# The connector, *in writing.*

What it is, what tools it gives your AI, what it never does, the sending limits, and what is stored and for how long. For people and for any program that wants to read it.

Updated on November 3, 2026

## A connector that *only sends.*

ConnectYourGPT is an MCP server (the open standard AIs use to work with outside tools) at `https://api.connectyourgpt.com/mcp`, with sign-in. It gives your AI 13 tools: sending WhatsApp messages and posting WhatsApp statuses from your number and managing your ConnectYourGPT address book. None of them reads chats, replies or other people’s statuses.

It connects to your WhatsApp as a linked device, like WhatsApp Web. It is not an official WhatsApp connection.

## What it asks for *when connecting.*

When you connect your AI, ConnectYourGPT shows you these permissions and you decide. Sending and writing contacts include being able to read them: to write to someone you have to find them first.

- `whatsapp.send`: Send WhatsApp messages from your number, on your behalf.
- `whatsapp.status`: Post WhatsApp statuses from your number. Who sees them is set by your phone’s status privacy setting, not by your AI: “Only share with…” limits it best. With “My contacts” a status may still reach someone you deleted after linking, and with “My contacts except…” the exclusion isn’t guaranteed.
- `contacts.read`: See your contacts (name, number, labels and any notes you keep about them) to know who to write to. What you already sent them is only visible to a connection that can also send.
- `contacts.write`: Add and edit contacts in your ConnectYourGPT address book.

Every tool checks the connection’s permission before doing anything, and almost all of them the subscription too: those that don’t say so in their row.

## The 13 *tools.*

Each one, with what it does and its limits. Sending a message or posting a status is always two steps: prepare and confirm.

| No. | Tool | What it does and its limits | Type |
| --- | --- | --- | --- |
| 01 | `get_status` | Your account status: linked number and whether it is connected, subscription, limits and what has been used today (day, hour, new people, queued, pauses). It works even when the subscription is stopped, so it can explain why. | Read |
| 02 | `search_contacts` | Searches contacts by name (accents and capitals don’t matter, small typos are tolerated) or by at least 4 digits of the number. **Limit:** up to 10 results. | Read |
| 03 | `get_contact` | A contact’s card (name, number, tags, notes, “doesn’t want messages”) and, if the connection can also send, the last 5 messages you sent them through ConnectYourGPT. | Read |
| 04 | `create_contact` | Adds a contact. It never overwrites: if the number already exists, it returns it unchanged. **Limits:** without a country code it is read as Mexican (+52) · name up to 60 characters · notes up to 1000. | Adds |
| 05 | `update_contact` | Changes name, tags, notes or “doesn’t want messages”. Tags and notes replace the previous ones; changing the name protects it from the phone sync. | Edits |
| 06 | `prepare_message` | Step 1 of 2: finds the recipient and stores a draft. It sends nothing. With a direct (https) link to the file, the message can carry a photo or a PDF. **Limits:** the draft lasts 10 minutes and only the connection that prepared it can send it · text up to 4096 characters · it can’t be prepared for someone who doesn’t want messages · one file per message, with the text as its caption (up to 1024 characters): a JPEG, PNG or WebP photo up to 10 MB, or a PDF up to 25 MB (no Word, Excel or PowerPoint) · a file only goes to someone in your phone’s contacts or who already got a message from you through ConnectYourGPT. | Draft |
| 07 | `send_message` | Step 2 of 2: sends the draft from your WhatsApp. If it comes back “queued”, there’s no need to repeat it; repeating it with the same draft doesn’t send twice. **Limits:** the limits below · a sent message can’t be unsent. | Sends |
| 08 | `list_sent_messages` | What was sent through ConnectYourGPT, newest first, with its status (queued, sending, retrying, sent, delivered, read, failed, cancelled, unknown) and which AI sent it. **Limits:** up to 50 per request · the text is kept for 30 days. | Read |
| 09 | `cancel_message` | Cancels a message that is still waiting in the queue. Anything already sent, or being sent right now, can’t be cancelled. | Cancels |
| 10 | `prepare_status` | Step 1 of 2 to post a WhatsApp status (it lasts 24 hours): stores a draft and posts nothing. It says which number it would go out from and how many of your address-book contacts are synced (in the first minutes after linking, that number can fall short): who sees it is set by your phone’s status privacy setting, not by your AI. “Only share with…” limits it best. With “My contacts” a status may still reach someone you deleted after linking, and with “My contacts except…” the exclusion isn’t guaranteed. **Limits:** text up to 700 characters, with a background and font to choose, or a photo (JPEG or PNG, up to 10 MB) with an optional caption · the draft lasts 10 minutes. | Draft |
| 11 | `publish_status` | Step 2 of 2: posts the draft as a status on your WhatsApp. If it comes back “queued” or its outcome is unknown, there’s no need to repeat it; repeating it with the same draft doesn’t post twice. Who saw it can’t be known. **Limits:** up to 4 in 24 hours (2 in the first 72 h), 30 minutes apart, separate from the message limits · the same text, or the same photo, isn’t repeated within 24 h. | Posts |
| 12 | `list_statuses` | The statuses posted through ConnectYourGPT, newest first, with their state (queued, posting, posted, failed, cancelled, unknown) and whether they were removed. It never says who saw them. It works even when the subscription is stopped, so one can be removed. **Limits:** up to 20 per request · the text is kept for 30 days. | Read |
| 13 | `delete_status` | Removes for everyone a status posted through ConnectYourGPT. If it was still waiting in the queue, it stops it and it’s never posted. Removing it twice does no harm. One whose outcome is unknown can only be removed from the phone. It works even when the subscription is stopped. **Limit:** within its 24 hours: after that WhatsApp has already taken it down. | Removes |

There is no tool to read chats, replies or other people’s statuses.

## What it *never* does.

- Read your chats or the messages you receive
- See what people reply
- See your photos or calls, other people’s statuses, or who saw yours
- Send or post without going through the two steps
- Skip the limits, even if you ask

## So WhatsApp *doesn’t block your number.*

They are the same ones your AI sees in `get_status`. A limit never leaves the message waiting: it rejects it, and your AI tells you.

- **Per hour:** 40 — messages
- **Per day:** 150 — messages (50 in the first 72 h)
- **New people:** 15 — per day (5 in the first 72 h)
- **Same person:** 5 — messages per hour
- **Same text:** 5 — people at most in 24 h
- **Same file:** 5 — people at most in 24 h
- **Between sends:** 8–20 s — and a 1-3 min break after 10 in a row
- **Queued:** 60 min — at most; what doesn’t go out expires
- **Draft:** 10 min — to confirm it

* WhatsApp rejects 3 messages in a row → everything paused 60 min
* 5 sends to numbers WhatsApp can’t confirm within 24 hours, whether or not they’re in your address book → no first contacts for 24 hours
* WhatsApp temporarily blocks the number → paused until it passes, plus 60 min

## What is stored, *and for how long.*

| Item | Stored? | For how long |
| --- | --- | --- |
| Your account: email, name, time zone and country, sign-up and last-visit dates, and which terms you accepted | Yes | while your account exists |
| Your linked WhatsApp: number, identifier and link status | Yes | while you use the service (after unlinking it stays as history) |
| Text of what your AI sends | Yes | 30 days |
| Who (number and name), when, in what status and, if it failed, why; which AI prepared it; and a fingerprint of the text (it doesn’t let anyone read it, but does let someone check whether a specific text they already know was sent) | Yes | while you use the service |
| About a file your AI sends (photo or PDF): its name, type, size, a fingerprint and which website it came from. Not the file itself | Yes | 30 days; deleted with the text |
| The full link to that file, encrypted | Yes | only while the draft is valid (and until the next cleanup if it expires unused) and while the send waits in the queue; as soon as it goes out, fails or is cancelled, it is deleted |
| Text of the statuses your AI posts and, if one carries a photo, the same as for a file sent | Yes | 30 days; after that, what remains is when it was posted, its background and font, and whether it was removed |
| Drafts your AI prepares (recipient and text; with a file, also its data and the encrypted link), sent or not | Yes | they expire after 10 minutes and are deleted the next day |
| Your address book: number, name, tags, notes and “doesn’t want messages” | Yes | while you use the service; synced with your phone every 6 hours (what you delete there is not deleted here) |
| The AIs you connected (name, domain, permissions, dates and last use); access codes only as a fingerprint | Yes | while you use the service |
| Daily counters: messages sent and failed, and how many times each tool was used | Yes | while you use the service |
| Encryption keys WhatsApp requires | Yes | those needed to send |
| Send log of the WhatsApp connection: recipient, type, status and date, without text | Yes | 7 days |
| Encrypted backups of the database, one every night | Yes | they rotate out after 14 days; what is deleted disappears from them as they rotate |
| Who received or saw your statuses | No | — |
| Messages you receive | No | — |
| Photos, audio and files | No | — |
| Profile names and your chat settings | No | — |

**What the WhatsApp library keeps, stated exactly**

> To be able to send and receive, the WhatsApp library keeps: for each contact with whom there is an encrypted conversation, their encryption keys and their identifier; for each group the account is in, the key of each member who writes, which is updated with every message that arrives in the group; the privacy permissions WhatsApp provides per contact, with their date (those of accounts already unlinked are deleted automatically); the mapping between phone number and WhatsApp’s internal identifier; and the address book the phone syncs (the saved names), together with an encrypted fingerprint of each action on a chat (mute, pin, archive, mark as read, delete) that makes it possible to check whether a specific chat had that action, but not to see its value. It does not keep texts, files, message identifiers, profile names or chat settings.

The history the phone sends when linking is processed in memory and discarded. The legal details are in the [privacy notice](https://connectyourgpt.com/en/privacy).

## Technical *details.*

- **Address:** https://api.connectyourgpt.com/mcp
- **Transport:** Streamable HTTP (with or without a trailing slash)
- **Sign-in:** OAuth with dynamic client registration (/register)
- **Metadata:** /.well-known/oauth-protected-resource · /.well-known/oauth-authorization-server
- **Permissions:** whatsapp.send · whatsapp.status · contacts.read · contacts.write · offline_access
- **Language:** The tools describe their use in English; your AI replies in yours.