MCP servers › net.letsbot › mcp

MCP server · registry snapshot 2026-11-01 · last tested 2026-11-01

net.letsbot/mcp

LetsBot — the publisher's title

by letsbot.net · domain (the registry's namespace rule)Website ↗

WhatsApp Business messaging, live chat, chatbots, campaigns and CRM for a LetsBot workspace. — the publisher's description

1 of 2 record checks metRead-only · tools listed 2026-11-01version 1.0.0streamable HTTP95 tools

Summary

net.letsbot/mcp is a remote MCP server listed in the official MCP registry at version 1.0.0, under the namespace of the domain letsbot.net. On 2026-11-01 ProtocolProbe connected to it in read-only mode and read its inventory: 95 tools, 0 resources and 0 prompts.

Record checks

1 of 2 record checks met · 7 do not apply

met: Registry entry is active and says how to run it
not met: Source repository link opens
not applicable: Repository is not archived
not applicable: Code pushed to the repository in the 90 days before our check
not applicable: Repository publishes a security policy (SECURITY.md)
not applicable: Package names its licence with a standard (SPDX) identifier
not applicable: The version the registry lists can be installed and is not withdrawn
not applicable: npm package carries build provenance (attestation)
not applicable: No known critical or high advisory in the package or its dependencies

Not ranked by downloads: a remote server publishes no download figure
Not ranked by stars: no public GitHub repository

From public records, not a safety rating. Each check with its reason

Operate this server? Correct a fact · README badge · Run the checks yourself

Key facts

Runs: remote (hosted by the publisher)
Transport: streamable HTTP
Your own values: none declared (not a guarantee)
Sign-in: none needed to open a session
Tools: 95
Last tested: 2026-11-01

Tool list size

38,034 tokens on Claude Opus 5.5

Added to every request that loads this server's tools (95 tools). Counted with Anthropic's token counter on 2026-11-01, from the tool list we read on 2026-11-01. Median across 25,738 counted servers: 2,858 tokens. How it is counted

How a client gets in

Connects without signing in

Read from the server's public metadata on 2026-11-01 (letsbot.net), in our read-only connection; no tool was called. It may have changed since. How it is read

Tool list at the three APIs

Not sent yet for this version (1.0.0).

Add to your client

Observed fact

This server accepted a session without any credential and lists 46 tools whose name or declaration suggests they change data (send_text_message, send_image, send_video, send_audio, send_file and 41 more). That is our reading of the names; we did not call them. Source: our connection, 2026-11-01.

How fresh this is

Live-tested: yes, a real session (not a text-only review)
Last tested: 2026-11-01
Mode: read-only (no tool calls)
Latest version: 1.0.0, published 2026-10-31 (registry, as of the 2026-11-01 snapshot)
First listed version: 2026-10-31 (earliest version still in the registry; older removed versions would be earlier)
Registry data: snapshot 2026-11-01
Package and repository: checked 2026-11-01
Engine: mcp-runtime-engine@0.1.0 · sdk@1.32.0

Dead or stale signals

None found in the records we hold

Looked for and not found: deprecated in the registry. Does not apply: listed version cannot be installed or is withdrawn; repository link does not open; repository archived; no push in over 365 days. Each line is a dated fact from a public record. It does not say whether the server still works, and a record can change after the date shown.

Changes since the last refresh

New in the registry: not in the list of 2026-10-31, listed on 2026-11-01 with version 1.0.0 (published 2026-10-31).

Source: the official MCP Registry list on 2026-10-31 and on 2026-11-01.

What it is

What does this server offer?

Observed inventory

95tools

0resources

0prompts

None of its 95 tools are described as changing anything. For 95 the reading was uncertain, so no mark is shown.

send_text_message
“Send a text message to a contact on any connected platform: a WhatsApp number (international format without +, e.g.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
3 inputs, 3 required
- phonestringrequired“WhatsApp number in international format without + (e.g.”
- messagestringrequired“The text message to send”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
send_image
“Send an image to a WhatsApp number with an optional caption.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
4 inputs, 3 required
- phonestringrequired“WhatsApp number in international format without + (e.g.”
- image_urlstringrequired“URL of the image to send”
- captionstring“Optional caption for the image”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
send_video
“Send a video to a WhatsApp number with an optional caption.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
4 inputs, 3 required
- phonestringrequired“WhatsApp number in international format without + (e.g.”
- video_urlstringrequired“URL of the video to send”
- captionstring“Optional caption for the video”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
send_audio
“Send an audio file or voice note to a WhatsApp number.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
3 inputs, 3 required
- phonestringrequired“WhatsApp number in international format without + (e.g.”
- audio_urlstringrequired“URL of the audio file to send”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
send_fileon 3 other servers
“Send a document/file to a WhatsApp number.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
5 inputs, 3 required
- phonestringrequired“WhatsApp number in international format without + (e.g.”
- file_urlstringrequired“URL of the file to send”
- filenamestring“Display name INCLUDING the extension (e.g.”
- captionstring“Optional caption for the file”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
send_locationon 1 other server
“Send a location to a WhatsApp number.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
5 inputs, 4 required
- phonestringrequired“WhatsApp number in international format without + (e.g.”
- latitudestringrequired“Latitude coordinate”
- longitudestringrequired“Longitude coordinate”
- namestring“Optional location name”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
send_contact_cardon 1 other server
“Send a contact card (vCard) to a WhatsApp number.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
5 inputs, 4 required
- phonestringrequired“WhatsApp number in international format without + (e.g.”
- contact_namestringrequired“Name on the contact card”
- contact_phonestringrequired“Phone number on the contact card”
- organizationstring“Optional organization name”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
send_templateon 3 other servers
“Send a WhatsApp-approved message template to a number.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
5 inputs, 3 required
- phonestringrequired“Phone number in international format without +”
- template_namestringrequired“Name of the approved WhatsApp template”
- languagestring“Template language code (e.g.”
- componentsobject“Values for the template placeholders.”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
send_buttons
“Send an interactive message with buttons to a WhatsApp number.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
6 inputs, 4 required
- phonestringrequired“WhatsApp number in international format without + (e.g.”
- bodystringrequired“Message body text”
- buttonsarrayrequired“Array of button objects with id and title”
- titlestring“Optional header title”
- footerstring“Optional footer text”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
send_list
“Send an interactive list/menu message to a WhatsApp number.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
7 inputs, 4 required
- phonestringrequired“WhatsApp number in international format without + (e.g.”
- bodystringrequired“Message body text”
- button_textstring“Text on the list button (e.g.”
- sectionsarrayrequired“Array of section objects with title and rows”
- titlestring“Optional header title”
- footerstring“Optional footer text”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
send_carousel
“Send a carousel of cards (title, subtitle, image, up to 3 buttons each; max 10 cards) to a Messenger or Instagram contact.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
4 inputs, 3 required
- recipientstringrequired“The contact PSID (Messenger) or IGSID (Instagram).”
- platformstring“Which Meta channel to send from.”
- cardsarrayrequired“Up to 10 cards.”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
reply_to_messageon 7 other servers
“Reply to a specific message in a conversation on any connected platform (WhatsApp, website chat, Messenger, Instagram, Telegram, …).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
5 inputs, 4 required
- phonestringrequired“WhatsApp number in international format without +, or the contact's phone / chat_id as listed.”
- message_idstringrequired“The WhatsApp message ID to reply to”
- textstringrequired“The reply text.”
- mentionsarray“Optional, WhatsApp groups on a QR-connected number only.”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”

Show 83 more tools

send_reactionon 1 other server
“Add an emoji reaction to a message in a WhatsApp conversation.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes
4 inputs, 4 required
- phonestringrequired“WhatsApp number in international format without + (e.g.”
- message_idstringrequired“The WhatsApp message ID to react to”
- emojistringrequired“Emoji to react with (e.g.”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
forward_messageon 5 other servers
“Forward a message from one WhatsApp chat to another.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
3 inputs, 3 required
- message_idstringrequired“The WhatsApp message ID to forward”
- to_phonestringrequired“Phone number to forward to (international format without +)”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
upload_fileon 40 other servers
“Put a file into LetsBot storage and get back a direct https url plus the filename to pass to send_file / send_group_file / send_image / send_video / send_audio.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
3 inputs, 1 required
- source_urlstring“A public http(s) link to the file; LetsBot downloads it (max 20 MB, 20 s).”
- content_base64string“The file contents, base64-encoded — only for a small file you generated yourself.”
- filenamestringrequired“Name INCLUDING the extension, e.g.”
get_contactson 5 other servers
“Get a paginated list of WhatsApp contacts with optional search and filter.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs
- searchstring“Search by name, phone, or username”
- filterstring“Filter contacts.”
- pageinteger“Page number (default: 1)”
get_contacton 49 other servers
“Get detailed information about a specific WhatsApp contact including labels, moderators, last message, and the workspace's contact custom fields (custom_fields: every available field with its key, la…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- phonestringrequired“Phone number in international format without +”
create_contacton 15 other servers
“Create a new WhatsApp contact in the system.”
Publisher declares: read-only no · destructive no · idempotent no · open-world no
4 inputs, 1 required
- phonestringrequired“Phone number in international format without +”
- namestring“Contact name”
- emailstring“Optional email address”
- custom_fieldsobject“The workspace's own contact custom fields, as an object of field key → value (e.g.”
update_contacton 15 other servers
“Update a contact's information: name, email, city, country, and the workspace's own contact custom fields (custom_fields: key → value, null clears).”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
6 inputs, 1 required
- phonestringrequired“Phone number of the contact to update”
- namestring“New name for the contact”
- emailstring“New email”
- citystring“City”
- countrystring“Country”
- custom_fieldsobject“The workspace's own contact custom fields, as an object of field key → value (e.g.”
get_my_chats
“Get the chats assigned to the person this connection acts as.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs
- pageinteger“Page number (default: 1)”
- searchstring“Search by name or phone”
get_conversations_awaiting_reply
“List conversations where the customer wrote last and nobody has replied yet, newest first.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input
- pageinteger“Page number (default: 1)”
pin_contact
“Pin or unpin a contact chat so it stays at the top of the list.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- phonestringrequired“Phone number in international format without +”
- pinboolean“true to pin, false to unpin (default: true)”
archive_contacton 1 other server
“Archive or unarchive a contact chat.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- phonestringrequired“Phone number in international format without +”
- archiveboolean“true to archive, false to unarchive (default: true)”
block_contacton 1 other server
“Block or unblock a WhatsApp contact.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world yes
2 inputs, 1 required
- phonestringrequired“Phone number in international format without +”
- blockboolean“true to block, false to unblock (default: true)”
delete_contacton 9 other servers
“Permanently delete one contact (a one-to-one chat) together with its whole conversation: every message and media file is erased shortly after, and this cannot be undone.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world no
2 inputs, 2 required
- phonestringrequired“Phone number of the contact in international format without + (e.g.”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
assign_label
“Assign or remove a label from a contact.”
Publisher declares: read-only no · destructive no · idempotent no · open-world no
2 inputs, 2 required
- phonestringrequired“Phone number of the contact”
- label_idintegerrequired“ID of the label to assign/remove”
assign_moderator
“Assign a team member (moderator) to a conversation, or remove them from it.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
3 inputs, 2 required
- phonestringrequired“Phone number of the contact”
- user_idintegerrequired“ID of the moderator/user to assign/remove”
- actionstring“assign: add the member (no change if already assigned).”
reassign_conversations
“Move conversations from one team member to another in one step — e.g.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes
6 inputs, 3 required
- from_user_idintegerrequired“Team member whose conversations move away.”
- to_user_idintegerrequired“Team member who receives them.”
- scopestring“awaiting_reply (default): only conversations where the customer is waiting for an answer.”
- waiting_longer_than_minutesinteger“Only conversations whose customer has been waiting at least this many minutes (implies awaiting_reply).”
- limitinteger“Most conversations to move in this call, oldest wait first.”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
get_assignment_rules
“Read how new conversations are automatically given to team members (operators): the assignment mode (off / round robin / least open), which team receives them, whether only available operators count,…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
update_assignment_rules
“Change how new conversations are automatically given to team members.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
14 inputs
- modestring“off = no automatic assignment by this rule; round_robin = operators take turns; least_open = operator with the fewest chats.”
- team_idinteger or null“Only members of this active team receive conversations; null = all operators with live-chat access.”
- only_availableboolean“true = skip operators who are away/offline.”
- max_openinteger or null“Max conversations one operator may hold (1-500); null = no cap.”
- on_reopenboolean“true = a conversation the customer reopens is assigned again by this rule.”
- count_basisstring“What the cap counts: open = assigned open chats; awaiting = chats where the customer is waiting for a reply.”
- awaiting_window_daysinteger“Days an unanswered chat keeps counting against its operator (1-90).”
- reassign_after_minutesinteger or null“Move a chat to another operator when its operator has not replied after this many minutes (1-1440); null = never.”
- reassign_keep_previousboolean“true = after such a move, the operator who did not reply stays on the chat too.”
- reassign_max_hopsinteger“How many times one waiting chat may be moved (1-10).”
- after_last_hopstring“After the last move: stay = keep the last operator; fallback = give it to the backup operator.”
- rebalanceboolean“true = move chats off an operator who holds more than max_open.”
- when_fullstring“When everyone is at the cap: wait = the chat waits until someone has room; fallback = give it to the backup operator.”
- fallback_user_idinteger or null“Backup operator id (from get_assignment_rules choices.operators); null = none.”
add_noteon 20 other servers
“Add an internal note to a conversation — visible only to the merchant's team in the LetsBot inbox, never sent to the customer.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
3 inputs, 2 required
- phonestringrequired“Phone number (or chat id) of the contact.”
- bodystringrequired“The note text (max 4000 characters).”
- mentionsarray“Optional teammates to notify: user ids (from get_moderators) or names, e.g.”
get_account_overviewon 3 other servers
“Summarise this LetsBot workspace's account in one call: (1) subscription — current plan, billing period, start and end/renewal date, status, whether it renews automatically and the next automatic cha…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
get_owner_briefing
“A short briefing of what needs the owner's attention in this LetsBot workspace right now, in one call: conversations where a customer is still waiting for a reply (how many, how long the oldest has w…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
get_reporton 69 other servers
“Read one tab of the LetsBot Reports page for a period: KPI cards with the change vs the previous period, the main chart (labels + series), the table rows (max 100) and footnotes.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
6 inputs
- tabstring“Which report tab.”
- periodstring“Period preset in the workspace time zone.”
- fromstring“First day (YYYY-MM-DD) when period is custom.”
- tostring“Last day (YYYY-MM-DD, inclusive) when period is custom.”
- channelstring“Only this channel.”
- group_bystring“Table/chart grouping.”
list_whatsapp_templates
“List the WhatsApp message templates (Meta-approved message formats) of this workspace: name, exact language code, category (MARKETING / UTILITY / AUTHENTICATION), Meta review status and the rejection…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
5 inputs
- statusstring“Only templates with this Meta status.”
- categorystring“Only templates of this Meta category.”
- languagestring“Exact Meta language code, e.g.”
- searchstring“Text to find in the template name, Meta template id or language code.”
- pageinteger“Page number (50 templates per page).”
create_whatsapp_templateon 3 other servers
“Create a new WhatsApp message template and submit it to Meta for review (Official WhatsApp / Cloud API workspaces only).”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
9 inputs, 5 required
- namestringrequired“Template name: lowercase letters, digits and underscores only (e.g.”
- languagestringrequired“Bare language code the template is written in: one of ar, en, pt, es, af, sq, az, be, bn, bg, ca, zh, hr, cs, da, prs, nl, et, fil, fi, fr, ka, de, el, gu, ha,…”
- categorystringrequired“UTILITY (transactional, no promotion) or MARKETING (promotional, billed per message at Meta's marketing rate).”
- bodystringrequired“Message text, up to 1024 characters.”
- examplesobject“Required by Meta: one realistic sample value per placeholder, keyed by the placeholder ({"1": "Sara", "2": "#1045"} or {"customer_name": "Sara"}).”
- headerobject“Optional header.”
- footerstring“Optional footer, max 60 characters, no placeholders (emojis are removed — Meta refuses them there).”
- buttonsarray“Optional, up to 10 buttons (at most 2 url and 1 phone_number).”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
list_scheduled_activity
“List messages that are still waiting to go out to customers: pending store notifications from Salla, Zid and WooCommerce (order updates, abandoned-cart reminders, …) and the outgoing WhatsApp send qu…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
6 inputs
- sourcesarray“Limit to these sources; omit for all.”
- phonestring“Only rows whose recipient phone STARTS with this (digits, e.g.”
- date_fromstring“Only rows created on/after this day (YYYY-MM-DD).”
- date_tostring“Only rows created on/before this day (YYYY-MM-DD).”
- pageinteger“Page number, starting at 1 (default 1).”
- per_pageinteger“Rows per page, 1-50 (default 50).”
cancel_scheduled_activity
“Stop messages that are still waiting to be sent (as listed by list_scheduled_activity): either ONE row (pass source + source_id; it is cancelled immediately — stopping a send needs no approval) or AL…”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
8 inputs, 1 required
- sourcestring“Source of the ONE row to cancel (from list_scheduled_activity).”
- source_idinteger“source_id of the ONE row to cancel (from list_scheduled_activity).”
- allboolean“true = cancel EVERY pending row matching the filters below (all sources when no filter).”
- sourcesarray“Limit to these sources; omit for all.”
- phonestring“Only rows whose recipient phone STARTS with this (digits, e.g.”
- date_fromstring“Only rows created on/after this day (YYYY-MM-DD).”
- date_tostring“Only rows created on/before this day (YYYY-MM-DD).”
- confirmbooleanrequired“For all=true: pass false first to get the count and a breakdown (nothing is cancelled), show it to the user, then true to cancel.”
get_messageson 10 other servers
“Get messages from a WhatsApp conversation.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- phonestringrequired“Phone number in international format without +”
- pageinteger“Page number for pagination (default: 1)”
- per_pageinteger“Messages per page (default: 15, max: 50)”
get_message_statuson 2 other servers
“Check what WhatsApp actually did with messages you already sent — delivered, read, still pending, or FAILED with Meta's own reason.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs
- message_idsarray“The message_id values returned by the send tools (WhatsApp wamids).”
- phonestring“Alternative to message_ids: a contact phone number in international format without +.”
- minutesinteger“How far back to look when checking by phone.”
search_messageson 17 other servers
“Search messages across all conversations (individual chats and groups), or within one specific contact chat or group.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
4 inputs, 1 required
- querystringrequired“Search query to find in message text”
- phonestring“Optional: limit search to a specific contact's individual chat.”
- group_idstring“Optional: limit search to a specific group.”
- pageinteger“Page number (default: 1)”
mark_as_readon 1 other server
“Mark a conversation as opened in the LetsBot inbox, and send a read receipt to the customer on channels that support one.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world yes
1 input, 1 required
- phonestringrequired“Phone number of the contact in international format without +”
get_groupson 4 other servers
“Get a paginated list of WhatsApp group conversations.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
4 inputs
- searchstring“Search groups by name”
- filterstring“Filter groups.”
- membershipstring“Membership filter: all (default — matches the live-chat list), joined (still a member), left (removed from or left the group)”
- pageinteger“Page number (default: 1)”
get_group_messages
“Get messages from a WhatsApp group conversation, newest first, with the sender of each message.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- group_idstringrequired“The group to read.”
- pageinteger“Page number for pagination (default: 1)”
- per_pageinteger“Messages per page (default: 15, max: 50)”
send_group_message
“Send one real WhatsApp text message from the workspace's WhatsApp number into one WhatsApp group, after the user confirms.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
5 inputs, 2 required
- group_idstring“The group's "chat_id" exactly as returned by get_groups (e.g.”
- chat_idstring“Alias of "group_id", accepted because get_groups calls this value "chat_id".”
- messagestringrequired“The text to post into the group.”
- mentionsarray“Optional, WhatsApp groups on a QR-connected number only.”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
send_group_file
“Send one real file — a document such as a PDF, an image, or a video — from the workspace's WhatsApp number into one WhatsApp group, after the user confirms.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
7 inputs, 2 required
- group_idstring“The group's "chat_id" exactly as returned by get_groups (e.g.”
- chat_idstring“Alias of "group_id", accepted because get_groups calls this value "chat_id".”
- file_urlstringrequired“Direct https url of the file — typically the `url` returned by upload_file.”
- filenamestring“Display name INCLUDING the extension (e.g.”
- captionstring“Optional text shown with the file in the group.”
- media_typestring“How WhatsApp shows it: "document" (default — a downloadable file with its name, right for PDFs and office files), "image" (shown inline; jpg/png/webp) or "vide…”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
get_labels
“Get all labels/tags available in the account.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
create_labelon 5 other servers
“Create a new label/tag for organizing contacts.”
Publisher declares: read-only no · destructive no · idempotent no · open-world no
3 inputs, 3 required
- name_arstringrequired“Label name in Arabic”
- name_enstringrequired“Label name in English”
- colorstringrequired“Label color in hex format (e.g., #25d366)”
get_label_contacts
“Get all contacts that are assigned to a specific label.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- label_idintegerrequired“ID of the label”
- pageinteger“Page number for pagination (default: 1)”
get_moderators
“Get all moderators/agents available in the account.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
get_quick_replies
“Get all quick replies/canned responses available.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
create_quick_reply
“Create a new quick reply/canned response.”
Publisher declares: read-only no · destructive no · idempotent no · open-world no
4 inputs, 3 required
- title_arstringrequired“Title/keyword in Arabic”
- title_enstringrequired“Title/keyword in English”
- textstringrequired“The quick reply message text”
- reply_typestring“Type of reply: text, image, file, audio, video, location”
update_quick_reply
“Update an existing quick reply/canned response by ID.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
8 inputs, 1 required
- idintegerrequired“ID of the quick reply to update”
- title_arstring“New title/keyword in Arabic”
- title_enstring“New title/keyword in English”
- textstring“New quick reply message text”
- body_arstring“New quick reply body in Arabic”
- body_enstring“New quick reply body in English”
- reply_typestring“Type of reply: text, image, file, audio, video, location”
- statusboolean“Enable or disable this quick reply”
delete_quick_reply
“Delete a quick reply (canned response) by ID.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
2 inputs, 2 required
- idintegerrequired“ID of the quick reply to delete”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
update_labelon 3 other servers
“Rename or recolour an existing contact label by ID.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
4 inputs, 1 required
- label_idintegerrequired“ID of the label to update”
- name_arstring“New label name in Arabic”
- name_enstring“New label name in English”
- colorstring“New colour as a hex code including the #, e.g.”
delete_labelon 5 other servers
“Delete a contact label by ID.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
2 inputs, 2 required
- label_idintegerrequired“ID of the label to delete”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
ai_suggest_reply
“Return the recent conversation and contact context so the assistant can draft suggested replies.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- phonestringrequired“Phone number of the contact to suggest a reply for”
- additional_contextstring“Optional additional context or instructions to steer the suggestions”
ai_summarize_conversation
“Return the recent conversation history with a contact so the assistant can summarize it (key topics, issues, and outcomes).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- phonestringrequired“Phone number of the contact”
- message_countinteger“Number of recent messages to include (default: 50, max: 100)”
ai_analyze_contact
“Return a contact profile and recent conversation sample so the assistant can analyze the customer (engagement level, interests, recommendations).”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- phonestringrequired“Phone number of the contact to analyze”
ai_improve_message
“Return a draft message together with the desired tone and context so the assistant can rewrite it (grammar, tone, clarity) while keeping the original intent.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- messagestringrequired“The message text to improve”
- contextstring“Optional conversation context for a better rewrite”
- tonestring“Desired tone: professional, friendly, formal, casual”
ai_translate_message
“Return a message together with the requested target language so the assistant can translate it.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 2 required
- messagestringrequired“The message text to translate”
- target_languagestringrequired“Target language (e.g., Arabic, English, French, Spanish)”
ai_sentiment_analysis
“Return the customer messages of a conversation so the assistant can analyze sentiment (positive, negative, or neutral) and emotional indicators.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- phonestringrequired“Phone number of the contact”
- message_countinteger“Number of recent customer messages to include (default: 20, max: 50)”
ai_dashboard_summary
“Return key dashboard metrics (contact counts, conversations awaiting a reply, active moderators, today's activity, recent contacts) plus guidance so the assistant can write an interpreted summary.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
get_order_statuson 63 other servers
“Get the status and details of an e-commerce order.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs, 1 required
- order_idstringrequired“The order ID/reference number”
- platformstring“E-commerce platform: salla, zid or odoo, shopify, woocommerce.”
search_productson 290 other servers
“Search for products in the connected e-commerce store.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs, 1 required
- querystringrequired“Search query (product name or keyword)”
- platformstring“E-commerce platform: salla, zid or odoo, shopify, woocommerce.”
- limitinteger“Max results to return (default: 10)”
get_abandoned_carts
“Get abandoned carts from the connected store (Salla, Zid, Shopify, WooCommerce or Magento) for the last N days, with a recovery summary: how many carts were abandoned and are still open, how many wer…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
4 inputs
- daysinteger“How many days back to look (1-365).”
- platformstring“Only this store platform.”
- statusstring“Which carts to list: open (abandoned, not bought yet), recovered (bought later) or all.”
- pageinteger“Page number for the cart list (default: 1, 15 carts per page).”
list_store_automations
“List every automatic WhatsApp message this workspace sends to its store customers, and whether each one is ON or OFF: order/store event notifications (kind notification_template — e.g.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs
- kindstring“Optional: only this kind of automation.”
- platformstring“Optional: only automations for this store platform (e.g.”
- activeboolean“Optional: true = only those switched ON, false = only those switched OFF.”
set_store_automation_active
“Turn ONE automatic store message on or off — an order/store notification, an abandoned-cart reminder or an automation reminder — exactly like its toggle in the LetsBot panel.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world yes
4 inputs, 4 required
- kindstringrequired“The automation kind, as returned by list_store_automations.”
- idintegerrequired“The automation id, as returned by list_store_automations (ids are per kind).”
- activebooleanrequired“true = switch ON (starts automatic sends), false = switch OFF.”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
create_campaignon 26 other servers
“Create a new bulk message campaign to send messages to multiple contacts.”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
6 inputs, 3 required
- textstringrequired“The message text to send”
- label_idsarrayrequired“Array of label IDs to target.”
- send_nowboolean“Whether to dispatch immediately (true) or schedule for later (false).”
- sending_datestring“Scheduled date/time in YYYY-MM-DD HH:mm format.”
- window_ackboolean“Required (true) when this workspace sends through an official WhatsApp Cloud API number: this campaign is free-form text, which Meta delivers ONLY to contacts …”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
get_campaignson 5 other servers
“Get a list of bulk message campaigns.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs
- statusstring“Filter by status: all, pending, in_progress, done, canceled”
- pageinteger“Page number for pagination (default: 1)”
get_campaign_statuson 4 other servers
“Get detailed status of a specific bulk message campaign including per-contact delivery statistics.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
1 input, 1 required
- campaign_idintegerrequired“ID of the campaign”
cancel_campaign
“Stop a bulk message campaign that is scheduled or sending right now.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world no
1 input, 1 required
- campaign_idintegerrequired“ID of the campaign (from get_campaigns or create_campaign).”
resume_campaignon 1 other server
“Resume a bulk campaign that was stopped (cancel_campaign / Cancel in the panel), finished with recipients left unsent, stopped because its template header file was missing, or paused because the plan…”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
3 inputs, 2 required
- campaign_idintegerrequired“ID of the campaign (from get_campaigns).”
- window_ackboolean“Required (true) only when the campaign is not an approved template and the workspace uses an official WhatsApp Cloud API number: Meta then delivers it only to …”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
resend_campaign
“Send a bulk campaign again to the recipients whose message is stuck at "sent" — WhatsApp accepted it but it was never confirmed delivered (phone offline, number inactive).”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
3 inputs, 2 required
- campaign_idintegerrequired“ID of the campaign (from get_campaigns).”
- window_ackboolean“Required (true) only when the campaign is not an approved template and the workspace uses an official WhatsApp Cloud API number: Meta then delivers it only to …”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
get_bot_statuson 2 other servers
“Get the current bot status and settings.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
toggle_bot
“Toggle the bot on or off for a specific contact.”
Publisher declares: read-only no · destructive no · idempotent yes · open-world yes
3 inputs, 2 required
- phonestringrequired“Phone number of the contact”
- enabledbooleanrequired“Whether to enable (true) or disable (false) the bot for this contact”
- pause_durationstring“Optional, only when enabled is false: how long the bot stays off.”
get_bot_conversations
“Get all bot auto-reply conversations/rules.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
2 inputs
- enabled_onlyboolean“If true, only return enabled conversations (default: true)”
- pageinteger“Page number for pagination (default: 1)”
create_simple_conversation
“Create a simple bot auto-reply rule.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
8 inputs, 2 required
- hearstringrequired“Trigger keyword or phrase that activates this reply”
- textstringrequired“Reply message text to send when triggered.”
- match_messageboolean“If true, requires exact match.”
- label_idinteger“Optional label ID to auto-assign to the contact when triggered”
- agent_idinteger“Optional moderator ID to auto-assign to the contact when triggered”
- channelsarray“Optional.”
- ask_contactstring“Optional.”
- confirmationstring“Optional, with an "ask_contact" rule only.”
create_interactive_conversation
“Create an interactive bot conversation with buttons.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
6 inputs, 3 required
- hearstringrequired“Trigger keyword or phrase”
- textstringrequired“Message body that appears with the buttons”
- titlestring“Header title for the interactive message”
- footerstring“Footer text below the message”
- channelsarray“Optional.”
- buttonsarrayrequired“Array of buttons (max 3)”
update_bot_conversation
“Update an existing bot auto-reply rule by ID.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes
10 inputs, 1 required
- idintegerrequired“ID of the bot conversation to update”
- hearstring“New trigger keyword or phrase that activates this reply”
- textstring“New reply message text to send when triggered”
- match_messageboolean“If true, requires an exact match.”
- enabledboolean“Enable or disable this auto-reply rule”
- label_idinteger“Label ID to auto-assign to the contact when triggered (use 0 to clear)”
- agent_idinteger“Moderator ID to auto-assign to the contact when triggered (use 0 to clear)”
- channelsarray“Optional.”
- ask_contactstring“Optional.”
- confirmationstring“Optional, with an "ask_contact" rule only.”
get_bot_settings
“Get all bot and AI-related settings for the current account.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
update_bot_settings
“Update bot settings.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes
5 inputs
- ai_modestring“"standard" = the AI answers with its full capabilities.”
- match_percentageinteger“How much of a keyword the customer must type for a bot rule to match (1-100, default 60).”
- enable_default_replyboolean“Enable/disable the default reply sent when no bot rule matches.”
- default_reply_delayinteger“How long after a customer's previous message the default reply stays silent, as a number in default_reply_delay_unit (e.g.”
- default_reply_delay_unitstring“Unit of default_reply_delay.”
set_bot_conversation_active
“Turn one bot flow (auto-reply conversation of any type: simple, buttons, template or list) ON or OFF by ID.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes
2 inputs, 2 required
- idintegerrequired“ID of the bot flow (from get_bot_conversations)”
- activebooleanrequired“true to turn the flow ON, false to turn it OFF”
duplicate_bot_conversation
“Make a full copy of one bot flow (any type) by ID: the reply, its media, and all of its buttons, list sections and follow-up replies.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
1 input, 1 required
- idintegerrequired“ID of the bot flow to copy (from get_bot_conversations)”
delete_bot_conversation
“Permanently delete one bot flow (any type) by ID, together with its buttons and list sections.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes
2 inputs, 2 required
- idintegerrequired“ID of the bot flow to delete (from get_bot_conversations)”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
get_ad_lead_settings
“Get the ad-lead auto-labeling configuration.”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
update_ad_lead_settings
“Configure which label and moderator are auto-applied to contacts that arrive from a Meta Click-to-WhatsApp ad.”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world no
2 inputs
- label_idinteger“ContactLabel ID to auto-apply on ad-lead arrival.”
- agent_idinteger“Moderator (User) ID to auto-assign on ad-lead arrival.”
get_notification_templateon 2 other servers
“Read ONE automatic store notification (order status, verification code/OTP, welcome, review request …) in full: its message text in every language, its image/video/file, whether it is on, and its Wha…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
3 inputs
- idinteger“The template id (list_store_automations, kind notification_template).”
- modulestring“Store module when looking up by slug, e.g.”
- slugstring“Event slug when no id is known, e.g.”
update_notification_templateon 1 other server
“Edit ONE automatic store notification (order status, verification code/OTP, welcome, review request …) that LetsBot sends on WhatsApp to the store's real customers when that event happens: change its…”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes
7 inputs, 2 required
- idintegerrequired“The template id (get_notification_template / list_store_automations).”
- textsobject“New message text per language code, e.g.”
- enabled_languagesarray“Optional: the languages this notification is sent in, e.g.”
- media_urlstring“Optional: public https link of the new image/video/file (only for a media notification).”
- remove_mediaboolean“Optional: true removes the current image/video/file.”
- activeboolean“Optional: true switches it ON (customers get it automatically), false OFF.”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
save_cart_reminder
“Create a new abandoned-cart reminder step (omit id) or edit one (pass its id from list_store_automations, kind cart_reminder): when it is sent after the cart is abandoned (delay_value + delay_unit), …”
Publisher declares: read-only no · destructive yes · idempotent no · open-world yes
8 inputs, 1 required
- idinteger“Omit to create a new reminder; pass the cart_reminder id to edit one.”
- titlestring“Internal name the merchant sees in the panel, e.g.”
- textsobject“Message text per language code, e.g.”
- delay_valueinteger“How long after the cart is abandoned, e.g.”
- delay_unitstring“Unit of delay_value.”
- minimum_cart_totalnumber“Optional: only carts worth at least this much (0 = all carts).”
- activeboolean“true = ON (customers get it automatically), false = OFF.”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
draft_bot_flow
“Build a keyword bot flow (menu, buttons, replies) from a description in the merchant's words, any language.”
Publisher declares: read-only no · destructive no · idempotent no · open-world yes
2 inputs, 2 required
- descriptionstringrequired“What the flow does, in the merchant's words (10–2000 characters).”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
get_ai_assistant_settings
“Read how the AI assistant answers customers: whether AI replies are on, its instructions, its working hours and outside-hours message, when it hands the chat to a person (pause after hand-off / after…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
update_ai_assistant_settings
“Change how the workspace's AI assistant automatically answers the business's real customers on WhatsApp (and any other connected chat channel it answers).”
Publisher declares: read-only no · destructive yes · idempotent yes · open-world yes
2 inputs, 2 required
- settingsobjectrequired“The settings to change, e.g.”
- confirmbooleanrequired“Consent gate — REQUIRED on every call.”
diagnose_messaging
“Answer "why are my messages failing / not arriving?": checks the WhatsApp number connection (QR logged out, access removed by Meta, test number, billing block), the reasons Meta gave for the latest f…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.
get_store_setup_checklist
“The step-by-step set-up of a store on LetsBot (Salla, Zid, Shopify, …): 1 connect the WhatsApp number, 2 store notifications (order status, verification code, welcome, review), 3 abandoned-cart remin…”
Publisher declares: read-only yes · destructive no · idempotent yes · open-world no
Takes no inputs.

Each quoted sentence is the first sentence of the publisher’s own description. The kind of tool and the “changes data” mark are our AI model’s reading of that description, not something we tested: two differently worded runs had to agree, otherwise no label is shown, and nobody has checked them by hand. A tool without the “changes data” mark is described as only reading, searching or calculating, or the two runs did not agree. No tool was called. Read the publisher’s full description before relying on it. “Publisher declares” lists the hints the server itself sends with the tool (MCP annotations: read-only, destructive, idempotent, open-world); they are the publisher's claims, not checked by us. Inputs are the parameters in the tool's own input schema: name, declared type, whether it is required, and the first sentence of its description. Read 2026-11-01.

How well are its tools described?

Features #4 and #5

How clearly this server's own tool descriptions say what a tool does, and how consistent its tool list is. The first part is an AI model's yes/no reading of each description; the second part is counted. We do not turn it into a grade.

Descriptions

AI reading of each description

No AI reading was available for this server's tools (the two runs did not agree, or the listing was not reviewed).

Counted from the listing

Parameters with a description: 100% of 315
Tools with a description: 100% of 95
Typical description length: 356 characters

The tool set

Counted from the listing

Tools: 95
Size of the list: about 28,862 tokens for an agent to load (characters ÷ 4)
Naming: 95 of 95 names use snake_case

AI reading: easy to mix up

No pair found.

The AI items cover 0 of 95 tools: for a tool where two differently worded runs disagreed, that item is left out. They were not checked by hand, and no tool was called. “Easy to mix up” means two tools whose names or descriptions overlap without saying how they differ; the AI found none, comparing tools within groups of 40. We do not rate whether the tool set is complete or whether side effects are spelled out, because our AI reading of those was not reliable enough.

How do I add it to my client?

Config from the registry entry

From the remote endpoint (Streamable HTTP)

We connected to this URL on 2026-11-01 (a read-only session: no tool was called).

Add to CursorAn install link in the format Cursor documents, holding the Cursor config below.

Claude Desktop or claude.ai

Settings → Connectors → Add custom connector, then paste:
https://letsbot.net/mcp

Cursor · .cursor/mcp.json in a project, or ~/.cursor/mcp.json

{
  "mcpServers": {
    "mcp": {
      "url": "https://letsbot.net/mcp"
    }
  }
}

VS Code · .vscode/mcp.json

{
  "servers": {
    "mcp": {
      "type": "http",
      "url": "https://letsbot.net/mcp"
    }
  }
}

VS Code (command line) · Bash or zsh terminal (macOS, Linux)

code --add-mcp '{"name":"mcp","type":"http","url":"https://letsbot.net/mcp"}'

Claude Code

claude mcp add --transport http mcp https://letsbot.net/mcp

Cline · cline_mcp_settings.json (Cline CLI: ~/.cline/data/settings/; in the editor: MCP Servers → Configure → Configure MCP Servers)

{
  "mcpServers": {
    "mcp": {
      "type": "streamableHttp",
      "url": "https://letsbot.net/mcp",
      "disabled": false,
      "autoApprove": []
    }
  }
}

Gemini CLI · ~/.gemini/settings.json, or .gemini/settings.json in a project

{
  "mcpServers": {
    "mcp": {
      "httpUrl": "https://letsbot.net/mcp"
    }
  }
}

OpenAI Codex · ~/.codex/config.toml, or .codex/config.toml in a trusted project

[mcp_servers.mcp]
url = "https://letsbot.net/mcp"

Zed · Zed settings file (command: zed: open settings file)

{
  "context_servers": {
    "mcp": {
      "url": "https://letsbot.net/mcp"
    }
  }
}

Try it in the MCP Inspector · runs on your machine, opens in your browser · Node 22.19+

npx @modelcontextprotocol/inspector@2.11.0 --server-url https://letsbot.net/mcp --transport http

The server runs on the operator's infrastructure; it may ask you to sign in when you first connect.
Zed's docs we read on 2026-10-26 describe remote servers by URL and do not name the transport.
The MCP Inspector lists the server's tools, resources and prompts; a tool you call there runs for real.

Built from the server's registry entry with each client's documented format (checked 2026-10-14; the Cursor link and the VS Code command 2026-10-19; the MCP Inspector command 2026-10-21; Cline, Gemini CLI, OpenAI Codex and Zed 2026-10-26). Values in < > are yours to fill in; this page never contains a key. Where the server needs a setting the entry does not declare, it can still fail to start.

Does the registry listing match what we found?

Feature #6

The registry checks an entry when it is published (each new version), and nothing re-checks it on a schedule. A difference below is about the listing, not a judgement of the publisher.

Registry says	We found	Result	Source · date
Remote endpoint letsbot.net/mcp	Session opened	matches	our test · 2026-11-01
No credential declared as required	Opened a session without any credential	matches	our test · 2026-11-01

Choosing

Record checks

Public records · not a safety rating

1 of 2 record checks met · 7 do not apply

Not ranked by downloads: a remote server publishes no download figure
Not ranked by stars: no public GitHub repository

MetRegistry entry is active and says how to run itActive, with a package or a remote address.
Not metSource repository link opensThe registry entry gives no repository link.What changes this check: This check opens the repository link in the registry entry. GitHub's documentation describes changing a repository's visibility in its Settings, under Danger Zone, Change visibility. GitHub: setting repository visibility
Does not applyRepository is not archivedNo public GitHub repository to read.
Does not applyCode pushed to the repository in the 90 days before our checkNo public GitHub repository to read.
Does not applyRepository publishes a security policy (SECURITY.md)No public GitHub repository to read.
Does not applyPackage names its licence with a standard (SPDX) identifierRemote server: it ships no package.
Does not applyThe version the registry lists can be installed and is not withdrawnRemote server: it ships no package.
Does not applynpm package carries build provenance (attestation)Remote server: it ships no package.
Does not applyNo known critical or high advisory in the package or its dependenciesRemote server: it ships no package.

Read from public records only: the registry entry, npm/PyPI, GitHub and advisory databases, checked 2026-11-01. No tool was called. Only “met” and “not met” are counted, so the total differs between servers; a check that does not apply or that we could not run is listed, never counted against it. It is not a safety rating, and the same rules apply to every server. How each check works · Leaderboards · How we stay neutral

Common questions about net.letsbot/mcp

Answered from the data above

Who publishes net.letsbot/mcp?

The registry ties the namespace net.letsbot to the domain letsbot.net; only its owner can publish under it. These are facts from the registry and GitHub, not a rating.

Does net.letsbot/mcp need an API key or sign-in?

It opened a session without any credential on 2026-11-01. The registry entry declares no required credential; no declaration is not a guarantee.

Has net.letsbot/mcp been security tested?

Partly. 3 of the 15 checks that apply to it were exercised. It accepted a session without any credential and lists tools whose names suggest they change data. We did not call them. ProtocolProbe publishes no security verdict for a named server.

Found this page useful?

Anonymous · no sign-in

A quick, anonymous reaction — no account, no email. One per kind from your browser. The tally updates when the page is next refreshed, and it is only a rough count, never a safety rating or a measured number of people.

Compare with another server

Side by side: registry entry, our read-only session, the tools and the 18 classification fields. Same values as each page; no score.

Security testing

What did we test, and what did we leave out?

18 checks · features #1, #2

Open without sign-in

It accepted a session without any credential and lists tools whose names suggest they change data. We did not call them. No security score is given; a check we did not run is never counted as passed.

The 18 checks at a glanceour test · 2026-11-01

Inventory: exercised
Hidden instructions: exercised
Real execution: not run · our policy
Secret leak: not run · nothing to check it against
Internal addresses: not run · our policy
Unconfirmed changes: not run · our policy
Bad input: not run · our policy
Model requests: not run · nothing to check it against
Sensitive questions: not run · nothing to check it against
Folder boundary: not run · our policy
Log leaks: not run · nothing to check it against
Hidden content: not run · nothing to check it against
Fake assistant turns: not applicable
Token passthrough: not applicable
Token audience: not applicable
Sign-in redirect: not run · our policy
Consent handling: not testable from outside
Sign-in metadata: exercised

3 exercised12 not run (reason given)3 not applicable

Each check ends in exactly one state: exercised, not run (with the reason), or not applicable (with the reason). 3 of the 15 checks that apply to it were exercised. We do not publish security-check outcomes for named servers.

Exercised · 3

1Inventory
tool-listReads the declared tools, resources and prompts.exercised
2Hidden instructions
description-poisoningLooks for hidden instructions in tool descriptions.exercised
18Sign-in metadata
oauth-url-schemeChecks the published sign-in metadata for unsafe URLs.exercised

Not run, with the reason · 12

3Real execution
real-executionCalls a tool and checks what really happens.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
4Secret leak
canary-leakPlants a fake secret and checks whether it leaks.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
5Internal addresses
ssrfChecks whether a tool can be steered to internal addresses.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
6Unconfirmed changes
write-without-confirmationChecks whether tools that change data act without asking.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
7Bad input
error-handlingSends bad input and watches how the server answers.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
8Model requests
samplingChecks whether the server asks the client's model to act for it.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
9Sensitive questions
elicitation-sensitive-dataChecks whether the server asks users for sensitive data.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
10Folder boundary
root-boundaryChecks whether the server reaches outside the folders it was given.This check calls the server's tools. ProtocolProbe calls no server's tools for anything it publishes; an operator can run this check on their own server with our self-test command.not run · our policy
11Log leaks
logging-side-channelChecks whether log messages carry data they should not.This check needs at least one successful tool call to have something to check, and no tool was called.not run · nothing to check it against
12Hidden content
audience-hidingChecks resources that hide content from the user.This check needs content the server returns, and nothing was read or called.not run · nothing to check it against
16Sign-in redirect
open-redirectChecks the sign-in redirect for abuse.Testing the sign-in redirect means sending probes to the operator's sign-in service, which we do not do.not run · our policy
17Consent handling
confused-deputyChecks consent handling when one service acts for another.Depends on the operator's own consent screen, which differs per server and cannot be tested from outside.not testable from outside

Does not apply to this server · 3

13Fake assistant turns
fake-assistant-turnChecks prompts that pose as the assistant's own words.The server exposes no prompts.not applicable
14Token passthrough
token-passthroughChecks whether the server forwards a user's token to other services.The server opened a session without sign-in, so there is no token flow to check.not applicable
15Token audience
token-audience-validationChecks whether tokens meant for another service are accepted.The server opened a session without sign-in, so there is no token flow to check.not applicable

Source: our own test, 2026-11-01, mcp-runtime-engine@0.1.0. Which checks count and why follows our published scoring model.

What happened during the test?

Feature #8

The steps in order, as the test record holds them.

0 msStarted a read-only session with the server's remote endpoint
1,513 msConnected after 0 redirects. No credential was sent or needed.
Read the inventory: 95 tools, 0 resources, 0 prompts.
6,503 msFinished: 3 checks exercised.

Reference

How is it classified?

18 fields

One value per field, each with its source. Fields written by AI models are marked. A field with no value says why.

TopicAI-classified

pending: added in the weekly update

listed 2026-11-01; not classified yet

Pricing modelAI-classified

pending: added in the weekly update

the website is not read yet

Programming language

does not apply

no existing GitHub repository (server declares no repository link, so there is nothing to fetch)

Hosting type

remote (hosted by the publisher)

registry · 2026-11-01

MCP capability

tools

our test · 2026-11-01

Transport

streamable HTTP

registry · 2026-11-01

Required credentials

none declared

registry · 2026-11-01 · no declaration is not a guarantee

Package registry

does not apply

remote-only server: no package is shipped, so there is no package registry

Freshness

0–30 days

registry updatedAt · 2026-11-01

Lifecycle status

active

registry · 2026-11-01

License class

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Integrity hash

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Signature / provenance

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Dependency advisories

does not apply

ships no package, so there are no dependencies to audit

Popularity

does not apply

remote-only server: ships no package, so there is nothing to look up in a package registry

Publisher signals

not stated

no readable GitHub owner to describe

Maintenance

does not apply

server declares no repository link, so there is nothing to fetch

Environment

the publisher's infrastructure

where it runs, from the hosting type · 2026-11-01

“Not stated” means the source did not state it; “does not apply” means it does not apply to this kind of server; “our limit” means our own lookup failed. A linked value opens the directory filtered to the same value.

Cite or correct this page

Sources and corrections

Suggested citation

ProtocolProbe. “net.letsbot/mcp: MCP server record.” Data checked 2026-11-01. https://protocolprobe.com/mcp/servers/net.letsbot/mcp

Figures are valid for the date shown. Our facts on this page are CC BY 4.0: reuse them with a link and the check date. Quoted text (the publisher’s descriptions, website quotes, tool names) is not ours to license.

As JSON: this record in the API · API documentation.

Badge for your README

[![ProtocolProbe](https://protocolprobe.com/api/v1/badge/net.letsbot/mcp)](https://protocolprobe.com/mcp/servers/net.letsbot/mcp)

It shows this server's record-check count: facts from public records, no tool called. It is not a security rating or a pass. It links here and updates after each data reload.

Something wrong, or is this yours?

If a fact here is wrong, tell us and we will re-check it. If you operate this server, you can run our checks on it yourself with the free self-test command; we call no server’s tools ourselves for anything shown here.

Write to hello@protocolprobe.com · corrections log · methodology