io.github.Kaption-AI/mcp-extension

What it mainly works on, as our AI model read its tool descriptions: accounts and data in outside web services; files and code on the machine it runs on.

6 of 18 tools are described as changing something (creating, editing, deleting, sending or running).

• queryon 36 other serversreads or searches

  “Query WhatsApp data: conversations, contacts, messages, transcriptions, labels, and communities.”

  Publisher declares: read-only yes · open-world yes

  15 inputs

  • querystring“Text to search for (names, messages, transcriptions)”
  • idstring“Look up a specific conversation, contact, or label by ID”
  • entitystring“Entity type to query.”
  • limitnumber“Max results (default 25, max 5000)”
  • unreadboolean“Only return conversations with unread messages”
  • labelstring“Filter conversations by label name or ID (Business accounts)”
  • liststring“Filter conversations by list name or ID (Personal accounts)”
  • communitystring“Filter conversations by community name or ID”
  • groupstring“Filter contacts by group ID — only return contacts that are members of this group”
  • exclude_archivedboolean“Exclude archived conversations from listings (default true)”
  • exclude_mutedboolean“Exclude muted conversations from listings (default false)”
  • beforestring“Return messages before this ISO 8601 datetime (e.g.”
  • afterstring“Return messages after this ISO 8601 datetime (e.g.”
  • include_participantsboolean“Include group participants in results.”
  • target_sessionstring“Session ID to target a specific WhatsApp account.”
• summarize_conversationreads or searches

  “Get or generate a summary of a conversation”

  Publisher declares: read-only yes · open-world yes

  3 inputs, 1 required

  • conversation_idstringrequired“The conversation ID”
  • message_countnumber“Number of messages to use for summary generation (default 50, max 500)”
  • target_sessionstring“Session ID to target a specific WhatsApp account”
• manage_labelson 1 other servercreates or changes datadescribed as changing data

  “Manage WhatsApp Business labels.”

  Publisher declares: read-only no · destructive yes · idempotent no · open-world yes

  4 inputs, 1 required

  • actionstringrequired“Label action to perform”
  • label_namestring“Label name (for add/remove/create/delete)”
  • label_idstring“Label ID (alternative to label_name for add/remove/delete)”
  • conversation_idstring or array“Conversation ID or array of IDs (required for add/remove)”
• manage_noteson 1 other servercreates or changes datadescribed as changing data

  “Manage contact notes.”

  Publisher declares: read-only no · destructive no · idempotent yes · open-world yes

  3 inputs, 2 required

  • actionstringrequired“Note action to perform”
  • contact_idstringrequired“The contact ID”
  • notestring“Note text (required for "set" action)”
• download_mediaon 4 other serversreads or searches

  “Download media content (image, video, audio, document, sticker) from a WhatsApp message.”

  Publisher declares: read-only yes · open-world yes

  3 inputs, 2 required

  • message_idstringrequired“The message ID (from query results)”
  • conversation_idstringrequired“The conversation ID containing the message”
  • target_sessionstring“Session ID for multi-account routing”
• manage_chatcreates or changes datadescribed as changing data

  “Manage chat state: archive, unarchive, mark as read/unread, pin, unpin, mute, unmute, set/clear draft.”

  Publisher declares: read-only no · destructive no · idempotent no · open-world yes

  5 inputs, 2 required

  • actionstringrequired“Chat action to perform”
  • conversation_idstringrequired“The conversation ID”
  • mute_durationstring“Mute duration (only for "mute" action).”
  • textstring“Draft text (required for "set_draft" action)”
  • target_sessionstring“Session ID for multi-account routing”
• manage_reminderscreates or changes datadescribed as changing data

  “Manage personal reminders.”

  Publisher declares: read-only no · destructive yes · idempotent no · open-world yes

  7 inputs, 1 required

  • actionstringrequired“Reminder action to perform”
  • filterstring“Filter for list action.”
  • idstring“Reminder ID (required for get/update/delete/complete/uncomplete)”
  • titlestring“Reminder text (required for create, optional for update)”
  • datetimestring“ISO 8601 datetime for the reminder (required for create, optional for update)”
  • notification_typestring“How to notify.”
  • target_sessionstring“Session ID for multi-account routing”
• manage_scheduled_messagescreates or changes datadescribed as changing data

  “Schedule WhatsApp messages to be sent automatically at a specific time, in one of two modes: bot (default) - sent from Kaption's WhatsApp number, not the user's own.”

  Publisher declares: read-only no · destructive yes · idempotent no · open-world yes

  9 inputs, 1 required

  • actionstringrequired“Scheduled message action to perform (cancel, remove and send_now need mode "local")”
  • modestring“"bot" (default): sent from Kaption's WhatsApp number.”
  • filterstring“Filter for list action.”
  • idstring“Scheduled message ID (required for get/update/delete/cancel/remove/send_now)”
  • conversation_idstring“Chat to send the message to (required for create): a person, or a group with mode "local"”
  • messagestring“Message text to send (required for create, optional for update).”
  • datetimestring“ISO 8601 datetime when the message should be sent (required for create, optional for update)”
  • notification_typestring“Bot mode only.”
  • target_sessionstring“Session ID for multi-account routing”
• manage_listscreates or changes datadescribed as changing data

  “Manage personal chat lists (custom lists).”

  Publisher declares: read-only no · destructive yes · idempotent no · open-world yes

  5 inputs, 1 required

  • actionstringrequired“List action to perform”
  • idstring“List ID (for get/edit/delete/add_chat/remove_chat)”
  • namestring“List name (for create/edit, or to resolve by name)”
  • conversation_idstring or array“Chat ID or array of IDs to add/remove”
  • target_sessionstring“Session ID for multi-account routing”
• list_contactson 24 other serversreads or searches

  “List WhatsApp contacts from the encrypted DBR3 cache (no network).”

  Publisher declares: read-only yes · open-world no

  4 inputs

  • querystring“Case-insensitive substring matched against name, pushname, phone, and JID”
  • limitnumber“Max contacts to return (default 50, max 500)”
  • offsetnumber“Skip N contacts for pagination (default 0)”
  • is_my_contactboolean“If true, only contacts saved in the user address book.”
• get_contacton 46 other serversreads or searches

  “Look up a single WhatsApp contact by JID or phone number.”

  Publisher declares: read-only yes · open-world no

  2 inputs

  • jidstring“Full WhatsApp JID (e.g.”
  • phonestring“Phone number — leading "+" and "00" are stripped during matching”
• get_contact_groupsreads or searches

  “List the WhatsApp groups a specific contact participates in.”

  Publisher declares: read-only yes · open-world no

  1 input, 1 required

  • jidstringrequired“Contact JID — must be the full @c.us form (phone alone not accepted here)”

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-10-23.

The registry verifies a package once, when it is published, and does not re-check it. A difference below is about the listing, not a judgement of the publisher.