Waha MCP Server

by devlikeapro• 7.7k•• Scanned•Claim this listing•Request removal
Communicationai botbothttp apimcpmcp server

WAHA - WhatsApp HTTP API (REST API) that you can configure in a click! Multiple engines: WEBJS (browser based), NOWEB (websocket nodejs), GOWS (websocket go), WPP (browser)

Waha is an open-source mcp server by devlikeapro, written mainly in TypeScript, with 7,723 GitHub stars and the Apache-2.0 license. Its code was last updated Oct 28, 2026.

Scan summary: scanned Nov 5, 2026 at commit c42f68a. Seen able to run shell commands, connect to the internet. Scan policy

Scanned
Full scan at c42f68a · Nov 5, 2026
Scanned Builds
Static code scanwarn
Secrets scanfail
Dependency audit317 known vulnerabilitiesfail
Manifestnonewarn
Buildpass
Boot & handshakefail
Network egressfail
Reproducible (×3)n/a

Findings (94)

  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    exfiltration issue
    Details are available to the maintainer after claiming this listing.
  • high
    secrets issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • high
    dependencies issue
    Details are available to the maintainer after claiming this listing.
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/gows-proto.js:89
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    scripts/up-dashboard.js:21
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    src/core/storage/psql/PsqlConnectionConfig.ts:27
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/core/utils/processes.ts:40
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/core/utils/processes.ts:93
  • medium
    Runs shell commands. Fine for some tools, but it means the agent can run anything your user can.
    src/core/utils/processes.ts:118
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    src/modules/waha-webhook/WebhookPlugin.sender.ts:46
  • medium
    Very long encoded string literal. Often used to hide a payload.
    src/structures/files.dto.ts:47
  • medium
    Very long encoded string literal. Often used to hide a payload.
    src/structures/files.dto.ts:66
  • medium
    Very long encoded string literal. Often used to hide a payload.
    src/structures/files.dto.ts:99
  • medium
    Very long encoded string literal. Often used to hide a payload.
    src/structures/files.dto.ts:147
  • medium
    Turns off TLS certificate checking, allowing traffic interception.
    src/utils/fetch.ts:7
  • medium
    flask@1.1.4: 2 known vulnerabilities
    PYSEC-2023-62, PYSEC-2026-2151
    examples/python/requirements.txt
  • medium
    requests@2.9.2: 5 known vulnerabilities
    PYSEC-2018-28, PYSEC-2023-74, PYSEC-2026-1872, PYSEC-2026-1873, PYSEC-2026-2275
    examples/python/requirements.txt
  • medium
    jinja2@2.11.3: 4 known vulnerabilities
    PYSEC-2026-1471, PYSEC-2026-1473, PYSEC-2026-1474, PYSEC-2026-1475
    examples/python/requirements.txt
  • medium
    werkzeug@1.0.1: 10 known vulnerabilities
    PYSEC-2022-203, PYSEC-2023-221, PYSEC-2023-57, PYSEC-2023-58, PYSEC-2026-2043 +5 more
    examples/python/requirements.txt
  • medium
    @grpc/grpc-js@1.14.1: 4 known vulnerabilities
    GHSA-5375-pq7m-f5r2, GHSA-99f4-grh7-6pcq, GHSA-f596-whhp-79r4, GHSA-m9gg-hp2v-232j
    yarn.lock
  • medium
    @grpc/grpc-js@1.14.4: 2 known vulnerabilities
    GHSA-f596-whhp-79r4, GHSA-m9gg-hp2v-232j
    yarn.lock
  • medium
    @isaacs/brace-expansion@5.0.0: 1 known vulnerability
    GHSA-7h2j-956f-4vf2
    yarn.lock
  • medium
    @modelcontextprotocol/sdk@1.29.0: 6 known vulnerabilities
    GHSA-22jm-h49p-29qw, GHSA-46jr-4wx8-v453, GHSA-6prh-2h8m-c8cw, GHSA-6qxp-vccf-f47h, GHSA-f897-62hf-6gxq +1 more
    yarn.lock
  • medium
    adm-zip@0.5.10: 8 known vulnerabilities
    GHSA-7q85-xj36-vmfc, GHSA-8238-w5pm-2374, GHSA-c6fg-446q-cg94, GHSA-j5f4-cc29-5x44, GHSA-p634-w6r4-rjp2 +3 more
    yarn.lock
  • medium
    axios@1.19.0: 12 known vulnerabilities
    GHSA-3pq3-5fj3-cg6v, GHSA-44g4-m2mj-wpvx, GHSA-4hqw-qxg8-jxx2, GHSA-542g-h47m-68v8, GHSA-9fr6-4gfg-395g +7 more
    yarn.lock
  • medium
    body-parser@2.2.0: 3 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6, GHSA-wqch-xfxh-vrr4
    yarn.lock
  • medium
    body-parser@2.2.2: 2 known vulnerabilities
    GHSA-27r3-jxmh-p828, GHSA-v422-hmwv-36x6
    yarn.lock
  • medium
    brace-expansion@1.1.12: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    yarn.lock
  • medium
    brace-expansion@2.0.2: 7 known vulnerabilities
    GHSA-3jxr-9vmj-r5cp, GHSA-6j4f-fj2g-mc7p, GHSA-f886-m6hf-6m8v, GHSA-mh99-v99m-4gvg, GHSA-q2hr-2g5m-vwhr +2 more
    yarn.lock
  • medium
    browserslist@4.25.0: 2 known vulnerabilities
    GHSA-73wf-gq98-2v4g, GHSA-c83g-rgw3-j3cx
    yarn.lock
  • medium
    fast-uri@3.0.6: 12 known vulnerabilities
    GHSA-333x-w4r6-6crp, GHSA-4c8g-83qw-93j6, GHSA-7p8r-x3mc-p8w7, GHSA-f65p-4m7j-42xc, GHSA-hrr3-gc8f-f4qj +7 more
    yarn.lock
  • medium
    fflate@0.8.2: 1 known vulnerability
    GHSA-px8p-9vwx-vf98
    yarn.lock
  • medium
    follow-redirects@1.16.0: 3 known vulnerabilities
    GHSA-8r9p-f939-6h3c, GHSA-mrwp-f3q8-3g9p, GHSA-q3jh-wrc6-jgq8
    yarn.lock
  • medium
    form-data@4.0.4: 1 known vulnerability
    GHSA-hmw2-7cc7-3qxx
    yarn.lock
  • medium
    glob@10.4.5: 2 known vulnerabilities
    GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
    yarn.lock
  • medium
    glob@11.0.1: 2 known vulnerabilities
    GHSA-3g3m-2fjr-6pw4, GHSA-5j98-mcp5-4vw2
    yarn.lock
  • medium
    hono@4.12.14: 26 known vulnerabilities
    GHSA-2gcr-mfcq-wcc3, GHSA-3hrh-pfw6-9m5x, GHSA-54fx-42gc-7vw4, GHSA-5r4p-p66f-jhc7, GHSA-69xw-7hcm-h432 +21 more
    yarn.lock
  • medium
    ip-address@10.1.0: 6 known vulnerabilities
    GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
    yarn.lock
  • medium
    ip-address@9.0.5: 6 known vulnerabilities
    GHSA-h3mg-xc3c-68pw, GHSA-j6r3-76f7-8jcv, GHSA-mwp4-54f8-5fhr, GHSA-rpw4-54j3-4h4q, GHSA-rxp7-6hxx-x8q5 +1 more
    yarn.lock
  • medium
    joi@17.13.3: 6 known vulnerabilities
    GHSA-4528-x5fx-h6hg, GHSA-6h2x-m376-mqjq, GHSA-6w3j-5fw6-r9vr, GHSA-gg4h-3hg2-grpc, GHSA-q7cg-457f-vx79 +1 more
    yarn.lock
  • medium
    js-yaml@3.14.1: 5 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m
    yarn.lock
  • medium
    js-yaml@4.1.0: 5 known vulnerabilities
    GHSA-2883-xcg3-v3hh, GHSA-52cp-r559-cp3m, GHSA-5p4m-2wfm-xmqj, GHSA-h67p-54hq-rp68, GHSA-mh29-5h37-fv8m
    yarn.lock
  • medium
    link-preview-js@3.1.0: 2 known vulnerabilities
    GHSA-4gp8-rjrq-ch6q, GHSA-cpjf-6666-r8fx
    yarn.lock
  • medium
    lodash@4.17.21: 2 known vulnerabilities
    GHSA-r5fr-rjxr-66jc, GHSA-xxjr-mmjv-4gpg
    yarn.lock
  • medium
    minimatch@10.0.3: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    yarn.lock
  • medium
    minimatch@3.1.2: 3 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
    yarn.lock
  • medium
    minimatch@5.1.6: 3 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj
    yarn.lock
  • medium
    minimatch@8.0.4: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    yarn.lock
  • medium
    minimatch@9.0.5: 4 known vulnerabilities
    GHSA-23c5-xmqv-rm74, GHSA-3ppc-4f35-3m26, GHSA-7r86-cg39-jmmj, GHSA-g3hv-75wg-m249
    yarn.lock
  • medium
    multer@2.0.2: 9 known vulnerabilities
    GHSA-3p4h-7m6x-2hcm, GHSA-535w-7cp7-47q4, GHSA-5528-5vmv-3xc2, GHSA-72gw-mp4g-v24j, GHSA-q7qp-rjg7-q26m +4 more
    yarn.lock
  • medium
    path-to-regexp@8.2.0: 2 known vulnerabilities
    GHSA-27v5-c462-wpq7, GHSA-j3q9-mxjg-w52f
    yarn.lock
  • medium
    picomatch@2.3.1: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    yarn.lock
  • medium
    picomatch@4.0.2: 2 known vulnerabilities
    GHSA-3v7f-55p6-f55p, GHSA-c2c7-rcm5-vvqj
    yarn.lock
  • medium
    serialize-javascript@6.0.2: 3 known vulnerabilities
    GHSA-5c6j-r48x-rmvq, GHSA-m5mm-p8h7-m29v, GHSA-qj8w-gfj5-8c6v
    yarn.lock
  • medium
    tar-fs@2.1.3: 1 known vulnerability
    GHSA-vj76-c3g6-qr5v
    yarn.lock
  • medium
    tmp@0.0.33: 2 known vulnerabilities
    GHSA-52f5-9888-hmc6, GHSA-ph9p-34f9-6g65
    yarn.lock
  • medium
    undici@7.16.0: 31 known vulnerabilities
    GHSA-2gqq-gqf2-x968, GHSA-2jfj-6hjv-fm6j, GHSA-2m5v-pch6-74hx, GHSA-2mjp-6q6p-2qxm, GHSA-35p6-xmwp-9g52 +26 more
    yarn.lock
  • medium
    uuid@9.0.1: 1 known vulnerability
    GHSA-w5hq-g745-h8pq
    yarn.lock
  • medium
    validator@13.15.15: 2 known vulnerabilities
    GHSA-9965-vmph-33xx, GHSA-vghf-hv5q-vc2g
    yarn.lock
  • medium
    ws@8.18.2: 2 known vulnerabilities
    GHSA-58qx-3vcg-4xpx, GHSA-96hv-2xvq-fx4p
    yarn.lock
  • medium
    zod@3.25.63: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    yarn.lock
  • medium
    zod@4.3.6: 1 known vulnerability
    GHSA-mrhx-c7xc-m3w5
    yarn.lock
  • medium
    Install contacted hosts other than package registries
    cdn.playwright.dev, classic.yarnpkg.com, node-precompiled-binaries.grpc.io, opencollective.com, playwright.download.prss.microsoft.com, storage.googleapis.com
  • medium
    MCP server didn't complete the protocol handshake
    timed out waiting for the server
  • low
    Possible example credential in docs/tests: generic-api-key
    src/__tests__/e2e/auth.test.ts:7
  • low
    Possible example credential in docs/tests: generic-api-key
    2 matches in this file
    src/core/utils/jsonutils.test.ts:20
  • low
    @babel/core@7.27.4: 1 known vulnerability
    GHSA-4x5r-pxfx-6jf8
    yarn.lock
  • low
    @hono/node-server@1.19.14: 2 known vulnerabilities
    GHSA-frvp-7c67-39w9, GHSA-rmxm-3fg6-px4f
    yarn.lock
  • low
    @nestjs/core@11.1.3: 1 known vulnerability
    GHSA-36xv-jgw5-4q75
    yarn.lock
  • low
    @protobufjs/utf8@1.1.0: 1 known vulnerability
    GHSA-q6x5-8v7m-xcrf
    yarn.lock
  • low
    @smithy/config-resolver@4.1.4: 1 known vulnerability
    GHSA-6475-r3vj-m8vf
    yarn.lock
  • low
    @tootallnate/once@1.1.2: 1 known vulnerability
    GHSA-vpq2-c234-7xj6
    yarn.lock
  • low
    ajv@6.12.6: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    yarn.lock
  • low
    ajv@8.17.1: 1 known vulnerability
    GHSA-2g4f-4pwh-qvx6
    yarn.lock
  • low
    deepmerge@4.3.1: 1 known vulnerability
    GHSA-gcqx-w48m-w2h4
    yarn.lock
  • low
    diff@4.0.2: 1 known vulnerability
    GHSA-73rr-hh4g-fpgx
    yarn.lock
  • low
    fast-copy@3.0.2: 1 known vulnerability
    GHSA-jggr-w7fw-pc2j
    yarn.lock
  • low
    file-type@21.0.0: 2 known vulnerabilities
    GHSA-5v7r-6r5c-r473, GHSA-j47w-4g3g-c36v
    yarn.lock
  • low
    glob@10.5.0: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    yarn.lock
  • low
    glob@9.3.5: 1 known vulnerability
    GHSA-3g3m-2fjr-6pw4
    yarn.lock
  • low
    qs@6.14.0: 5 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-6rw7-vpxm-498p, GHSA-q8mj-m7cp-5q26, GHSA-w7fw-mjwx-w883
    yarn.lock
  • low
    qs@6.15.1: 4 known vulnerabilities
    GHSA-4mjr-xmp4-gh2g, GHSA-6pq8-jhm2-2vcw, GHSA-q8mj-m7cp-5q26, GHSA-x5fp-wj9c-mxmx
    yarn.lock
  • low
    webpack@5.99.6: 2 known vulnerabilities
    GHSA-38r7-794h-5758, GHSA-8fgc-7cc6-rx7x
    yarn.lock
  • low
    yaml@2.8.0: 1 known vulnerability
    GHSA-48c2-rrv3-qjmp
    yarn.lock
  • low
    No manifest declaring network access and environment variables (agent.json)
  • low
    Contacted these domains while starting up (no manifest to compare against)
    registry.npmjs.org

Network activity

During install
cdn.playwright.devclassic.yarnpkg.comcodeload.github.comgithub.comnode-precompiled-binaries.grpc.ioopencollective.complaywright.download.prss.microsoft.comregistry.npmjs.orgregistry.yarnpkg.comrelease-assets.githubusercontent.comrepo.yarnpkg.comstorage.googleapis.com
While running
Not run — the code wasn't started in this scan

Automated result for the commit shown. See our scan policy. View the scan log

Maintainers can claim the listing to rescan, or dispute a result.

Waha alternatives

View more →

Similar mcp servers in Communication, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Waha (this page)
devlikeapro
7.7kApache-2.0Oct 28, 2026Scanned, no flagged issues
TrendRadar
sansan0
63kGPL-3.0Oct 29, 2026Scanned, no flagged issues
Lemonade
lemonade-sdk
6kApache-2.0Nov 1, 2026Scanned, no flagged issues
Pipeshub AI
pipeshub-ai
3.9kApache-2.0Nov 1, 2026Scanned, no flagged issues
Slackdump
rusq
2.8kAGPL-3.0Nov 1, 2026Scanned, no flagged issues
MCP SuperAssistant
srbhptl39
2.6kMITFeb 9, 2026Scanned, no flagged issues