openmessage
Health Pass
- License — License: Unlicense
- Description — Repository has a description
- Active repo — Last push 0 days ago
- Community trust — 11 GitHub stars
Code Fail
- rm -rf — Recursive force deletion command in macos/build.sh
Permissions Pass
- Permissions — No dangerous permissions requested
This is a local-first messaging workspace and MCP server that integrates with Google Messages and WhatsApp, allowing you to read and send SMS, RCS, and WhatsApp messages directly through a Mac app, web UI, or compatible AI clients.
Security Assessment
Overall risk: Medium. The application inherently accesses highly sensitive data, including your personal SMS texts, WhatsApp chat histories, and media files. It runs a local web server and acts as an MCP server, meaning it accepts external inputs and commands that can trigger outgoing network requests to sync and send messages. There are no hardcoded secrets detected, and it does not request dangerous system permissions. However, the rule-based scan flagged a recursive force deletion command (`rm -rf`) inside a macOS build script, which is a potential supply chain risk if misconfigured or altered.
Quality Assessment
The project appears to be actively maintained, with its most recent push happening today. It uses the Unlicense license, which is highly permissive and great for open-source reuse. Community trust is currently low; the repository has only 11 GitHub stars, suggesting it is in its early stages and has not yet been widely vetted by a large user base.
Verdict
Use with caution — while the app functions exactly as intended by providing local AI access to your messages, the sensitive nature of the data it handles combined with a small community footprint warrants careful review before deployment.
Local-first Google Messages + WhatsApp inbox for Mac, web, and MCP.
OpenMessage
OpenMessage is a local-first messaging workspace for Google Messages and WhatsApp. Use it from the native macOS app, the localhost web UI, or any MCP-compatible client.
Built on mautrix/gmessages (libgm) for the Google Messages protocol and mcp-go for the MCP server.
What it does
- Google Messages for Mac — pair your Android phone and read/send SMS + RCS locally
- Live WhatsApp support — link WhatsApp as a live companion device on your machine
- One local inbox — search, route-aware threads, media, reactions, drafts, and grouped contacts
- macOS app + web UI — native wrapper with notifications and contact photos, plus a localhost UI
- MCP-ready — expose the same local inbox to Claude Code and other MCP clients
Quick start
Prerequisites
- Go 1.22+ (install)
- Google Messages on your Android phone
1. Clone and build
git clone https://github.com/MaxGhenis/openmessage.git
cd openmessage
go build -o openmessage .
2. Pair with your phone
./openmessage pair
By default, a QR code appears in your terminal. On your phone, open Google Messages > Settings > Device pairing > Pair a device and scan it. The session saves to ~/.local/share/openmessage/session.json.
If Google only offers account pairing, you can also pair with Google account cookies copied from browser devtools:
pbpaste | ./openmessage pair --google
The CLI accepts either a JSON cookie object or a full curl command for messages.google.com/web/config, then prompts you to confirm an emoji on your phone.
3. Start the server
./openmessage serve
This starts both:
- Web UI at http://127.0.0.1:7007
- MCP SSE endpoint at
http://127.0.0.1:7007/mcp/sse
When serve is launched by an MCP client over pipes, it also serves MCP on stdio automatically.
3a. Optional: link WhatsApp
After serve is running, open the local UI and link WhatsApp from the Connections surface. OpenMessage keeps that bridge local and syncs it into the same inbox as Google Messages.
4. Connect to Claude Code
Add to ~/.mcp.json:
{
"mcpServers": {
"openmessage": {
"command": "/path/to/openmessage",
"args": ["serve"]
}
}
}
Restart Claude Code. The MCP tools appear automatically.
Features
- Read messages — full conversation history, search, media, replies, reactions
- Send messages — SMS/RCS plus live WhatsApp text, media, and voice notes
- Live WhatsApp sync — pair a local WhatsApp companion device for inbound messages, typing indicators, read state, and media
- React to messages — emoji reactions on any message
- Image/media display — inline images, video, audio, and fullscreen viewer
- Desktop notifications — native macOS notifications for fresh inbound messages
- Web UI + macOS app — real-time conversation view at localhost:7007 and a native wrapper
- MCP tools — conversation lookup, direct replies, route-aware sends, media download, import helpers, and story/viz tools
- Local storage — SQLite database, your data stays on your machine
MCP tools
| Tool | Description |
|---|---|
get_messages |
Recent messages with filters (phone, date range, limit) |
get_conversation |
Messages in a specific conversation |
search_messages |
Full-text search across all messages |
send_message |
Send SMS/RCS to a phone number |
send_to_conversation |
Send a text reply directly to an existing conversation ID |
list_conversations |
List recent conversations |
list_contacts |
List/search contacts |
get_status |
Connection status and paired phone info |
Web UI
The web UI runs at http://localhost:7007 when the server is started. It provides:
- Conversation list with search and grouped multi-route contacts
- Message view with images, video, audio, reactions, and reply threads
- Route-aware compose and send
- Google Messages + WhatsApp connection controls
- Live typing indicators, read-state rendering, and notifications
Native macOS app
The repo also includes a native Swift wrapper around the same local backend:
- embedded local OpenMessage backend
- native notifications
- contact photos
- the same Google Messages and WhatsApp pairing/runtime model as the web UI
The macOS app target lives under OpenMessage/.
Configuration
| Env var | Default | Purpose |
|---|---|---|
OPENMESSAGES_DATA_DIR |
~/.local/share/openmessage |
Data directory (DB + session) |
OPENMESSAGES_LOG_LEVEL |
info |
Log level (debug/info/warn/error/trace) |
OPENMESSAGES_PORT |
7007 |
Web UI port |
OPENMESSAGES_HOST |
127.0.0.1 |
Host/interface to bind the local web server to |
OPENMESSAGES_MY_NAME |
system user name | Display name for outgoing imported iMessage/WhatsApp messages |
OPENMESSAGES_STARTUP_BACKFILL |
auto |
Startup history sync mode: auto, shallow, deep, or off |
OPENMESSAGES_MACOS_NOTIFICATIONS |
interactive macOS serve sessions only |
Enable/disable native macOS notifications for fresh inbound live messages (1/0). Click-through opens the matching thread when terminal-notifier is available. |
Architecture
- libgm handles the Google Messages protocol (pairing, encryption, long-polling)
- whatsmeow handles live WhatsApp pairing, sync, text/media send, receipts, typing, and avatars through a separate local session store
- SQLite (WAL mode, pure Go) stores messages, conversations, and contacts locally
- Real-time events from the phone are written to SQLite as they arrive
- The native macOS app and the localhost web UI run against the same local backend
- WhatsApp Desktop import remains as a fallback/repair path when the live bridge is not active
- On first run, a deep backfill fetches full SMS/RCS history in the background; later runs do a lighter incremental sync by default
- MCP tool handlers read from SQLite for queries and route sends through the same local runtime
- Auth tokens auto-refresh and persist to
session.json
Development
go test ./... # Run all tests
go build . # Build binary
npm install # Install Playwright test runner
npx playwright install chromium
npm run test:e2e # Run browser-level web UI tests
./openmessage pair # Pair with phone
./openmessage serve # Start server
License
MIT
Reviews (0)
Sign in to leave a review.
Leave a reviewNo results found