WALoops

io.github.bhagirarh/waloops-mcpbhagirarhstreamable-httpv1.0.0Scanned 2 hours ago

WhatsApp OTP and WhatsApp Business automation tools for AI assistants

20 tools: 2 do something that can't be undone, 5 change things and 13 only read.

Reads private data · 3
Reads text others write · 2
Can send data out · 3
No findings

Anlyon alternative

7 of these tools change something. Run those as governed actions.

Declare what an action changes, and Anlyon puts it under a shared limit, binds every approval to the exact request, and grades the outcome. It works on any HTTPS API you can describe as an action.

Anlyon does not run, proxy or govern this MCP server. A tool your own code calls directly is not routed through Anlyon and is not governed by it.

Import an OpenAPI spec →

Tools

Grouped by what each tool does, most consequential first. Open one for its reasons and full description; descriptions are the publisher's own words.

20 tools

Can't be undone 2Sends, pays, publishes or merges: once done, it cannot be taken back.Claude Code: ask

send_otpSend an OTP to an international phone number.Can send data outNo findings
Why it is in this group
- The name "send_otp" says "send": a word for sending, and what is sent cannot be taken back.
What it can reach
- outboundThe name "send_otp" says "send": it sends or publishes something to other people.
- outboundThe input takes a destination (input.phone): what the tool writes goes there.
Description, as the server wrote it
Send an OTP to an international phone number. A free OTP key sends from the WALoops WhatsApp number; channel may be whatsapp or sms.
send_templateRequires an Advance plan key.Can send data outNo findings
Why it is in this group
- The name "send_template" says "send": a word for sending, and what is sent cannot be taken back.
- The input addresses people (input.to): what it sends cannot be taken back.
What it can reach
- outboundThe name "send_template" says "send": it sends or publishes something to other people.
- outboundThe input takes a destination (input.to): what the tool writes goes there.
Description, as the server wrote it
Requires an Advance plan key. Send an approved WhatsApp template; call list_templates first to confirm the template name and variables.

Changes things 5Creates or changes something that can be changed back.Claude Code: ask

create_automation_draftRequires an Advance plan key.No findings
Why it is in this group
- The name "create_automation_draft" says "create": a word for a change.
Description, as the server wrote it
Requires an Advance plan key. Creates an automation as a DRAFT: saved switched OFF and named "[AI draft] ...". Nothing is sent until the account owner reviews it and turns it on in the WALoops app (Automations page). Tell the user this.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
create_templateRequires an Advance plan key.No findings
Why it is in this group
- The name "create_template" says "create": a word for a change.
Description, as the server wrote it
Requires an Advance plan key. Creates a WhatsApp template and submits it to Meta for approval (usually minutes to a few hours). Check status later with list_templates.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
install_recipe_draftRequires an Advance plan key.No findings
Why it is in this group
- The name "install_recipe_draft" says "install": a word for a change.
Description, as the server wrote it
Requires an Advance plan key. Installs a recipe as a switched-off draft for the owner to review.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
pause_automationRequires an Advance plan key.No findings
Why it is in this group
- Nothing in its name or description says what it does, so it is counted as a write.
Description, as the server wrote it
Requires an Advance plan key. Switches an automation OFF. For safety, automations can only be turned ON by the account owner inside the WALoops app.
Annotations the server declares
- readOnlyHint: false
- destructiveHint: false
verify_otpVerify a previously sent OTP using the recipient’s phone number and code.Can send data outNo findings
Why it is in this group
- The input takes a statement or command to run (input.code), which can change anything it can reach.
What it can reach
- outboundThe input takes a destination (input.phone): what the tool writes goes there.
Description, as the server wrote it
Verify a previously sent OTP using the recipient’s phone number and code.

Only reads 13Looks things up and changes nothing.Show 13 read-only tools

get_conversation_messagesRequires an Advance plan key.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "get_conversation_messages" says "get": a word for reading.
What it can reach
- private-dataThe name "get_conversation_messages" says "get" and "conversation": it reads messages.
- untrusted-inputThe name "get_conversation_messages" says "get" and "conversation": it reads messages, which other people can write.
Description, as the server wrote it
Requires an Advance plan key. List messages in a conversation.
Annotations the server declares
- readOnlyHint: true
get_dashboard_statsRequires an Advance plan key.No findings
Why it is in this group
- The name "get_dashboard_stats" says "get": a word for reading.
Description, as the server wrote it
Requires an Advance plan key. Messages, conversations, automations and plan usage overview.
Annotations the server declares
- readOnlyHint: true
get_otp_usageRead OTP usage for the API key, including available usage or limits.No findings
Why it is in this group
- The name "get_otp_usage" says "get": a word for reading.
Description, as the server wrote it
Read OTP usage for the API key, including available usage or limits.
Annotations the server declares
- readOnlyHint: true
get_startedExplain WALoops setup, key types, available tool groups, API docs, and example OTP requests.Reads private dataNo findings
Why it is in this group
- The name "get_started" says "get": a word for reading.
What it can reach
- private-dataThe description's first sentence says "explain" and "doc": it reads documents.
Description, as the server wrote it
Explain WALoops setup, key types, available tool groups, API docs, and example OTP requests.
list_actionsEvery action an automation can run (WhatsApp, Shopify, WooCommerce, webhook to any external tool, bot flows, tags) with the action_config each needs.No findings
Why it is in this group
- The name "list_actions" says "list": a word for reading.
Description, as the server wrote it
Every action an automation can run (WhatsApp, Shopify, WooCommerce, webhook to any external tool, bot flows, tags) with the action_config each needs. Combine any trigger from list_connected_apps with any action.
Annotations the server declares
- readOnlyHint: true
list_automationsRequires an Advance plan key.No findings
Why it is in this group
- The name "list_automations" says "list": a word for reading.
Description, as the server wrote it
Requires an Advance plan key. List automations, or fetch one automation with its run stats by id.
Annotations the server declares
- readOnlyHint: true
list_bot_flowsRequires an Advance plan key.No findings
Why it is in this group
- The name "list_bot_flows" says "list": a word for reading.
Description, as the server wrote it
Requires an Advance plan key. List bot flows available as automation actions.
Annotations the server declares
- readOnlyHint: true
list_campaignsRequires an Advance plan key.No findings
Why it is in this group
- The name "list_campaigns" says "list": a word for reading.
Description, as the server wrote it
Requires an Advance plan key. List campaigns, or fetch one campaign by id.
Annotations the server declares
- readOnlyHint: true
list_connected_appsRequires an Advance plan key.No findings
Why it is in this group
- The name "list_connected_apps" says "list": a word for reading.
Description, as the server wrote it
Requires an Advance plan key. Connected apps (Shopify, WooCommerce, etc.) with their app_key and available event_key triggers; call before create_automation_draft.
Annotations the server declares
- readOnlyHint: true
list_conversationsRequires an Advance plan key.Reads private dataReads text others writeNo findings
Why it is in this group
- The name "list_conversations" says "list": a word for reading.
What it can reach
- private-dataThe name "list_conversations" says "list" and "conversation": it reads messages.
- untrusted-inputThe name "list_conversations" says "list" and "conversation": it reads messages, which other people can write.
Description, as the server wrote it
Requires an Advance plan key. List and search inbox conversations.
Annotations the server declares
- readOnlyHint: true
list_recipesRequires an Advance plan key.No findings
Why it is in this group
- The name "list_recipes" says "list": a word for reading.
Description, as the server wrote it
Requires an Advance plan key. List proven ready-made automations that can be installed as safe drafts.
Annotations the server declares
- readOnlyHint: true
list_tagsRequires an Advance plan key.No findings
Why it is in this group
- The name "list_tags" says "list": a word for reading.
Description, as the server wrote it
Requires an Advance plan key. List tags available as automation actions.
Annotations the server declares
- readOnlyHint: true
list_templatesRequires an Advance plan key.No findings
Why it is in this group
- The name "list_templates" says "list": a word for reading.
Description, as the server wrote it
Requires an Advance plan key. List the client’s approved WhatsApp templates and their variables.
Annotations the server declares
- readOnlyHint: true

This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.

Exfil surface

Which tools read private data, which read text someone else can write, and which can send data out. One of each is a path a prompt injection can use.

18 paths in this server alone from private data, through text someone else wrote, to a way out. Denying 2 untrusted-input tools breaks every one.

Reads private data3: Reads files, mail, messages, databases, secrets, calendars or repositories.; get_conversation_messages
get_started
list_conversations
Reads text others write2: Brings in text someone else can write: web pages, inbound email, messages, issues and comments.; get_conversation_messages
list_conversations
Can send data out3: Can carry data to people or systems: it sends, posts or publishes, or takes a recipient, channel or URL.; send_otp
send_template
verify_otp

deny to break every path

{
  "permissions": {
    "deny": [
      "mcp__waloops__get_conversation_messages",
      "mcp__waloops__list_conversations"
    ]
  }
}

Other servers in the same agent add their own tools to these paths. Audit your whole setup to see them together.

Findings

Matches of fixed checks, with the text they matched.

No check matched anything in these tool definitions. That is not a safety guarantee.

History

Changes to its tool definitions and to its remote endpoint, newest first.

No change seen yet. Its tools are rescanned every day, and a remote endpoint is looked at once a week.

All changes to this server

Install

Pinned to version 1.0.0. Values in angle brackets are yours to fill in.

claude mcp add --transport http waloops https://app.waloops.com/api/mcp.php

claude mcp add --transport http waloops https://app.waloops.com/api/mcp.php

Run in a terminal.

Claude Code permissions

Allow the reads, ask before a change or a way out, deny the deletes. Paste into .claude/settings.json.

.claude/settings.json

{
  "permissions": {
    "allow": [
      "mcp__waloops__get_started",
      "mcp__waloops__get_otp_usage",
      "mcp__waloops__list_templates",
      "mcp__waloops__get_dashboard_stats",
      "mcp__waloops__list_conversations",
      "mcp__waloops__get_conversation_messages",
      "mcp__waloops__list_automations",
      "mcp__waloops__list_connected_apps",
      "mcp__waloops__list_actions",
      "mcp__waloops__list_recipes",
      "mcp__waloops__list_bot_flows",
      "mcp__waloops__list_tags",
      "mcp__waloops__list_campaigns"
    ],
    "ask": [
      "mcp__waloops__send_otp",
      "mcp__waloops__verify_otp",
      "mcp__waloops__send_template",
      "mcp__waloops__install_recipe_draft",
      "mcp__waloops__create_template",
      "mcp__waloops__pause_automation",
      "mcp__waloops__create_automation_draft"
    ],
    "deny": []
  }
}

Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. A read that can send data out (it takes a URL, say) asks first too. It assumes the server is installed as waloops. Review it before you use it.

Capability tags behind 6 rules

mcp__waloops__get_started private-data
mcp__waloops__send_otp outbound
mcp__waloops__verify_otp outbound
mcp__waloops__send_template outbound
mcp__waloops__list_conversations private-data, untrusted-input
mcp__waloops__get_conversation_messages private-data, untrusted-input

Keep the decision: fail CI when the tools change, follow every change, or show a badge.

Pin in CI

Fail a build when the tools you reviewed are not the tools the server serves today.

curl -s "https://anlyon.dev/api/v1/servers/io.github.bhagirarh/waloops-mcp/verify?hash=99ed3815ff32083c446c34df4bfd823a1b6747938bd3752c785336b6a1adf427" | jq -e '.changed == false'

Pinned hash 99ed3815ff32, from Nov 1, 2026, 18:18 UTC.

Watch

Get told when its tools change: a new tool, a new description, a new class.

https://anlyon.dev/servers/io.github.bhagirarh/waloops-mcp/changes.xml

An Atom feed. Works in any feed reader or Slack's RSS app.

Badge

[![anlyon.dev](https://anlyon.dev/badge/io.github.bhagirarh/waloops-mcp.svg)](https://anlyon.dev/servers/io.github.bhagirarh/waloops-mcp)

Source: MCP Registry · repository. Synced Nov 1, 2026, 18:17 UTC.