Builders Program

Build with us for a whole month. Unlimited usage and add-ons, weekly calls and your own Slack channel.

Learn more
Polymorfa

Command Palette

Search for a command to run...

MCP server

Your AI agent gets the same API you do

150+ WhatsApp tools at one URL, and one prompt that sets your agent up. Every call runs on your credential's scopes and rate limits.

MCP tools
150+
Packages to install for MCP
0
Tools that need confirm: true
11
To set up your agent
1 prompt

Hosted MCP

Every WhatsApp action at one URL.

Add api.polymorfa.com/mcp and a Polymorfa credential to your agent. No package, OAuth app or separate token. Each tool calls the matching API route.

150+ tools in 11 families

  • Messages, groups, channels and Business App catalogs
  • Campaigns, templates, Customers and webhooks
  • Health, Safe Mode, warm-up and call records
  • Idempotency keys for sends and other retries
Your scopes and rate limits. Each tool passes your credential to its API route. A project token needs the mcp scope, and a missing scope fails exactly as it does over REST.
Wait for new events. events_wait holds the call for up to 60 seconds and returns as soon as an event arrives, with a cursor for the next call.
Resources and prompts. Sessions, server info and webhooks as resources. Prompts walk the agent through sending a message or following up on new ones.

Guardrails

Agents act. People approve.

The MCP server keeps the API's authority, then adds checks that matter when a model is the caller.

Confirm what can't be undone. Eleven tools that send or can't be undone, such as templates_delete and events_replay, fail without confirm: true. Agent clients also see them marked destructive.
A person launches campaigns. Launch, resume and reschedule calls become approval requests. A team owner or admin approves in the Console, and Polymorfa runs exactly what was asked, once. Requests expire after 72 hours.
Message text stays data. Events, stored messages and templates come back inside untrusted-data markers. Content can't close the markers, so instructions hidden in a message stay data.
No side door. Pairing, key creation, billing changes, approvals and cancellations stay with people. Billing tools only read.
  • Retries without duplicates. Reuse an idempotency_key on sends, archives, replays and delivery retries.
  • A pinned version. Tools use API version 2026-09-22, so a later API default doesn't change them.
  • Three credential types. Team keys, project tokens with the mcp scope, and client tokens that allow mcp.

Setup prompt

One prompt sets up your agent.

Paste it into your coding agent. It reads the project first, keeps your configuration and stops when a person needs to sign in.

Works in your agent

  • Claude Code, Codex, Cursor and other coding agents
  • Installs the agent kit and the docs MCP
  • Adds the API MCP only when the task needs your data
  • Keeps your other MCP servers and settings

Set up

Connected in a minute.

Point your agent at the hosted MCP, then ask in plain words.

terminal
claude mcp add --transport http polymorfa https://api.polymorfa.com/mcp \
  --header "Authorization: Bearer $POLYMORFA_TOKEN"

API surface

What the MCP can reach.

Tools are named domain_action and map to Messaging and Platform API operations. These are five of the 150+.

Tools

  • Toolmessages_sendSend any message kind
  • Toolevents_waitWait up to 60 seconds for new events
  • Toolcampaigns_launchAsk a team owner or admin to approve a launch
  • Toolbusiness_product_createAdd a product to a Business App catalog
  • Toolsafe_mode_update_sessionMake one number's Safe Mode more conservative

Resources and prompts

  • Resourcepolymorfa://sessionsSessions and their status
  • Resourcepolymorfa://infoServer information
  • Resourcepolymorfa://webhooksConfigured webhooks
  • Promptfollow_up_incoming_messagesDraft replies to new messages for you to approve
  • Promptsend_messageSend one message, step by step

Start with a free number

Your first real number is free. Add more numbers on Pay-As-You-Go.