Our grade: 4 checks
Account risk It uses your own account at another platform by a route that platform doesn't allow, and the platform's own pages say that can get the account restricted or banned. That caps the grade at C, however well the four checks score. Read the page that says so · Why we cap it
Based on public data, not a full audit. See how we grade. Something changed? Request a re-grade.
Community rating
-
No community reviews yet
Ran this server? Tell others if you would trust it in production. Reviews are separate from our grade.
Write a reviewWhy it got a C
A hosted server from apisapp (api-supp.com), a small WhatsApp API service run from Israel. You link a WhatsApp or WhatsApp Business app number by scanning a QR code under Linked devices, the way WhatsApp Web works. It is not Meta's official WhatsApp Business Platform (Cloud API), and apisapp says it isn't affiliated with WhatsApp or Meta. WhatsApp's terms forbid bulk and auto-messaging and let it disable accounts, and apisapp's own terms say WhatsApp may restrict or ban a number at any time without notice, at your risk. So don't connect a number you can't afford to lose, and don't let an agent message people who haven't asked to hear from you; the service doesn't pace sends for you. The 26 tools send texts, polls, buttons, lists, contact cards and links; find, add and edit contacts; and, at the default access level, read your chats, messages and groups and add or remove group members where you're an admin. Messages pass through apisapp's servers; the privacy policy deletes a number's messages 30 days after its paid period ends. It costs $7.50 per number a month. An open-source Local MCP (wa-bridge-mcp) also exists; it adds files, voice notes and media download, its token has no access levels, and it can send any file on your computer that the model names. It isn't graded here. No advisories on record. Grade capped at C: WhatsApp's own Help Center page on unofficial apps says linking your account to unofficial versions of WhatsApp breaks its terms and that the account might be temporarily or permanently banned, so the grade stays at C however well the four checks score. On the four checks, the biggest deduction: the hosted server is closed source and the only public code is by one developer, so maintenance is scored one band lower. Close behind: one sign-in covers every number on the account, and the default access level lets the agent read all your chats as well as send.
How to connect
claude mcp add --transport http whatsapp https://app.api-supp.com/api/mcp
Is apisapp WhatsApp MCP Server (api-supp.com) safe?
Is apisapp WhatsApp MCP Server (api-supp.com) safe to use?
apisapp WhatsApp MCP Server (api-supp.com) grades C (usable with care). Account risk: it uses your own account at another platform by a route that platform doesn't allow, and the platform's own pages say that can get the account restricted or banned. That caps the grade at C, however well the four checks score. Login is required, but access is coarse: one sign-in or key covers more than your agent needs, so grant the narrowest account you can. Upkeep is hard to verify (closed source or a single maintainer), so pin the version you tested.
Does apisapp WhatsApp MCP Server (api-supp.com) have known vulnerabilities?
Not in our current data: it has no open CVEs or advisories. We re-check as new ones are published.
Does apisapp WhatsApp MCP Server (api-supp.com) support authentication?
Yes. It requires a login, so access can be tied to a person or a scoped key.
Alternatives in Collaboration
- A Google Drive MCP ServerOfficial Google-hosted Drive server (Developer Preview) to search, read, download, create, and copy files, with scoped OAuth.
- A Pragor Project Board MCP ServerHosted server that connects an agent to a Pragor project board to read and update messages, tasks and operations, with a per-agent token limited to its project role.
- A Slack MCP ServerOfficial hosted Slack server to search and read messages, files, and canvases, and send messages as you.
- A monday.com MCPmonday.com's official MCP server, hosted at mcp.monday.com or run locally from npm, to read and update boards, items, columns, updates and forms.
- B Asana MCPOfficial hosted Asana server to search, read, create, and update tasks and projects, with OAuth sign-in.
Community reviews
No published community reviews yet.
Write a review
Ran this server? Tell other teams how it went. You get one review per server. We email you a link to confirm it, then an editor checks it before it goes up. We never show your email.