its author, its text or caption and its time. WhatsApp keeps a story for a day and so does wazap; nothing older is held. With include_previews the photos come as small images, and download_medi…

No se publicó ningún esquema de entrada para esta herramienta.

set_contact_noteRemember something about a person, on this machine only: "Hermi, my own agent", "the accountant", "always answers late". The note then rides along wherever the contact shows: list_chats, search_contacts, get_contact, get_recent_messages and get_unanswered. Nothing is sent to WhatsApp and the contac…

Remember something about a person, on this machine only: "Hermi, my own agent", "the accountant", "always answers late". The note then rides along wherever the contact shows: list_chats, search_contacts, get_contact, get_recent_messages and get_unanswered. Nothing is sent to WhatsApp and the contac…

No se publicó ningún esquema de entrada para esta herramienta.

update_contact_detailsSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

mark_handledThe user dealt with what this chat was asking, outside WhatsApp or by a reply wazap did not see: a phone call, a meeting, a decision. The open ask is remembered as handled and the chat leaves get_unanswered. The next message from the other side makes a new ask and the chat comes back on its own. Ke…

The user dealt with what this chat was asking, outside WhatsApp or by a reply wazap did not see: a phone call, a meeting, a decision. The open ask is remembered as handled and the chat leaves get_unanswered. The next message from the other side makes a new ask and the chat comes back on its own. Ke…

No se publicó ningún esquema de entrada para esta herramienta.

wait_for_messagesSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

search_messagesSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

recallSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

get_messageSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

search_contactsFind contacts by name, phone number, tag or detail: a substring match on the name, a digit match on the number, or a word from a local tag or detail — so "contabil" finds the person filed under role: contabil by update_contact_details. With only tag it lists everyone carrying that tag. Returns cont…

Find contacts by name, phone number, tag or detail: a substring match on the name, a digit match on the number, or a word from a local tag or detail — so "contabil" finds the person filed under role: contabil by update_contact_details. With only tag it lists everyone carrying that tag. Returns cont…

No se publicó ningún esquema de entrada para esta herramienta.

sync_contactsAsk WhatsApp to send the linked phone's address book from scratch, and wait up to 15 seconds for it. Nothing on WhatsApp changes: this only refills wazap's own contact list. Use it when get_status reports contacts_named: 0, or when senders in a group read as phone numbers for people you know are s…

Ask WhatsApp to send the linked phone's address book from scratch, and wait up to 15 seconds for it. Nothing on WhatsApp changes: this only refills wazap's own contact list. Use it when get_status reports contacts_named: 0, or when senders in a group read as phone numbers for people you know are s…

No se publicó ningún esquema de entrada para esta herramienta.

get_contactFull details for one contact: name, number, about text, profile picture URL, whether they are a saved contact, a business, or blocked. `name_source` says where the shown name comes from — "contact" when it is the saved address-book name (is_my_contact), "pushname" when it is a name the person publi…

Full details for one contact: name, number, about text, profile picture URL, whether they are a saved contact, a business, or blocked. `name_source` says where the shown name comes from — "contact" when it is the saved address-book name (is_my_contact), "pushname" when it is a name the person publi…

No se publicó ningún esquema de entrada para esta herramienta.

save_contactSave a person in the account's WhatsApp contacts: a new entry for a phone number, or a new name for an existing one. The name syncs to every linked device, and with save_on_phone (default) also into the phone's own address book. WhatsApp keeps no other fields — email, "my accountant" and the like g…

Save a person in the account's WhatsApp contacts: a new entry for a phone number, or a new name for an existing one. The name syncs to every linked device, and with save_on_phone (default) also into the phone's own address book. WhatsApp keeps no other fields — email, "my accountant" and the like g…

No se publicó ningún esquema de entrada para esta herramienta.

remove_contactprivilegiadaTake a person out of the account's WhatsApp contacts: the saved entry and its name go, the chat and its history stay. Nothing is sent to the contact.

Take a person out of the account's WhatsApp contacts: the saved entry and its name go, the chat and its history stay. Nothing is sent to the contact.

No se publicó ningún esquema de entrada para esta herramienta.

get_group_infoSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

download_mediaSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

transcribe_audioSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

send_messageDraft a text message. Does not send. Returns a draft_id and a preview of the recipient and exact text. Show that preview to the user; after they say yes, call confirm_send. A draft lasts 15 minutes. To @-mention people, pass mention_ids and write @<number> in the text where each mention belongs, t…

Draft a text message. Does not send. Returns a draft_id and a preview of the recipient and exact text. Show that preview to the user; after they say yes, call confirm_send. A draft lasts 15 minutes. To @-mention people, pass mention_ids and write @<number> in the text where each mention belongs, t…

No se publicó ningún esquema de entrada para esta herramienta.

send_mediaDraft an image, video, audio file, document or GIF, from a local path on the machine running wazap or from a public URL. Does not send. Exactly one of file_path / url. Maximum 100 MB. Show the preview; after the user says yes, call confirm_send. A GIF is sent with as_gif: an mp4 goes out looping, a…

Draft an image, video, audio file, document or GIF, from a local path on the machine running wazap or from a public URL. Does not send. Exactly one of file_path / url. Maximum 100 MB. Show the preview; after the user says yes, call confirm_send. A GIF is sent with as_gif: an mp4 goes out looping, a…

No se publicó ningún esquema de entrada para esta herramienta.

send_pollDraft a poll. Does not send. Participants vote in WhatsApp, and their votes show on the poll message: read_messages counts them and get_message says who chose each option. Show the preview; after the user says yes, call confirm_send.

Draft a poll. Does not send. Participants vote in WhatsApp, and their votes show on the poll message: read_messages counts them and get_message says who chose each option. Show the preview; after the user says yes, call confirm_send.

No se publicó ningún esquema de entrada para esta herramienta.

send_locationDraft a map pin, optionally labelled with a place name and address. Does not send. Show the preview; after the user says yes, call confirm_send.

Draft a map pin, optionally labelled with a place name and address. Does not send. Show the preview; after the user says yes, call confirm_send.

No se publicó ningún esquema de entrada para esta herramienta.

edit_messageprivilegiadaReplace the text of a message the linked account sent. WhatsApp only allows this within 15 minutes of sending; after that send a correction instead.

Replace the text of a message the linked account sent. WhatsApp only allows this within 15 minutes of sending; after that send a correction instead.

No se publicó ningún esquema de entrada para esta herramienta.

react_to_messageAdd an emoji reaction to a message, or pass an empty string to remove your reaction.

Add an emoji reaction to a message, or pass an empty string to remove your reaction.

No se publicó ningún esquema de entrada para esta herramienta.

forward_messageDraft a forward of an existing message to another chat. Does not send. The recipient will see it marked as forwarded. Show the preview; after the user says yes, call confirm_send.

Draft a forward of an existing message to another chat. Does not send. The recipient will see it marked as forwarded. Show the preview; after the user says yes, call confirm_send.

No se publicó ningún esquema de entrada para esta herramienta.

confirm_sendSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

delete_messageprivilegiadaSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

set_profile_pictureSet the linked WhatsApp account's own profile picture from a local path on the machine running wazap or from a public URL. Exactly one of file_path / url. JPEG, PNG or WebP only, at most 10 MB. DESTRUCTIVE and visible to every contact. Show the image and wait for a yes first. This call hits WhatsAp…

Set the linked WhatsApp account's own profile picture from a local path on the machine running wazap or from a public URL. Exactly one of file_path / url. JPEG, PNG or WebP only, at most 10 MB. DESTRUCTIVE and visible to every contact. Show the image and wait for a yes first. This call hits WhatsAp…

No se publicó ningún esquema de entrada para esta herramienta.

manage_chatSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

create_groupCreate a group with the given name and participants; the linked account becomes the owner. Each participant comes back with a status: ok, invite_needed (their privacy settings require an invite link) or failed.

Create a group with the given name and participants; the linked account becomes the owner. Each participant comes back with a status: ok, invite_needed (their privacy settings require an invite link) or failed.

No se publicó ningún esquema de entrada para esta herramienta.

join_groupSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

manage_groupSin descripción publicada

Esta herramienta no publicó ninguna descripción. Forge no se la inventa.

22 de 38 herramientas publicaron una descripción.

Los nombres y descripciones de las herramientas los escribe el publicador y se muestran literalmente como texto inerte. Son las cadenas que un cliente MCP pasa al modelo, así que Forge las analiza en busca de patrones de inyección de prompts — cualquier hallazgo aparece junto al análisis de seguridad de arriba. «Privilegiada» es una coincidencia de palabra clave en el nombre de la herramienta, no una auditoría de lo que hace: un nombre inofensivo puede hacer cualquier cosa.

Acerca de

WhatsApp for your agent: chats, messages, media, contacts and groups behind MCP tools.

Palabras clave
mcp
Alternativas
Comparando superficies de herramientas…

Árbol de dependencias

Lo que un análisis de Forge resolvió a partir de los metadatos de npm el 2026-09-20: resolución observada, no una declaración del publicador.

60 paquetes resueltos · 10 directos · ninguno con avisos de seguridad La resolución se detiene en la profundidad 4 y en 60 paquetes.

El rastreo se detuvo en el límite de 60 paquetes. El resto del árbol nunca se resolvió.

Hay 36 paquetes resueltos más que no se dibujan aquí (límite de visualización: 24). Toda dependencia con avisos de seguridad se dibuja aunque se supere el límite. Inventario completo (SBOM CycloneDX)

Declaradas pero no resueltas

217 dependencias declaradas nunca llegaron al árbol. Faltan en la resolución de Forge, no en el paquete.

+205 más sin listar. Los recuentos por motivo de arriba las incluyen todas.

No se siguen: peerDependencies. Este árbol cubre solo dependencias en tiempo de ejecución, así que lo que estas arrastren nunca se resolvió.