Comparison · WhatsApp MCP
WhatsApp MCP server: hosted vs open-source (whatsapp-mcp)
By Patrick Alex, CEO of SyncZap · Published
The open-source whatsapp-mcp project is free and keeps your messages on your own computer, but it needs a developer setup, runs only while your machine is on and works with local clients such as Claude Desktop, not ChatGPT on the web. A hosted WhatsApp MCP server like SyncZap is added by URL with OAuth, works in ChatGPT and Claude everywhere and adds team access and send confirmation, in exchange for a subscription and trusting a provider with the synced chats.
What we are comparing
lharries/whatsapp-mcp is the best-known open-source WhatsApp MCP server (MIT license, about 6,800 GitHub stars on November 1, 2026). It has two parts: a Go bridge built on the whatsmeow library, which links to WhatsApp as a device and stores messages in a local SQLite database, and a Python MCP server that your desktop AI client starts over stdio. Many forks and similar projects follow the same design. The repository's last commit we saw was on July 13, 2025, with a large backlog of open issues and pull requests, so check its activity before relying on it.
A hosted server does the same linking on the provider's infrastructure and exposes MCP over HTTPS. SyncZap is one; others exist with different connection types and prices (see SyncZap vs WhatSync and APIs like Z-API and Evolution API).
Side by side
| whatsapp-mcp (self-hosted) | SyncZap (hosted) | |
|---|---|---|
| Setup | Go, Python 3.6+ and uv; FFmpeg for voice; a C compiler on Windows; edit your client's JSON config | Create an account, scan a QR code, paste a URL in ChatGPT or Claude |
| Where it runs | Your computer; stops when it sleeps or shuts down | Provider's servers, always on |
| MCP transport | stdio (local) | Streamable HTTP (remote) with OAuth 2.1 |
| ChatGPT on the web | No (ChatGPT only accepts remote servers) | Yes |
| Claude | Claude Desktop | Claude web, desktop and mobile, and Claude Code |
| Choosing which chats the AI sees | Everything in the local database | Only chats with sync on; all, all except, or a list |
| Sending | The AI can send directly through the tools | Prepare → show recipient and text → send only after you confirm |
| Team access | Single user, single machine | Owners, admins and read-only members, each with their own login |
| Re-linking | The README says re-authentication is needed about every 20 days | Linked on the server; reconnect in the panel if the phone unlinks it |
| Data location | Your disk | Provider's servers (text of synced chats; media deleted 24 h after download) |
| Cost | Free (plus your time) | $10 to $53.99/month after a 7-day trial |
When self-hosting is the better choice
- You are a developer, comfortable with Go and Python, and want full control of the code.
- Your messages must not leave your machine, and you accept that the AI provider still receives what the tools return.
- You only use Claude Desktop, Cursor or another local MCP client, and only while your computer is on.
- You want to modify the tools, for example to add custom queries over the SQLite database.
When a hosted server is the better choice
- You want WhatsApp in ChatGPT, or in Claude on your phone, which require a remote server.
- Several people need access with their own logins and roles, or the organization has more than one number (up to 5 on SyncZap Business).
- You want guardrails: confirmation before every send, a chat allowlist, idempotent sends and revocable OAuth tokens.
- You want voice-note transcription and image reading without installing FFmpeg or managing API keys.
Security: the same risk, different defaults
Both designs share the main risk of any WhatsApp MCP: messages come from other people and may contain instructions aimed at the AI. The whatsapp-mcp README is upfront about this “lethal trifecta”. What changes is the default protection. Locally, the AI sees the whole database and its send tool acts directly, so safety depends on how carefully you approve tool calls in your client. SyncZap limits reading to synced chats, tells the assistant in every tool description that message content is third-party data, and requires a confirmation token tied to the exact recipient and text for every send. We explain the risk in What is a WhatsApp MCP server?.
Both use the linked-device mechanism, which is not an official WhatsApp integration; the policy risk is the same. See Business API vs linked device.
Try the hosted option
Add this URL as a remote MCP server and authorize with OAuth; in Claude Code: claude mcp add --transport http synczap followed by the URL. The tools page lists every tool and whether it reads or acts.
https://synczap.ai/mcpFrequently asked questions
Is whatsapp-mcp free?
Yes, it is open source under the MIT license. You run it on your own computer, which needs Go, Python and uv installed.
Can I use whatsapp-mcp with ChatGPT?
Not on the web: it is a local stdio server, and ChatGPT only accepts remote MCP servers by URL. A hosted server such as SyncZap works in ChatGPT.
Is the open-source project maintained?
On November 1, 2026 the last commit we saw on lharries/whatsapp-mcp was from July 13, 2025, with many open issues and pull requests. Forks may be more active; check before you depend on one.
Which is more private?
Self-hosting keeps the message database on your disk. A hosted server stores the text of the chats you sync on its servers. In both cases the AI provider receives whatever the tools return to it.
Sources
Checked on . Third-party products change: check each one's page before deciding. Corrections: write to support@synczap.ai.
- lharries/whatsapp-mcp — README and repository (GitHub)
- whatsmeow — Go library for the WhatsApp web multi-device API
- Model Context Protocol — transports (stdio and Streamable HTTP)
- SyncZap — MCP server tools
Keep reading
- What is a WhatsApp MCP server? How it works and when to use it
- SyncZap vs WhatSync: a WhatSync alternative compared
- Z-API, Evolution API or UAZAPI for ChatGPT? vs SyncZap
- WhatsApp Business API vs linked device: which to use with AI
WhatsApp is a trademark of Meta Platforms, Inc.; SyncZap is not affiliated with, endorsed or sponsored by WhatsApp or Meta, nor by OpenAI (ChatGPT) or Anthropic (Claude). It connects your number as a linked device, without the official WhatsApp Business API. Other trademarks mentioned belong to their owners and are used only to identify the products.