{"version":1,"type":"story","url":"https://digestai.news/story/whatsapp-mcp-lets-ai-agents-read-personal-chats-on-cloudflare-workers","json":"https://digestai.news/story/whatsapp-mcp-lets-ai-agents-read-personal-chats-on-cloudflare-workers.json","markdown":"https://digestai.news/story/whatsapp-mcp-lets-ai-agents-read-personal-chats-on-cloudflare-workers.md","slug":"whatsapp-mcp-lets-ai-agents-read-personal-chats-on-cloudflare-workers","headline":"WhatsApp MCP lets AI agents read personal chats on Cloudflare Workers","summary":"A GitHub project called WhatsApp MCP lets an AI agent read a user’s personal WhatsApp messages by running a small server inside a Cloudflare Workers account. After linking a phone once – the same way WhatsApp Web is linked – the server stores the chat history in a SQLite database inside a Durable Object. AI tools that speak the MCP protocol, such as Claude Code or Claude Desktop, can then ask questions like “What did Dana say about the flights?” or “Summarize the family group this week.” The server only reads messages; it never sends them.\n\nThe deployment requires a Cloudflare Workers Paid plan, which the author says costs a few dollars a month, Node 20 or later, and a WhatsApp‑linked phone. The code uses the open‑source Baileys library to mimic the WhatsApp Web protocol, a method that WhatsApp’s terms prohibit. Data never leaves the user’s Cloudflare account, and media files are stored only as labels (e.g., [image], [voice note 12s]) without transcription. The author notes that the first import may be fragile on the free plan and that the server must be re‑linked if the phone removes the device.\n\nBecause the server is a personal deployment, each instance handles a single WhatsApp account and its own login credentials. The design deliberately avoids contacting external contacts services; instead, the AI agent can look up unknown numbers in the user’s own contacts and save names back into the database.","keyPoints":["Runs on a Cloudflare Workers Paid plan, costing a few dollars a month.","Uses the Baileys library to emulate WhatsApp Web, which violates WhatsApp’s terms.","AI agents can query, search, and summarize chats but cannot send messages."],"whyItMatters":"The tool shows how personal AI assistants can access private messaging data while keeping it on the user’s own cloud account, raising both privacy possibilities and terms‑of‑service concerns.","category":{"slug":"agents","name":"Agents & Tools","url":"https://digestai.news/category/agents"},"entities":{"companies":["Cloudflare","WhatsApp","Baileys","Anthropic","GitHub"],"models":[],"people":["finereli"]},"firstPublishedAt":"2026-10-18T21:36:10Z","updatedAt":"2026-10-18T21:36:10Z","sourceCount":1,"hasPrimarySource":true,"sources":[{"outlet":"github.com","title":"Show HN: WhatsApp MCP running free on Cloudflare","url":"https://github.com/finereli/whatsapp-mcp","publishedAt":"2026-10-18T21:36:10Z","type":"primary","primary":true,"lead":true}],"sourceNotes":null,"discussions":[{"site":"Hacker News","url":"https://news.ycombinator.com/item?id=50145715","points":43}],"thread":null,"cite":{"text":"Digest AI, \"WhatsApp MCP lets AI agents read personal chats on Cloudflare Workers\", 18 October 2026, https://digestai.news/story/whatsapp-mcp-lets-ai-agents-read-personal-chats-on-cloudflare-workers","publisher":"Digest AI","title":"WhatsApp MCP lets AI agents read personal chats on Cloudflare Workers","datePublished":"2026-10-18T21:36:10Z","url":"https://digestai.news/story/whatsapp-mcp-lets-ai-agents-read-personal-chats-on-cloudflare-workers"},"generatedBy":"Written by Digest AI's editorial model from the linked sources; the sources are the record.","license":"Headlines, digests and key points are written by Digest AI and may be quoted with a link to the story page. Linked articles belong to their publishers. Terms: https://digestai.news/terms#reuse"}