1. Conduid
  2. Communication
  3. Pons
MCP server · Communication

Pons

Open-source WhatsApp Business API bridge with MCP server

Unclaimed last commit 6 months ago comms
54Fair

Scored 7 days ago · breakdown

About Pons

Pons is an MCP server published by NicolaiSchmid in the Communication category: open-source WhatsApp Business API bridge with MCP server.

The repository has 2 stars and 1 forks, with the last commit 6 months ago. Six months or more without a commit doesn't mean the server is broken, but check the open issues before depending on it in production.

Install

From source
git clone https://github.com/NicolaiSchmid/pons

This server has no ConduID identity, so agent calls to it are not receipted. Pin the version you install and review the source before granting it credentials.

Tools (8)

get_conversationread

Parameters not published.

list_conversationsread

Parameters not published.

list_templatesread

Parameters not published.

mark_as_readwrite

Parameters not published.

search_messagesread

Parameters not published.

send_reactionwrite

Parameters not published.

send_templatesend

Parameters not published.

send_textsend

Parameters not published.

Ask AI

✦

Ask AI about Pons

Powered by Claude · Grounded in docs

I know everything about Pons. Ask me about installation, configuration, usage, or troubleshooting.

Security checks

Static checks derived from the repository 15 hours ago. Heuristics on the source, not an audit.

  • ✓README presentThe repository ships documentation.
  • !License declaredNo license file. Legally you have no right to use it in a product.
  • !Tests presentNo tests found. Behaviour changes may go unnoticed between versions.
  • ✓Dependencies pinnedA lockfile pins dependency versions.
  • ✓No dynamic code executionSource scan found no eval, dynamic Function, or shell execution.
  • !Scoped permissionsDoesn't declare a permission scope. Assume it can do anything its process can.

README

 ┌─────────────────────────────────────────┐
 │                                         │
 │   ██████╗  ██████╗ ███╗   ██╗███████╗   │
 │   ██╔══██╗██╔═══██╗████╗  ██║██╔════╝   │
 │   ██████╔╝██║   ██║██╔██╗ ██║███████╗   │
 │   ██╔═══╝ ██║   ██║██║╚██╗██║╚════██║   │
 │   ██║     ╚██████╔╝██║ ╚████║███████║   │
 │   ╚═╝      ╚═════╝ ╚═╝  ╚═══╝╚══════╝   │
 │                                         │
 └─────────────────────────────────────────┘

WhatsApp in your terminal. Messages in your AI.

Bridge the WhatsApp Business Cloud API to any MCP-compatible client. Send and receive messages from Claude, Cursor, or your own tools.

pons.chat · Docs · Report Bug · Request Feature


The Problem

WhatsApp Business has a powerful API, but it's locked behind REST calls, webhook plumbing, and token management. There's no way to plug it into the tools you actually use — AI assistants, dev environments, automation pipelines.

Pons (Latin for "bridge") connects WhatsApp to the Model Context Protocol, so your AI assistant can read, search, and send WhatsApp messages as naturally as it reads files or searches the web.

What It Does

  • Full WhatsApp inbox — real-time web UI with conversations, media, delivery receipts
  • MCP server — expose WhatsApp as tools for Claude Desktop, Cursor, or any MCP client
  • Multi-tenant — multiple WhatsApp Business Accounts, multiple users per account
  • Media handling — images, videos, documents auto-downloaded to Convex storage (Meta URLs expire in 5 min)
  • 24h window tracking — know when you can send free-form vs. template-only messages
  • API key management — scoped keys for different clients with expiration

Tech Stack

Layer Choice
Framework Next.js 16 (App Router, Turbopack)
Backend Convex (database, auth, file storage, scheduled actions)
Auth Convex Auth (Google OAuth)
MCP @modelcontextprotocol/sdk — Streamable HTTP transport
UI shadcn/ui + Tailwind CSS v4
Domain pons.chat
Hosting Vercel (FRA1) + Convex Cloud (eu-west-1)

Quick Start

Prerequisites

1. Install & configure

git clone https://github.com/NicolaiSchmid/pons.git
cd pons
pnpm install

# Start Convex dev (opens browser for auth on first run)
npx convex dev

# In another terminal
pnpm run dev:next

2. Connect WhatsApp

  1. Create a Meta Business App → add WhatsApp product → get test phone number
  2. Sign in to Pons at http://localhost:3000
  3. Create an Account with your WABA ID, Phone Number ID, Access Token, and App Secret
  4. Set webhook URL in Meta to https://your-domain.com/api/webhook
  5. Use the generated Webhook Verify Token to verify

3. Connect your AI

Go to API Keys in the dashboard, create a key, and add to your MCP config:

{
  "mcpServers": {
    "pons": {
      "url": "https://your-pons-domain.com/api/mcp",
      "headers": {
        "Authorization": "Bearer pons_your_api_key_here"
      }
    }
  }
}

MCP Tools

Tool Scope Description
list_conversations read List recent conversations with preview
get_conversation read Get full conversation with messages
search_messages read Search messages by content
send_text send Send a text message
send_template send Send a template message (for closed windows)
list_templates read List available message templates
mark_as_read write Mark conversation as read
send_reaction write React to a message with emoji

Scopes: read (view), write (mark read, react), send (send messages). Assign per key.

Architecture

┌──────────────┐     ┌──────────────┐     ┌──────────────┐
│              │     │              │     │              │
│  Claude /    │────▶│  Pons MCP    │────▶│   Convex     │
│  Cursor      │ MCP │  Endpoint    │     │   Backend    │
│              │     │  (Next.js)   │     │              │
└──────────────┘     └──────┬───────┘     └──────┬───────┘
                            │                    │
                     ┌──────┴───────┐     ┌──────┴───────┐
                     │              │     │              │
                     │  Pons Web    │     │  Meta Graph  │
                     │  Dashboard   │     │  API v22.0   │
                     │              │     │              │
                     └──────────────┘     └──────────────┘

Data Model

Account (WhatsApp Business Account)
├── AccountMember (owner / admin / member)
├── Contact (customer phone numbers)
│   └── Conversation (thread with a contact)
│       └── Message (text, media, location, reaction...)
├── Template (pre-approved message templates)
├── ApiKey (scoped MCP authentication)
└── WebhookLog (raw payloads for debugging)

Project Structure

pons/
├── convex/                 # Backend
│   ├── schema.ts           # Database schema
│   ├── auth.ts             # Convex Auth (Google OAuth)
│   ├── accounts.ts         # Account + member management
│   ├── conversations.ts    # Conversation queries
│   ├── messages.ts         # Message CRUD
│   ├── mcp.ts              # MCP queries + API key management
│   ├── mcpNode.ts          # Crypto operations (Node.js runtime)
│   ├── webhook.ts          # Webhook ingestion + media download
│   └── whatsapp.ts         # Meta Graph API actions
├── src/
│   ├── app/
│   │   ├── api/mcp/        # MCP HTTP endpoint
│   │   ├── api/webhook/    # WhatsApp webhook handler
│   │   └── page.tsx        # Landing + auth gate
│   ├── components/
│   │   ├── Dashboard.tsx           # Main shell
│   │   ├── ConversationList.tsx    # Sidebar
│   │   ├── MessageThread.tsx       # Chat view
│   │   ├── AccountSettings.tsx     # Settings + member management
│   │   ├── ApiKeyManager.tsx       # API key CRUD
│   │   ├── AccountSelector.tsx     # Account switcher
│   │   └── SetupAccount.tsx        # Onboarding
│   └── components/ui/      # shadcn/ui primitives
├── middleware.ts            # Auth middleware (webhook excluded)
└── vercel.json             # Vercel config (FRA1 region)

Development

pnpm dev              # Convex + Next.js in parallel
pnpm run check:write  # Biome lint + format (auto-fix)
pnpm run typecheck    # TypeScript check
pnpm run build        # Production build

Deployment

  1. Connect GitHub repo to Vercel
  2. Set environment variables: NEXT_PUBLIC_CONVEX_URL, CONVEX_DEPLOY_KEY
  3. Build command is pre-configured: pnpm convex deploy --cmd 'pnpm run build'
  4. Disable Vercel Deployment Protection for production (webhook needs unauthenticated access)

License

MIT


Built by nicolaischmid.com

README fetched from the repository 15 hours ago. The original is authoritative.

Questions

About Pons

How do I install Pons?

No package has been published for this server, so install it from source: clone the repository and follow its README.

Is Pons safe to use with an AI agent?

Its trust score is 54 out of 100 (fair). It passes 3 of the 6 static security checks run so far; the failures are listed above. It has no ConduID identity yet, so agent calls to it are not receipted.

Is Pons still maintained?

The last commit was 6 months ago and 1 open issues. That's long enough that you should check whether the maintainer is responding to issues before depending on it.