List the allowlisted WhatsApp recipients this engine is permitted to message. Read-only. Numbers are masked. Use the returned name as the recipient argument to wa_preview / wa_send_message / wa_send_file.

Dry-run a send: run every security check and report exactly what WOULD happen, WITHOUT sending. Returns a verdict and, when the send needs confirmation, a confirm_token to pass back to the send tool. Use this before any send you are unsure about.

Return the most recent send-attempt audit records (allowed, blocked, or failed). Read-only. Message bodies are stored as a short preview + hash only.

Send a WhatsApp text message to an allowlisted recipient. Passes through the full security gate (allowlist, secret scan, rate limit, confirmation). If the result has needs_confirm=true, re-call with the returned confirm_token.

Send a file to an allowlisted recipient. The filename is auto-sanitized to an ASCII-safe name (so WhatsApp shows a real name, not 'Untitled', and no path traversal is possible), the type/size are validated, and the caption is secret-scanned. Sending files may require a confirm_token (see wa_preview).