Luke Harries built a WhatsApp MCP server over a Saturday with Cursor and Claude 3.5, letting AI agents read messages from a local SQLite copy and send through WhatsApp Web.
Luke Harries argues most MCP vulnerabilities sit in the protocol itself and calls for a split between read-only tools and tools that create or update data.