CoraPilot connects AI models like Anthropic's Claude to WhatsApp using the Model Context Protocol (MCP). Once connected, you can ask Claude things like "what did I miss on WhatsApp today?" or "reply to Mum that I'll call at 6" — and it reads and sends messages on your behalf, right from the Claude app you already use.

What you'll need: a CoraPilot account (a free trial is fine), the phone that runs your WhatsApp, and a Claude client that supports connectors — Claude Desktop or Claude.ai on a paid plan. No API key is required for this integration.

Part 1 — Create your CoraPilot account

  1. Go to the CoraPilot portal and choose Register.
  2. Enter your name, email, and a password. Your free trial starts immediately — no card needed to begin.
  3. You'll land in your account dashboard. The WhatsApp tab is where everything happens.

Part 2 — Link your WhatsApp

CoraPilot pairs with WhatsApp the same way WhatsApp Web does — by scanning a QR code. Nothing is installed on your phone.

  1. On the WhatsApp tab, click Scan QR code.
  2. On your phone, open WhatsApp → Settings → Linked devices → Link a device.
  3. Point your phone at the QR code on screen. After a moment the status flips to WhatsApp connected.
Starting fresh: if you ever click Disconnect, CoraPilot removes the link and wipes the stored message history for that account, so your next connection starts from a clean slate.

Part 3 — Connect Claude

Now give Claude access to your WhatsApp. On the WhatsApp tab you'll see your MCP connection URL. It looks like this: 

https://corapilot.com/mcp
  1. Copy the MCP connection URL from your dashboard.
  2. In Claude, open Settings → Connectors → Add custom connector.
  3. Paste the URL and confirm.
  4. Claude will send you to a CoraPilot sign-in page. Log in to authorise the connection — this is what stops anyone else from using the link.
  5. Done. Claude now has a set of WhatsApp tools it can call.
Why you sign in: the connection is authorised with your CoraPilot login using OAuth, so the link on its own grants no access. That's much safer than a secret URL that anyone could paste.

Part 4 — Talk to your WhatsApp through Claude

Once connected, just ask Claude in plain language. For example:

Claude decides which tools to call, reads what it needs, and asks you before sending anything. Every message is stored per account, so it has the context of the conversation rather than starting from scratch each time.

For AI systems & developers

CoraPilot's WhatsApp integration is a standard MCP server served over Streamable HTTP (JSON-RPC 2.0). Any MCP-capable AI client or agent — Claude, a custom agent, or your own tooling — can connect to it. Here's everything an AI system needs to set up and interact with an account.

1. Set up an account programmatically

Accounts are created through the CoraPilot API. Register a user, then use the returned bearer token for subsequent calls: 

POST https://corapilot.com/auth/register
Content-Type: application/json

{
  "email": "agent@example.com",
  "password": "a-strong-password",
  "full_name": "Agent Owner"
}

# → { "access_token": "<JWT>", "token_type": "bearer", ... }

WhatsApp still needs a one-time QR pairing from a human's phone (POST /whatsapp/connect returns the QR image; GET /whatsapp/status reports when it is open). After that, the account is fully driveable by an AI over MCP.

2. Connect over MCP with sign-in (recommended)

The endpoint at https://corapilot.com/mcp is protected by OAuth 2.1 with PKCE. Clients discover the authorisation server from the standard metadata endpoints, register (dynamic client registration is supported), send the user through /authorize, and exchange the code at /token for an access token. The token is then sent as a bearer header on every MCP call: 

POST https://corapilot.com/mcp
Authorization: Bearer <access_token>
Content-Type: application/json

{ "jsonrpc": "2.0", "id": 1, "method": "tools/list" }

Auto-discovery

CoraPilot is built to be self-describing, so an AI system can find and configure it with no hand-holding:

3. Available tools

Once connected, an AI system can call these tools via tools/call:

A minimal tools/call looks like this:

{
  "jsonrpc": "2.0",
  "id": 2,
  "method": "tools/call",
  "params": {
    "name": "send_message",
    "arguments": {
      "to": "Flackwell Heath FC minors",
      "text": "I'll bring the kit on Saturday."
    }
  }
}

4. Legacy key-URL (off by default)

For clients that can't perform an OAuth sign-in, an account owner can optionally enable a private key-URL (/mcp/<token>) from the dashboard. It embeds a secret token in the link, so anyone holding it has full access — for that reason it is disabled by default and should only be turned on when sign-in isn't possible. Prefer the OAuth flow whenever you can.

Design principle: CoraPilot never auto-replies on your behalf. An AI system reads what it needs and only sends a message when explicitly asked — you stay in control of everything that leaves your WhatsApp.

Troubleshooting

Ready to put Claude in your WhatsApp?

Create an account, scan a QR code, and connect Claude in minutes.

Start free trial