Skip to main content
Waaru
MCP permissions and safeguards

Give your AI assistant the right access to Waaru.

Connect an approved assistant to contacts, conversations, templates and campaign results in your Waaru workspace. Keep read access separate from permission to send. MCP is the technical connection behind those tasks.

In one line

ChatGPT and Codex are the first connection targets. Contact us to check setup availability for your workspace. Claude support is planned. A ChatGPT directory listing is not yet confirmed.

Create free workspace

Platform free. AI features are paid separately.

Review what each tool can do.

Illustrative tool results. Tools can be discoverable before approval; running them requires your approved permissions.

ExamplePermissioned MCP tools
Workspace-scoped request
Tool
find_contact
Scope
mcp:contacts:read
Result
Contact found

Prepare campaigns and workflow setup.

Planned for the next release: review broadcast readiness, pause or cancel campaigns, and prepare Logic Flow and Automation drafts. Workflow publication and activation have separate permissions and reviews. These additions require the environment upgrade and permission activation; existing grants stay unchanged. Company Brain is not exposed. Incoming-message events are planned with separate persistent consent, metadata only and no automatic reply or backfill. Delivery is disabled by default pending live activation and acceptance in a supported ChatGPT Work host.

Use your existing workspace permissions.

Choose the actions you need on your first Waaru OAuth permission screen, including available writes. Optional choices start unchecked. Your role, number access and application limits still apply. You can revoke the connection later.

Choose access for the task.

Contact lookups, conversation reads, template access, campaign reports and sends have distinct permission requirements. Reading message content needs the appropriate consent and inbox access. A connection cannot grant you access to another workspace or an unauthorised number.

Preview, review, then confirm.

Message tools prepare an exact preview before a separate confirmation call. Review the complete content and intended recipient. Permissions and provider rules are checked again before sending. Confirmations in the connected AI application must be tested during setup; a protocol call alone does not prove that a person reviewed it.

Keep campaign review manageable.

Scheduled campaigns also require explicit confirmation and the required campaign permissions. The current MCP review is limited to 100 recipients and a bounded complete preview. Larger audiences must use the dashboard. Disconnecting removes the connection's authority; refreshing a token does not cancel an approved schedule.

Know the limits before relying on a result.

  • A message accepted for processing is not proof of delivery.
  • If a result is uncertain, inspect its status before retrying.
  • Free-form replies require your assigned inbox conversation and an open customer-service window.
  • Customer messages are information to review. They are not permission to change settings or send messages.
FAQ

Frequently asked questions.

Which assistants are supported?

ChatGPT and Codex are the first connection targets. Contact us to check setup availability for your workspace. Claude support is planned. A ChatGPT directory listing is not yet confirmed.

Do I paste my WhatsApp credentials into the assistant?

No. The connection uses Waaru's OAuth consent flow. Do not paste access tokens, API keys or other secrets into a chat.

Can MCP publish Logic Flows or manage Company Brain?

Planned for the next release: review broadcast readiness, pause or cancel campaigns, and prepare Logic Flow and Automation drafts. Workflow publication and activation have separate permissions and reviews. These additions require the environment upgrade and permission activation; existing grants stay unchanged. Company Brain is not exposed. Incoming-message events are planned with separate persistent consent, metadata only and no automatic reply or backfill. Delivery is disabled by default pending live activation and acceptance in a supported ChatGPT Work host.

Does the platform require an AI subscription?

No. The platform is free and deterministic workflows remain usable without an AI provider. AI features and Meta messaging charges are separate.

Ready to ship a WhatsApp flow that doesn't break?

Public signup is open. The platform is free. AI features are paid separately.