platform-whatsapp

Connect a self-hosted Hermes agent to WhatsApp over SSH with allowlist gating.

13|1|Updated Jun 1, 2026
One-click install
npx skills add https://github.com/paarths-collab/hstack --skill platform-whatsapp-paarths-collab
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: platform-whatsapp
Source: https://github.com/paarths-collab/hstack/tree/main/skills/platform-whatsapp
Command: npx skills add https://github.com/paarths-collab/hstack --skill platform-whatsapp-paarths-collab

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill connects a self-hosted Hermes agent to WhatsApp on a remote VPS while preventing accidental open access that could let any phone message the bot.

Core Features & Use Cases

  • SSH-first deployment: Configures WhatsApp access directly on the VPS where Hermes is running.
  • Hard allowlist enforcement: Requires bare phone numbers before enabling WhatsApp, reducing the risk of unauthorized messages.
  • QR pairing and verification: Guides the user through WhatsApp Linked Devices scanning, session creation, and a live smoke test.
  • Rollback-safe operations: Supports disabling the integration if validation fails while preserving session state for retry.
  • Use Case: A developer wants their Hermes agent to receive WhatsApp messages from only a few approved contacts and remain safe to operate in production.

Quick Start

Use the platform-whatsapp skill to connect a remote Hermes agent to WhatsApp on your VPS with an allowlist and QR pairing flow.

Frequently Asked Questions about platform-whatsapp

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely connect a self-hosted Hermes agent to WhatsApp on a VPS?

To securely connect Hermes to WhatsApp, deploy the agent on a VPS and establish an SSH connection to configure QR-based pairing and enforce a hard phone-number allowlist, preventing unauthorized inbound chats.

What is the best way to prevent unauthorized WhatsApp messages from reaching my self-hosted bot?

The best way to prevent unauthorized WhatsApp messages is by enforcing a hard allowlist of bare phone numbers before enabling inbound chats, ensuring only pre-approved contacts can interact with your agent.

How do I handle WhatsApp session verification and rollback if pairing fails on my VPS?

Handle failed WhatsApp pairing by using rollback-safe operations that disable the integration while preserving session state, allowing you to retry QR pairing and gateway reloading without losing your configuration.

Do I need to validate bare phone numbers before enabling WhatsApp on a remote Hermes deployment?

Yes, you must validate bare phone numbers as an entry barrier before enabling WhatsApp, applying idempotent environment updates and smoke-test confirmations to securely gate access on your remote Hermes deployment.

Can I configure QR pairing for WhatsApp directly over SSH on my VPS?

Yes, you can configure QR pairing for WhatsApp directly over SSH on your VPS, guiding you through Linked Devices scanning, session creation, and a live smoke test before enabling inbound chats.

Why does my WhatsApp integration need a smoke test after reloading the gateway?

Your WhatsApp integration needs a smoke test after reloading the gateway to confirm session verification and idempotent environment updates succeeded before allowing live inbound chats from approved numbers.