# WasapFlow Bridge (remote · officialapi.wasapflow.com)

Official WhatsApp Business API for your own CRM or SaaS: docs, numbers, messages, webhooks.

- Trust score: 61/100 (medium)
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-11-05

## Components

- remote · `officialapi.wasapflow.com`: 61/100 (this document), [markdown](https://verifymcp.io/servers/com-wasapflow-bridge/bridge-mcp.md), [page](https://verifymcp.io/servers/com-wasapflow-bridge/bridge-mcp)

## Channel facts

- Endpoint: `https://officialapi.wasapflow.com/bridge/mcp`
- Transports: `streamable-http`
- Auth: `none`
- Version: `1.0.1`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically against the live server, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-11-05.

- **Endpoint Security**: 51/100
  - The endpoint's TLS certificate is valid, in date, and uses a strong key.
  - Authorisation check failed: no authorisation is required to call this server, and it exposes a tool marked destructive (bridge_call_api).
  - HTTPS check failed: the endpoint is reachable over plaintext HTTP.
  - The HSTS (Strict-Transport-Security) header is present.
  - DNSSEC check failed: this domain isn't protected by DNSSEC.
- **Transport & Reachability**: 100/100
  - Verified streamable-http transport via a live MCP handshake.
- **Schema Quality & AI Usability**: 70/100
  - AI-judged instruction clarity (good).
  - Tool/resource definitions use about 1371 tokens (~85/item across 16 items; 16 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 3/100
  - Stability observed for 1 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 94/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 83% of tool parameters carry a description.
- **Tool Safety**: 100/100
  - No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.
  - All 3 tool(s) whose name or description implies an irreversible operation declare an MCP destructiveHint annotation.
  - An AI judge read all 17 captured unit(s) of tool text and found none that tries to manipulate the model reading it.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### How do I install the WasapFlow Bridge MCP server?

WasapFlow Bridge is a hosted endpoint at https://officialapi.wasapflow.com/bridge/mcp, so there is nothing to install locally. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

### Claude

```bash
claude mcp add --transport http com-wasapflow-bridge 'https://officialapi.wasapflow.com/bridge/mcp'
```

### Cursor

```json
{
  "mcpServers": {
    "com-wasapflow-bridge": {
      "url": "https://officialapi.wasapflow.com/bridge/mcp"
    }
  }
}
```

### VS Code

```json
{
  "servers": {
    "com-wasapflow-bridge": {
      "type": "http",
      "url": "https://officialapi.wasapflow.com/bridge/mcp"
    }
  }
}
```

### Codex

```toml
[mcp_servers.com-wasapflow-bridge]
url = "https://officialapi.wasapflow.com/bridge/mcp"
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "com-wasapflow-bridge": {
      "type": "remote",
      "url": "https://officialapi.wasapflow.com/bridge/mcp",
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add com-wasapflow-bridge --url 'https://officialapi.wasapflow.com/bridge/mcp' --transport streamable-http
```

### Hermes

```yaml
mcp_servers:
  com-wasapflow-bridge:
    url: "https://officialapi.wasapflow.com/bridge/mcp"
```

### Netclaw

```json
{
  "McpServers": {
    "com-wasapflow-bridge": {
      "Transport": "http",
      "Url": "https://officialapi.wasapflow.com/bridge/mcp"
    }
  }
}
```

### Vellum

```bash
assistant mcp add com-wasapflow-bridge -t streamable-http -u 'https://officialapi.wasapflow.com/bridge/mcp'
```

### Other

```json
{
  "mcpServers": {
    "com-wasapflow-bridge": {
      "type": "http",
      "url": "https://officialapi.wasapflow.com/bridge/mcp"
    }
  }
}
```

The mcpServers block is a cross-client convention. Remote transports vary, so check your client's docs.

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-11-05 (score 61, +1)

- [functional regression] Schema quality: 1213 → 1371
- [functional improvement] Stability: unverified → 0.03
- [functional] New tool “bridge_send_marketing”

### 2026-11-04 (score 60)

First indexed and scored.

## MCP tools (16)

### `bridge_get_started` (~69 tokens)

How to integrate WasapFlow Bridge

Step-by-step plan to add the official WhatsApp Business API to the user's own CRM/SaaS with WasapFlow Bridge: account, card, keys, webhook, Connect WhatsApp button, first message. Call this first when someone wants to build or connect WhatsApp. No partner key needed.

### `bridge_docs_search` (~76 tokens)

Search the Bridge docs

Search the WasapFlow Bridge API reference, partner guide and changelog. Returns matching sections with a preview. Use before writing integration code. No partner key needed.

Input parameters:

- `query` (string, required): What to look for, e.g. "webhook signature", "send template", "coexistence", "error 131047".

### `bridge_docs_section` (~84 tokens)

Read a Bridge docs section

Return the full text of one section (with its sub-sections) of the WasapFlow Bridge docs, e.g. "Verify Incoming Webhooks", "Send Template Message", "Webhook Event Payloads", "Error Codes". No partner key needed.

Input parameters:

- `doc` (string): Optional: which document.
- `heading` (string, required): Section heading (exact or partial).

### `bridge_list_numbers` (~34 tokens)

List connected WhatsApp numbers

List the WhatsApp Business Accounts (client numbers) registered to this partner, with status.

Input parameters:

- `limit` (integer)

### `bridge_number_status` (~53 tokens)

Phone number status & quality

Live status of a number from Meta: verified name, quality rating, messaging limit, name status.

Input parameters:

- `waba_id` (string, required): WhatsApp Business Account ID registered to your partner account (see bridge_list_numbers).

### `bridge_connect_link` (~80 tokens)

Create a Connect WhatsApp link

Create a short-lived (30 min) link that a business opens to connect its WhatsApp number through Meta Embedded Signup (Coexistence supported). Share the returned connect_url with the business owner.

Input parameters:

- `display_name` (string): Business name shown on the page.
- `state` (string): Your own client id, echoed back in the onboarding webhook.

### `bridge_send_text` (~109 tokens)

Send a WhatsApp text message

Send a text message from a connected number. Free-form text only reaches people who messaged that number in the last 24 hours; otherwise use bridge_send_template. This sends a real message.

Input parameters:

- `text` (string, required): Message text.
- `to` (string, required): Recipient phone in international format without + (e.g. 60123456789) or a BSUID.
- `waba_id` (string, required): WhatsApp Business Account ID registered to your partner account (see bridge_list_numbers).

### `bridge_send_template` (~123 tokens)

Send a WhatsApp template message

Send an approved template (works outside the 24-hour window). components follows the Meta Cloud API format. This sends a real message and Meta may charge for it.

Input parameters:

- `components` (array): Optional Meta template components (header/body/button parameters).
- `language` (string, required): Template language code, e.g. en_US, ms.
- `name` (string, required): Template name.
- `to` (string, required): Recipient phone in international format without +.
- `waba_id` (string, required): WhatsApp Business Account ID registered to your partner account (see bridge_list_numbers).

### `bridge_send_marketing` (~158 tokens)

Send a marketing template (Marketing Messages API)

Send an approved MARKETING template through Meta's Marketing Messages API (quality-based delivery, marketing metrics). Not onboarded yet? Meta falls back to Cloud API unless product_policy is STRICT. This sends a real message and Meta charges for it.

Input parameters:

- `components` (array): Optional Meta template components.
- `language` (string, required): Template language code, e.g. en_US, ms.
- `name` (string, required): Marketing template name.
- `product_policy` (string): Optional. STRICT = never fall back to Cloud API.
- `to` (string, required): Recipient phone in international format without +, or a BSUID.
- `waba_id` (string, required): WhatsApp Business Account ID registered to your partner account (see bridge_list_numbers).

### `bridge_list_templates` (~45 tokens)

List message templates

List the message templates of a number with their approval status.

Input parameters:

- `waba_id` (string, required): WhatsApp Business Account ID registered to your partner account (see bridge_list_numbers).

### `bridge_failed_webhooks` (~43 tokens)

Webhooks that failed to reach your server

Webhook events Bridge could not deliver to your webhook URL (with the error). Use when incoming messages are missing in the CRM.

Input parameters:

- `limit` (integer)

### `bridge_retry_webhooks` (~53 tokens)

Redeliver failed webhooks

Redeliver one failed webhook event (event_id) or all of them (omit event_id) after the webhook endpoint is fixed.

Input parameters:

- `event_id` (string): Optional event id from bridge_failed_webhooks.

### `bridge_usage` (~24 tokens)

Bridge plan & usage

Current Bridge plan: active WhatsApp numbers, slots and the monthly Bridge fee.

### `bridge_open_ticket` (~119 tokens)

Open a support ticket

Open a WasapFlow support ticket. Include what happened, when (with timezone), the exact error (Meta code, fbtrace_id), what was tried and the business impact.

Input parameters:

- `category` (string)
- `diagnostics` (object): Optional raw error JSON / sample request (max 20 KB).
- `message` (string, required): Full details.
- `priority` (string)
- `subject` (string, required): Short summary, max 200 characters.
- `waba_id` (string): Optional: the affected number's WABA ID.

### `bridge_list_tickets` (~24 tokens)

List support tickets

List support tickets and replies status.

Input parameters:

- `status` (string)

### `bridge_call_api` (~132 tokens)

Call any Bridge API endpoint

Call any WasapFlow Bridge endpoint not covered by the other tools (see bridge_docs_search for paths). Irreversible endpoints need {"confirm": true} in the body. Confirm with the user before any call that sends, deletes or changes something.

Input parameters:

- `body` (object): Optional JSON body.
- `method` (string, required)
- `path` (string, required): Path after /bridge/v1, e.g. /broadcasts or /templates/order_confirmed.
- `query` (object): Optional query string parameters.
- `waba_id` (string): Optional x-waba-id for number-scoped endpoints.

## Diagnostics

Captured diagnostic sections: TLS, DNSSEC, Authorisation, Transports. The full working is on the page: https://verifymcp.io/servers/com-wasapflow-bridge/bridge-mcp#diagnostics

## Score history

- 2026-11-05: 61
- 2026-11-04: 60

## Common questions

### What is the WasapFlow Bridge MCP server?

WasapFlow Bridge is an MCP server listed in the public MCP registry as com.wasapflow/bridge. Official WhatsApp Business API for your own CRM or SaaS: docs, numbers, messages, webhooks. This page covers its hosted endpoint (https://officialapi.wasapflow.com/bridge/mcp).

### Is the WasapFlow Bridge MCP server safe to use?

WasapFlow Bridge scores 61 out of 100 on VerifyMCP. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

### What tools does the WasapFlow Bridge MCP server expose?

WasapFlow Bridge exposes 16 tools: bridge_get_started, bridge_docs_search, bridge_docs_section, bridge_list_numbers, bridge_number_status, and 11 more. Their descriptions and schemas cost roughly 1,226 tokens of context every time the server is loaded.

### Does the WasapFlow Bridge MCP server require authentication?

No. We connected to WasapFlow Bridge without credentials and it answered, so anything it exposes is reachable by anyone who knows the address.

### Is the WasapFlow Bridge MCP server still maintained?

WasapFlow Bridge is still listed as active in the MCP registry. We last reached this channel on 5 November 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

## Links

- Remote endpoint: https://officialapi.wasapflow.com/bridge/mcp
- Repository: https://github.com/kobaranteguh/whatsapp-crm-starter
- Website: https://wasapflow.com/
- Changelog RSS feed: https://verifymcp.io/servers/com-wasapflow-bridge/bridge-mcp.xml
- Changelog JSON feed: https://verifymcp.io/servers/com-wasapflow-bridge/bridge-mcp.json
- HTML version of this page: https://verifymcp.io/servers/com-wasapflow-bridge/bridge-mcp