Chat to Set Up WhatsApp Business

WhatsApp Business setup used to mean four tabs: Developer Console, Business Manager, the API docs, and your editor.

Meta now lets you describe the job to an agent instead. The WhatsApp Business Tools MCP is a remote server at mcp.facebook.com. Claude, Cursor, Codex, and ChatGPT can attach to it, sign in with your Meta account, and call tools with a whatsapp_biz_ prefix.

TechCrunch covered the announcement on 15 September. The developer docs, last updated 3 September, are the real spec. Status: beta. Rolling out gradually. The tool set can still change.

What the agent can actually do

First it lists businesses you already administer. Then it can add a phone number, send an OTP, verify it, and register the number for Cloud API messaging. It can create, edit, and delete message templates. It can set webhook URLs. It can check Terms of Service, payments, and business verification — and send you to the page that is blocking you.

There is also whatsapp_biz_send_message. Free-form text only inside the 24-hour customer window, or an approved template. The docs say it confirms the target with you before it sends. Treat that as a client behavior, not a lock on the API.

The older Meta Social Technologies MCP still sits beside it for Graph API lookup, docs search, and error hunting. Meta's own advice is to run both during setup.

The security line that matters

Meta's MCP page is unusually blunt. Agents act on your scopes. Anything you grant, the agent can call — including when a webhook body, a document, or another tool's output hides a prompt-injection. The server is not the attacker. The untrusted content is.

Their checklist is the product: Read scope unless you need writes. Separate apps for experiment and production. Review Business Integrations every few months. Do not give Manage to an agent that reads mail from the internet.

OAuth asks for business_management, whatsapp_business_management, and whatsapp_business_messaging. You can revoke that in Facebook settings. You will likely have to sign in again when you restart the client. Admin on both the business and the WhatsApp-enabled app is required. Messaging stays blocked until an admin accepts the Cloud API terms.

What this is not

This is not a new chatbot for your customers. It is a setup and ops plane for the Cloud API, spoken in English. Rate limits are per user per tool. The interface is beta. If your agent can send templates, the blast radius is a live customer channel, not a sandbox log.

For a founder already running Cursor or Claude Code, the test is simple: connect with Read first, list businesses, stop. Only open Manage when you are sitting next to the OTP. MCP is becoming the way SaaS is configured. WhatsApp just made that visible because everyone already fears a wrong message going out.

Sources

Meta for Developers, WhatsApp Business Tools MCP. https://developers.facebook.com/documentation/mcp/whatsapp-business-tools-mcp

Meta for Developers, Connect AI Agents to Meta with MCP. https://developers.facebook.com/documentation/mcp

TechCrunch, Meta now lets AI agents handle the boring parts of WhatsApp Business setup, 15 September 2026. https://techcrunch.com/2026/09/15/meta-now-lets-ai-agents-handle-the-boring-parts-of-whatsapp-business-setup/