MCP server
WhatsApp MCP: a remote, hosted server with OAuth
A hosted WhatsApp MCP server: OAuth 2.1 with PKCE, separate read and send scopes, sending with confirmation and idempotency. For ChatGPT, Claude, Cursor and Codex.
MCP (Model Context Protocol) is the open standard that lets AI assistants call external tools. SyncZap runs a remote WhatsApp MCP server: instead of running a local project that keeps your WhatsApp session on your computer, you point your MCP client at the SyncZap URL and authorize in the browser.
Each client signs in through OAuth 2.1 with PKCE, always in an organization you choose. The WhatsApp session stays only on the sync server and never goes to the MCP client, the browser or the panel.
How it works
- 1
Create your account
Start the free trial: 7 days with every feature unlocked.
- 2
Connect WhatsApp with the QR code
On your phone, open WhatsApp → Linked devices → Link a device and scan the code in the panel.
- 3
Choose the chats
Turn on sync for the chats that may be read, or switch on Sync all conversations.
- 4
Point your MCP client at SyncZap
Add a remote MCP server with the URL below, HTTP transport and OAuth authentication. In Claude Code: claude mcp add --transport http synczap followed by the URL. The SyncZap screen opens in the browser so you can pick the organization.
https://synczap.ai/mcp
Server tools
- Read and search (whatsapp:read scope): get_account_context, list_conversations, get_messages, search_messages, list_unanswered_conversations, list_contacts, search_attachments and read_attachment.
- Drafting: prepare_message builds the message for review and sends nothing.
- Sending with confirmation (whatsapp:send scope, owner or admin only): send_message, with an idempotency key, and get_send_status.
- Actions without confirmation: mark_as_read and react_to_message, only in synced chats.
Hosted instead of local
Local WhatsApp MCP projects mean keeping a process running, storing the session on your disk and configuring each client. SyncZap runs sync on the server, isolates each organization with its own database and session, and offers the same server to every client your team authorizes: ChatGPT, Claude, Claude Code, Cursor, Codex and others that support remote MCP and OAuth.
For agents, /llms.txt and /llms-full.txt describe the tools and sending rules. From the Max plan up, there are also REST API keys and signed webhooks.
Privacy and control
- Only chats with active sync are recorded, shown and read by assistants.
- Photos, voice notes, videos and documents stay on your phone. When you open an attachment or ask for an AI reading, SyncZap downloads a temporary copy, deleted from the server 24 hours after the download. Transcripts and readings are kept as text.
- Nothing is sent without your confirmation: the assistant shows the recipient and text first. Marking as read and reacting with an emoji are the only actions without confirmation.
- Each organization is isolated, and WhatsApp credentials never leave the sync server.
Details on the security page.
Plans and pricing
After the trial, pricing is per organization, with one WhatsApp connected; about 20% less per month on the annual plan.
- Plus$10/moup to 2 members, groups and 1,000 older messages
- Pro$18.99/moup to 5 members, 120 voice minutes and 300 images a day by AI
- Max$27.99/moup to 10 members, 120 voice minutes and 300 images a day by AI, full history, automatic transcription, API and webhooks
- Business$53.99/moeverything in Max, unlimited members, 500 voice minutes and 1,000 images a day by AI, up to 5 numbers, priority support
Prices in US dollars (USD). Compare plans
Frequently asked questions
What is a WhatsApp MCP?
It is an MCP server that exposes WhatsApp chats as tools for AI assistants. SyncZap's is remote and hosted: the client connects by URL and authorizes with OAuth.
Do I need an API key to use the MCP?
No. MCP clients use OAuth, with no key or secret to copy. API keys exist for REST integrations, from the Max plan up.
Which scopes are there?
whatsapp:read, to read synced chats, and whatsapp:send, to send and act. Only an owner or admin can grant sending.
How does the server prevent duplicate sends?
Every send has an idempotency key: repeating the same key does not send the message twice, and an unknown result never triggers a new automatic send.
Can message content give orders to the agent?
SyncZap delivers names, messages and captions as third-party data, never as instructions, and sends still require your confirmation.
Is this the official WhatsApp API?
No. SyncZap connects your number as a linked device, like WhatsApp Web, and is not Meta's WhatsApp Business Platform.
Want to see it before trying? Watch the demo video or read the guides for ChatGPT and Claude.
See also
WhatsApp is a trademark of Meta Platforms, Inc.; SyncZap is not affiliated with, endorsed or sponsored by WhatsApp or Meta, nor by OpenAI (ChatGPT) or Anthropic (Claude). It connects your number as a linked device, without the official WhatsApp Business API.