WhatsApp gateway for agents
Lets AI agents read, search and send on a WhatsApp account through MCP, REST and server-sent events, without trusting a word they read.
The problem
Agents need messaging, but every inbound message is a possible prompt injection and some contain codes and card numbers.
The approach
One process owns the socket; the MCP server only reads or enqueues, through SQLite in WAL mode. Inbound text is wrapped as untrusted; one-time codes and card numbers are redacted before storage. Reachable only through an outbound Cloudflare Tunnel.
What stands out
- Push, not poll: events stream to agents over SSE.
- Inbound messages tagged untrusted and secrets redacted before they are stored.