Vendorapisapp (api-supp.com)
Connects overhttp

Our grade: 4 checks

Login Login required, broad access
Upkeep Active · 2026-11
Known bugs 0 open
Connection http

Account risk It uses your own account at another platform by a route that platform doesn't allow, and the platform's own pages say that can get the account restricted or banned. That caps the grade at C, however well the four checks score. Read the page that says so · Why we cap it

Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.

Community rating

-

No community reviews yet

Ran this server? Tell others if you would trust it in production. Reviews are separate from our grade.

Write a review

Why it got a C

A hosted server from apisapp (api-supp.com), a small WhatsApp API service run from Israel. You link a WhatsApp or WhatsApp Business app number by scanning a QR code under Linked devices, the way WhatsApp Web works. It is not Meta's official WhatsApp Business Platform (Cloud API), and apisapp says it isn't affiliated with WhatsApp or Meta. WhatsApp's terms forbid bulk and auto-messaging and let it disable accounts, and apisapp's own terms say WhatsApp may restrict or ban a number at any time without notice, at your risk. So don't connect a number you can't afford to lose, and don't let an agent message people who haven't asked to hear from you; the service doesn't pace sends for you. The 26 tools send texts, polls, buttons, lists, contact cards and links; find, add and edit contacts; and, at the default access level, read your chats, messages and groups and add or remove group members where you're an admin. Messages pass through apisapp's servers; the privacy policy deletes a number's messages 30 days after its paid period ends. It costs $7.50 per number a month. An open-source Local MCP (wa-bridge-mcp) also exists; it adds files, voice notes and media download, its token has no access levels, and it can send any file on your computer that the model names. It isn't graded here. No advisories on record. Grade capped at C: WhatsApp's own Help Center page on unofficial apps says linking your account to unofficial versions of WhatsApp breaks its terms and that the account might be temporarily or permanently banned, so the grade stays at C however well the four checks score. On the four checks, the biggest deduction: the hosted server is closed source and the only public code is by one developer, so maintenance is scored one band lower. Close behind: one sign-in covers every number on the account, and the default access level lets the agent read all your chats as well as send.

How to connect

claude mcp add --transport http whatsapp https://app.api-supp.com/api/mcp

Is apisapp WhatsApp MCP Server (api-supp.com) safe?

Is apisapp WhatsApp MCP Server (api-supp.com) safe to use?

apisapp WhatsApp MCP Server (api-supp.com) grades C (usable with care). Account risk: it uses your own account at another platform by a route that platform doesn't allow, and the platform's own pages say that can get the account restricted or banned. That caps the grade at C, however well the four checks score. Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.

Does apisapp WhatsApp MCP Server (api-supp.com) have known vulnerabilities?

Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.

Does apisapp WhatsApp MCP Server (api-supp.com) support authentication?

Yes. It requires a login, so access can be tied to a person or a scoped key.

Embed this badge

Maintain this server? Add the grade to your README.

TrustedMCP grade C

Markdown

[![TrustedMCP grade C](https://trustedmcp.io/badge/api-supp-whatsapp-mcp.svg)](https://trustedmcp.io/servers/api-supp-whatsapp-mcp)

HTML

<a href="https://trustedmcp.io/servers/api-supp-whatsapp-mcp"><img src="https://trustedmcp.io/badge/api-supp-whatsapp-mcp.svg" alt="TrustedMCP grade C" height="80"></a>

Community reviews

No published community reviews yet.

Write a review

Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.

How was it overall?

Would you trust it in production?
Would you recommend it to another team?

Score the details

Setup & docs
Auth experience
Reliability
Maintainer responsiveness

Tell other teams how it went

About you