Mmcp.market

Zapcore MCP server

by adeiltonpessini·io.github.adeiltonpessini/zapcore-mcp·v0.1.1
No reviews yet

Servidor MCP do zapCore (WhatsApp): leitura sempre, envio atrás de flag e allowlist de destino.

C55/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C55/100

full report

Adoption
New

357 downloads/wk

Reviews

Write one

Nobody has reviewed Zapcore yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Zapcore tools (12, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • zap_chat_action

    Estado de uma conversa: marcar lida/nao lida, arquivar, fixar, silenciar, favoritar mensagem ou apagar mensagem.

  • zap_contacts

    Agenda da instancia, paginada. Nunca devolve a lista inteira de uma vez.

  • zap_groups

    Grupos: lista (list), detalhe de um (info) ou link de convite (invitelink).

  • zap_history

    Historico de uma conversa. chatJid="index" lista as conversas com atividade. Exige historico habilitado para a instancia.

  • zap_labels

    Etiquetas do WhatsApp Business: lista as etiquetas ou o que esta marcado com uma delas.

  • zap_media_download

    Baixa a midia de uma mensagem recebida (campos vindos do evento do webhook) e GRAVA EM ARQUIVO local, devolvendo o caminho. Nunca despeja base64 na conversa.

  • zap_message_status

    Estado de entrega de uma mensagem enviada (enviada/entregue/lida) pelo ID.

  • zap_react

    Reage a uma mensagem com emoji. Emoji vazio remove a reacao.

  • zap_sendwrite action

    Envia mensagem no WhatsApp. Midia SEMPRE como data:<mime>;base64,<...> — URL externa nao funciona (o container nao tem egress). So envia para destino em ZAPCORE_MCP_ALLOW.

  • zap_send_interactivewrite action

    Envia mensagem interativa: botoes, lista, enquete ou carrossel. Carrossel exige imagem em TODO card (card sem midia quebra a bolha no Desktop/Web) — use degrade:"text" para cair em texto simples.

  • zap_session

    Estado da sessao WhatsApp: conectado, JID, e a cota de envio restante.

  • zap_user_lookup

    Consulta numeros: se tem WhatsApp (check), perfil (info), avatar (avatar) ou o LID (lid).

Public scan report

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

no findings
  • Code scan12 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancerepository not readable: repo not found3/15
  • Maintainer identityno repository or website to verify2/10
Overall 55/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

Runs npx -y zapcore-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add zapcore-mcp -- npx -y zapcore-mcp
Add to Cursor

Zapcore: common questions

Is Zapcore MCP server safe?
With care: it is graded C, so read the findings first (55/100). Read the Zapcore safety report
How do I install Zapcore?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does Zapcore need an API key?
Yes. The registry entry asks for ZAPCORE_TOKEN, ZAPCORE_CF_ACCESS_CLIENT_ID, ZAPCORE_CF_ACCESS_CLIENT_SECRET.
Is Zapcore maintained?
The latest release is v0.1.1.

More from adeiltonpessini →