WhatsApp Business

The WhatsApp Business connector lets AI agents send messages and media, manage message templates, and update the business profile — all through the WhatsApp Cloud API using OAuth 2.0. Your credentials are stored encrypted in MCPGate's vault and are never exposed to the AI client.

24-hour messaging window

WhatsApp Business only allows free-form text messages within 24 hours of the last customer message. Outside that window, you must use a pre-approved template via whatsapp_send_template. MCPGate does not enforce this window — your application logic must handle it.

Required scopes#

MCPGate requests the following WhatsApp Cloud API OAuth scopes when you connect a WhatsApp Business account.

Scope	Purpose
whatsapp_business_messaging	Send messages and media to users
whatsapp_business_management	Manage templates and business profile

Tool reference#

The WhatsApp Business connector exposes 9 tools: 3 read, 5 write, and 1 delete. Use the MCP Apps page to enable or disable individual tools per app, and the Guardrails page to add fine-grained rules on top.

Tool	Category	Description
whatsapp_get_message_status	read	Get the delivery status of a sent WhatsApp message
whatsapp_list_templates	read	List all message templates for the WhatsApp Business account
whatsapp_get_business_profile	read	Get the WhatsApp Business profile information
whatsapp_send_message	write	Send a WhatsApp text message to a phone number
whatsapp_send_template	write	Send a pre-approved WhatsApp template message
whatsapp_send_media	write	Send a media message (image, video, document, or audio) via WhatsApp
whatsapp_create_template	write	Create a new WhatsApp message template for approval
whatsapp_update_business_profile	write	Update the WhatsApp Business profile information
whatsapp_delete_template	delete	Delete a WhatsApp message template

Common guardrail recipes#

Send-only access#

Enable read tools plus whatsapp_send_message, whatsapp_send_template, and whatsapp_send_media. Deny whatsapp_create_template, whatsapp_update_business_profile, and whatsapp_delete_template. This lets the agent communicate with users without being able to change account-level settings.

Template-only messaging#

Enable only whatsapp_list_templates and whatsapp_send_template. Deny whatsapp_send_message and whatsapp_send_media. This ensures all outgoing messages use pre-approved templates, which is required for proactive outreach outside the 24-hour window.

Restrict recipients#

Apply the allow_values template to whatsapp_send_message, whatsapp_send_template, and whatsapp_send_media, targeting the to field. Provide a list of allowed phone numbers in E.164 format so the agent can only message approved contacts.

Troubleshooting#

Message rejected with error 131047 — The recipient has not messaged your business in the last 24 hours and you are not using a template. Switch to whatsapp_send_template with a pre-approved template.
Template creation pending approval — New templates created via whatsapp_create_templatego through Meta's review process (typically minutes to hours). The template cannot be sent until its status is APPROVED.
Media send fails — whatsapp_send_mediarequires a publicly accessible media URL. Ensure the file is reachable by Meta's servers without authentication.