Sinores MCP WhatsApp

A self-hosted WhatsApp gateway for AI agents

Connect a WhatsApp number to any MCP-compatible agent. Send messages, read history, and manage channels from one local application.

Get started · Connect an agent · How it works · Configuration

Sinores Open turns a WhatsApp number into tools that AI agents and applications can use. It combines a web dashboard, REST API, MCP server, WhatsApp connection, and local database in a single Node.js application.

One process. One port. No Docker, Postgres, or Redis required.

Features

Quick start

Requirements

• Node.js 22 or newer
• A WhatsApp account that can link a companion device

1. Install

git clone https://github.com/karl4th/sinores-wp-mcp.git
cd sinores-wp-mcp
npm install
cp .env.example .env.local

2. Create an admin token

openssl rand -hex 32

Add the generated value to .env.local:

ADMIN_TOKEN=your-generated-token

3. Start Sinores

npm run dev

Open http://localhost:3000, sign in with your admin token, and create a channel. Then scan its QR code from:

WhatsApp → Linked devices → Link a device

npm run build
npm start

Connect an AI agent

Sinores exposes a Streamable HTTP MCP endpoint at:

http://localhost:3000/api/mcp

Add the endpoint and admin token to your MCP client:

{
  "mcpServers": {
    "sinores": {
      "url": "http://localhost:3000/api/mcp",
      "headers": {
        "Authorization": "Bearer YOUR_ADMIN_TOKEN"
      }
    }
  }
}

The agent receives four tools:

Start with list_channels to get a channelId, then use that ID with the other tools.

How it works

flowchart LR
    Agent["AI agent"] -->|"MCP over HTTP"| Sinores["Sinores Open"]
    App["Your application"] -->|"REST API"| Sinores
    Dashboard["Web dashboard"] --> Sinores
    Sinores --> WhatsApp["WhatsApp via Baileys"]
    Sinores --> Database[("SQLite")]

Sinores keeps the entire stack deliberately small:

• Next.js serves the dashboard, REST routes, and MCP endpoint.
• Baileys manages WhatsApp companion-device sessions.
• SQLite stores channels and message history in ./data.
• The Model Context Protocol SDK exposes agent tools from the same application.

Configuration

See .env.example for a ready-to-copy configuration file.

Open source or hosted

Security

• Treat ADMIN_TOKEN as a password. Anyone who has it can access every connected channel.
• Never commit .env.local, the data directory, or Baileys session credentials.
• Use HTTPS and set COOKIE_SECURE=true when exposing an instance outside your local network.
• Use a separate WhatsApp number for automation whenever possible.

[!WARNING] Sinores uses Baileys, an unofficial WhatsApp Web API. It is not affiliated with or endorsed by WhatsApp or Meta. Automated activity may lead to account restrictions. Review WhatsApp's terms and use the project responsibly.

Contributing

Issues and pull requests are welcome. If you found a bug, have an idea, or built something interesting with Sinores, open an issue.

If Sinores helps you build something useful, consider starring the repository. It helps other developers discover the project.

License

Distributed under the MIT License.

Built for developers connecting AI agents to the real world.

Website · Report a bug · Give it a star