Arara MCP

Turn Claude Code, Claude Desktop, Cursor, Windsurf or ChatGPT into a WhatsApp operator that knows your customers, your templates, your wallet, and your funnel. Built by AraraHQ — Brazilian CPaaS for WhatsApp, homologated by Meta.

Say who and what — send_whatsapp does the rest · OAuth login · stdio + SSE

Install in 30 seconds

Claude Code

claude mcp add arara --scope user -- npx -y ararahq-mcp
npx -y ararahq-mcp login

Browser opens, you approve, the token lands in your OS keychain. Done.

Prefer doing it inside a conversation? Restart Claude Code and say:

log into arara

Claude Desktop

Edit ~/Library/Application Support/Claude/claude_desktop_config.json (macOS) or %APPDATA%\Claude\claude_desktop_config.json (Windows):

{
  "mcpServers": {
    "arara": {
      "command": "npx",
      "args": ["-y", "ararahq-mcp"]
    }
  }
}

Restart Claude Desktop. Type "log into arara" in any chat — browser opens, you approve, you're in.

Cursor

Settings → MCP → Add server:

{
  "arara": {
    "command": "npx",
    "args": ["-y", "ararahq-mcp"]
  }
}

Windsurf

.windsurf/mcp.json at project root:

{
  "servers": {
    "arara": {
      "command": "npx",
      "args": ["-y", "ararahq-mcp"]
    }
  }
}

Hosted SSE — no local install

For ChatGPT (Custom GPT), n8n, or any client that speaks SSE:

URL:    https://mcp.ararahq.com/sse
Header: X-Arara-Key: ara_live_xxx

Generate the key at Dashboard → API Keys.

Headless (CI / n8n self-hosted / server)

Skip OAuth — set the env var and run:

ARARA_API_KEY=ara_live_xxx npx ararahq-mcp --stdio

Related MCP server: WhatsApp Business MCP

4 things you can do right now

1. Ask the LLM: "Manda 'oi, tudo bem?' pro +5511999998888." → Calls send_whatsapp. It fixes the number format, sends free text if the 24h window is open, and if it's closed it offers your approved templates instead of failing.

2. Ask: "Dispara o template black_friday pros meus 200 leads." → Calls broadcast with the approved template. Resolves names/numbers and batches the send.

3. Ask: "O João já pode receber mensagem agora?" → Calls check_status. Tells you if the 24h window is open and how long is left.

4. Ask: "O +5511999998888 pediu pra sair da lista." → Calls opt_out. LGPD-safe, idempotent.

Why an MCP, not a raw API client?

A raw API client makes you remember endpoints, payload shapes, the E.164 format, the 24h window, template approval state. The MCP collapses that into a minimal surface: you say who and what, and send_whatsapp figures out the rest. You speak Portuguese. The LLM does the rest.

Tool index

A small set of intent tools does the work, and read-only data lives in resources (your client loads them automatically, no tool call needed). You say who and what — the tools handle number format, the 24h window, and template state.

send_whatsapp · send_template · broadcast · broadcast_ab · check_status

send_whatsapp(to, message) — to is a number in any format OR a saved contact name. Fixes E.164 + the Brazilian 9th digit, sends free text when the 24h window is open, and when it's closed it lists your approved templates or helps you approve a new one — it never invents a template. send_template(to, templateName, variables[]) sends one approved template to one person, filling {{1}}, {{2}}... positionally — the way to message someone when the 24h window is closed. broadcast(templateName, to[], variables[]) sends an approved template to many; pass a plain number/name for the same variables for everyone, or {to, variables} per recipient to personalize (each person's name in {{1}}). broadcast_ab does the same with a 2-template A/B test. check_status answers "delivered? replied? can I message now?".

read_conversation

read_conversation(to) reads the actual message content exchanged with a person — what the customer really wrote, not just the metadata in arara://conversations/recent. It reads the raw message timeline by phone, so it does not depend on the inbox, the Pro plan, a dedicated number, or the Brain qualifier (whose leadScore/leadSummary are often null). Each line is tagged with who spoke (customer / you) and when, so you can tell real interest from an AI auto-reply.

save_contacts

Create/update up to 1000 contacts so you can message by name. Listing/reading contacts is the arara://contacts/recent resource.

create_template · get_template_status

Submit a real, fixed-copy template for Meta approval (used when the 24h window is closed) and poll its approval. Your approved templates are the arara://templates/approved resource.

create_smart_link · list_smart_links · create_short_link · list_short_links

create_smart_link(name, phoneNumber, defaultText?) makes a click-to-chat link + QR that opens WhatsApp on your number with a prefilled text — the destination is always a number. create_short_link(url, name?) shortens any URL into a tracked ararahq.com/l/CODE that 302-redirects to the destination and counts every click — use it for a bio link, an ad, or a utm-tagged landing page. Both list_* tools return the links with per-link click counts.

opt_out

Record that a contact unsubscribed (LGPD-safe, idempotent). The current opt-out list is the arara://opt-outs resource.

login · logout · whoami

OAuth device flow: opens browser, polls until approved, stores token in OS keychain. Never on disk.

send_first_message(to, message) · run_broadcast(audience, goal)

Client-side shortcuts: the first walks the send + closed-window flow; the second picks a template from your approved list, excludes opt-outs, checks balance and asks for your approval before dispatching.

arara://organization/me · arara://wallet/balance · arara://templates/approved · arara://numbers · arara://numbers/health · arara://campaigns/recent · arara://recovery/funnel · arara://contacts/recent · arara://conversations/recent · arara://opt-outs

Numbers, wallet, templates, contacts, conversations, opt-outs and health snapshots. The LLM reads these passively to back decisions — they don't clutter tool choice. conversations/recent is metadata only; for the actual message content of a conversation, use the read_conversation tool.

Account config that isn't day-to-day operator work — API keys, business profile, number provisioning, A/B tests, Brain knowledge base, recovery setup — lives in the dashboard, not the agent surface.

Authentication

Two modes, picked automatically in this order:

Internal precedence: explicit apiKey arg → SSE session key → OAuth keychain → ARARA_API_KEY env. If none exist, tools fail with MissingAuth and tell you to run login.

Configuration

# OAuth is the default. These are all optional overrides.
ARARA_API_KEY=ara_live_xxx          # Fallback / headless mode
ARARA_BASE_URL=https://...          # Override endpoint (default: https://api.ararahq.com/api)
ARARA_MCP_TELEMETRY=off             # Disable usage telemetry
PORT=3333                           # SSE mode port (default 3333)
MCP_TRANSPORT=sse                   # Force SSE instead of stdio

Tokens stored via keytar — macOS Keychain, Linux Secret Service, Windows Credential Manager. Never on disk in plaintext.

Local dev

git clone https://github.com/ararahq/ararahq-mcp.git
cd ararahq-mcp
npm install
npm run build
node build/index.js --stdio          # for Claude Desktop / Code testing
PORT=3333 node build/index.js        # for SSE testing on localhost

To wire your local build into Claude Code:

claude mcp add arara --scope user -- node /absolute/path/to/build/index.js --stdio

Get help

• Docs: docs.ararahq.com/mcp-server

• Issues: github.com/ararahq/ararahq-mcp/issues

• WhatsApp: message any Arara number — yes, we use our own product

Built in São Paulo · MIT license · © AraraHQ