# Wagent > Let your agents work your WhatsApp, only where you allow, and only how you allow. Wagent connects your WhatsApp number to Claude, ChatGPT, n8n and any MCP client. You choose which chats each agent can see and what it may do there. Rules run in Wagent, outside the AI, and anything that needs you waits for your yes. Website: https://wagent.sh/ · App: https://app.wagent.sh · API docs: https://app.wagent.sh/docs · OpenAPI: https://mcp.wagent.sh/v1/openapi.json ## What Wagent is Wagent is a permissions layer between a WhatsApp number and AI agents. It links your number as a device, the same way WhatsApp Web does, and gives each agent a remote MCP server at its own private link. Every tool call is checked before it runs: the always-hidden list, the agent's rights for that chat, its guardrails, and whether a person is replying. Text inside messages reaches agents as data, so a prompt can't talk its way past a rule. Works with: Claude, ChatGPT, Claude Code, Cursor, n8n, Make, Zapier, Any MCP client. ## The problem it solves Your customers, suppliers and deals live in WhatsApp. An agent could help with all of it, but the usual way in is a session that sees every chat and sends as you. So most people say no and keep doing it by hand. | | Today | With Wagent | |---|---|---| | Access | Every chat | Only what you pick | | Sending | As you, unchecked | Waits for your yes | | Record | None | Every action logged | | Stop | Find the login | One tap | ## How it works 1. **Sign up.** Sign up with your email. No password. An agent can also ask for access and send you the request. 2. **Connect your number.** Scan a QR code in WhatsApp's Linked devices, or use a pairing code. Your phone stays the main device. You see the price before you connect. 3. **Choose chats.** Every chat starts Hidden. Pick Hidden, Read, Draft or Send for each chat or label. Family, banks and one-time codes stay hidden. 4. **Connect an agent.** Paste your private link into Claude, ChatGPT, n8n or any MCP client. Approve it with a code we send to your own WhatsApp. ## Levels per chat Levels are presets of separate rights, so read never means send. Sending on its own is turned on one chat at a time, never for everything by default. - **Hidden:** The agent can't tell the chat exists. - **Read:** The agent can read and search the chat, within the history window you set. - **Draft:** The agent writes replies that wait for your approval. - **Send:** The agent sends on its own, inside its guardrails. Family groups, banks and messages with one-time codes are always hidden. No agent and no rule can open them. ## Approvals Every held message shows the recipient, any attachment, the exact text, why the agent wrote it and the rule that held it. Change one word and it needs a fresh yes. If nobody answers in time, it's dropped, not sent. - Approve on the web with one key each: A approve, E edit, S skip, T take over. - Or reply 1 or 2 in your own WhatsApp, in the Message yourself chat. - Messages expire after 10 minutes if you do nothing. ## Rules and guardrails Every tool call is checked before it runs: the always-hidden list, the agent's rights for that chat, its guardrails, and whether a person is replying. Text inside messages reaches agents as data, so a prompt can't talk its way past a rule. - **Codes stay hidden:** One-time codes, card and bank numbers and passwords are removed before any agent sees a message. - **Never message first:** Agents can't start a chat with someone who hasn't written to you. - **Send limits:** 20 sends an hour per agent by default, then a pause and a note to you. - **Quiet hours:** Off until you turn them on. Then sends become drafts in the hours you pick. - **A person comes first:** Turn it on, and when you reply in a chat, agents pause there for as long as you choose. - **Access that ends:** Give an agent 7 or 30 days, and its access ends on its own. - **Messages are data:** Nothing written in a chat can change a rule, a scope or a guardrail. - **Number health:** Each number shows a ban-risk score from 0 to 100, with the reasons. ## Every day - **Inbox:** Queues for owed replies, follow-ups and quiet chats. Switch any chat between "AI drafts" and "I reply". - **Approvals:** Oldest first, with the exact text and recipient. Decide on the web or from your phone. - **Activity:** Every read, draft and send by every agent, with the rule that decided it. Kept 90 days. It's an activity log, not a compliance archive. - **Pause all agents:** One button stops every agent's tool calls. Or send "STOP AGENTS" to yourself in WhatsApp. ## For developers Build on Wagent without holding anyone's WhatsApp session. Every call goes through the same rule check as the app. - A remote MCP server at each agent's private link. - A REST API where every write takes an idempotency key, so a retry never sends twice. - Signed webhooks, retried for 24 hours with the same event id, and Replay from the console. - Number session states, sent as events. - A sandbox with 5 test contacts, where nothing reaches real people. - A wiring test that traces one message end to end, with the time for each step. - connect.js, so your users can connect their own WhatsApp inside your app. The owner gets a link to approve each scope. Until then the agent sees nothing and can send nothing. ## Pricing One price per WhatsApp number. $49 a month per whatsapp number. Prices in US dollars. - A 5-day trial on every new number: 150 messages and 30 number checks, with unlimited API requests. - Nothing is billed until a number connects. - Monthly. No annual lock-in. - Cancel in three clicks, no call. Your plan runs to the end of the period. - A spend cap holds agent sends at 100%, with an email at 80%. - AI features on our key show as AI usage on the same bill. Or add your own key. ## What Wagent won't do - Cold outreach, bulk broadcasts or bought contact lists. - Let agents send everywhere by default. - Execute OTC trades. - Call the activity log a compliance archive. - Promise that any way of connecting is ban-safe. ## FAQ ### Is this the official WhatsApp Business API? No. Wagent links your number as a device, the same way WhatsApp Web does. Your chats stay on your phone and your phone stays the main device. ### Could my number get restricted? It can happen. WhatsApp restricts numbers that look like spam, and a linked device isn't an official business route. Wagent never messages someone who hasn't written first, limits sends per agent and per number, can hold sends at night, and shows a risk score for each number. We don't call any route ban-safe. ### Does my phone need to stay online? No. A linked device keeps working while your phone is off. WhatsApp signs out linked devices when the phone itself isn't used for about two weeks, so open WhatsApp on it now and then. If a number disconnects, agents on it pause and we email you. ### Can an agent read my family chats? Not unless you open them, and family groups, banks and one-time codes can't be opened at all. A hidden chat is invisible to agents: they can't tell it exists. ### What do you store, and for how long? The messages of chats you connect, so agents and the Inbox can work. Message text is kept 90 days by default; you can choose 30 days, 7 days, or not to store it. The activity log is kept 90 days. Your data is never used to train AI models, and you can export everything or delete your workspace at any time. ### Which agents work with it? Claude, ChatGPT, Claude Code, Cursor, n8n, Make, Zapier and any MCP client. Each one gets its own private link and its own rules. Your own code can use the REST API with a key. ### What does it cost? One price per WhatsApp number a month, with a 5-day trial on each new number. See https://wagent.sh/#pricing. ### How do I connect WhatsApp to Claude or ChatGPT? Sign up with your email and scan a QR code in WhatsApp's Linked devices to connect your number. Every chat starts Hidden, so pick Read, Draft or Send for the chats you want to open. Then paste the private link into Claude, ChatGPT or any MCP client, and approve it with a code we send to your own WhatsApp. Until you approve, the agent sees nothing. ### Is Wagent a WhatsApp MCP server? Yes. Each agent gets a remote MCP server at its own private link, so Claude, ChatGPT, Claude Code, Cursor and other MCP clients can work in the chats you allow. Every tool call is checked by Wagent before it runs. For your own code there is a REST API and signed webhooks, behind the same rules. ### Can I use Wagent with n8n, Make or Zapier? Yes. Each workflow tool connects like any other agent, with its own private link and its own rules per chat. A sandbox with 5 test contacts lets you try a workflow before anything reaches real people. ### How is this different from giving an agent my WhatsApp Web login? A WhatsApp Web session shows an agent every chat and lets it send as you, with no record. With Wagent each agent sees only the chats you pick, drafts wait for your yes, and every read, draft and send is logged with the rule that decided it. You can pause one agent, or all of them, from any screen. ## Use cases ### Customer questions: Stop typing the same answers. For small businesses and support teams. Draft replies to the questions you answer all day. Lowest level it needs: Draft. Steps: Customer asks → Agent drafts → You see the exact text → You approve. Limit: Wagent does not write the answers. Your agent does, from what you give it. https://wagent.sh/use-cases/customer-support/ ### Lead follow-up: Follow up with every lead. For teams that sell over WhatsApp. See who is owed a reply and who went quiet. Lowest level it needs: Draft. Steps: Lead writes in → Owed a reply → Follow-up drafted → Quiet chats stay in view. Limit: Agents only reach people who wrote to you first. No cold outreach. https://wagent.sh/use-cases/lead-follow-up/ ### Orders: Turn a chat into a confirmed order. For restaurants, shops and WhatsApp merchants. Turn a messy chat into a recap the customer confirms. Lowest level it needs: Draft. Steps: Order comes in → Details pulled out → You approve the recap → Your flow takes over. Limit: Wagent does not take or confirm payments. A screenshot is not a payment until you check it. https://wagent.sh/use-cases/orders/ ### Routine answers: Answer the easy questions without you. For businesses that get the same questions every day. Let your agent answer the simple questions on its own. Lowest level it needs: Send. Steps: Customer asks → Agent writes the answer → Wagent checks the rules → The reply goes out. Limit: Turn on quiet hours and a send becomes a draft at night; set a money limit and anything over it is held for you. https://wagent.sh/use-cases/routine-answers/ ### Order updates: Keep customers posted on every order. For shops, restaurants and delivery teams. Tell customers where their order is as soon as it changes. Lowest level it needs: Send. Steps: Your system updates → Your flow asks to send → Wagent checks the rules → Customer gets the update. Limit: Your flow decides what is true. Wagent checks who can be messaged, not whether the order really left. https://wagent.sh/use-cases/order-updates/ ### Replies from your agent: Tell your agent. It sends the reply. For busy owners and professionals. Tell your agent what to say and it sends the reply. Lowest level it needs: Send. Steps: You say what to reply → Agent finds the chat → Wagent checks the rules → The reply goes out. Limit: Send is turned on one chat at a time. Every other chat stays as you set it. https://wagent.sh/use-cases/replies-from-your-agent/ ### CRM updates: Keep your CRM in step with WhatsApp. For sales and operations teams. Keep records current with read-only access. Lowest level it needs: Read. Steps: Customer changes something → Signed event sent → Your flow compares → Record stays current. Limit: Wagent never writes to your CRM here. Your flow does, with its own login. https://wagent.sh/use-cases/crm-sync/ ### Find what was agreed: Find what was actually agreed. For owners and professionals. Search allowed chats and see the message itself. Lowest level it needs: Read. Steps: You ask → It searches allowed chats → It returns the message → Gaps are marked. Limit: History can have gaps. A gap marker means messages are missing, not that nothing was said. https://wagent.sh/use-cases/find-agreements/ ### Voice notes and groups: Read voice notes. Catch up on groups. For busy owners and professionals. Read long voice notes and catch up on busy groups. Lowest level it needs: Read. Steps: Voice note arrives → You ask for the point → It transcribes → You check the details. Limit: Names and amounts can be misheard. Check them against the original note. https://wagent.sh/use-cases/voice-notes/ ### Agent builders: Add WhatsApp to your agent. For developers, agencies and automation builders. Add WhatsApp to your product without running sessions. Lowest level it needs: Draft. Steps: Build in the sandbox → Run the wiring test → Users connect → Watch session events. Limit: No connection route is ban-safe, so number health stays visible. https://wagent.sh/use-cases/builders/ ## Get started Start with one number and one agent. Every chat starts hidden. You open them one at a time. 5-day trial on each number. Nothing is billed until a number connects. Sign up: https://app.wagent.sh/signup WhatsApp is a trademark of WhatsApp LLC. Claude, ChatGPT, Cursor, n8n, Make and Zapier are trademarks of their owners. Wagent is not affiliated with or endorsed by any of them.