An AI agent for your own WhatsApp: the two routes, what it can do, and the risk

Two different things called a WhatsApp AI agent

The two routes differ in who is allowed to build them and what number they sit on, and the choice follows from that.

• The official route. A company connects an AI system to the WhatsApp Business Platform, Meta’s supported interface, using a number registered for business use. It is built for a business talking to customers.
• The linked-device route. An agent signs in to a WhatsApp account the way WhatsApp Web does, after you scan a QR code. It can read and send in that account. It is not Meta’s supported API.

If you want the agent linked to your own existing number, the second route fits. You can also message a separate Business Platform bot from your personal WhatsApp, but that bot has its own business number. If you want a company-run bot that answers the public under a business name, the first is the one Meta supports.

Route one: the WhatsApp Business Platform

Meta’s WhatsApp Business Platform page describes approved templates, automated flows and AI tools for messaging customers, in four message categories: marketing, authentication, utility and service. Meta’s pricing documentation says that since 1 July 2025 it charges per message, replacing the earlier conversation-based pricing. It also describes a 24-hour customer service window that starts when a WhatsApp user messages the business and resets each time they message again.

Hermes Agent can use this route too, with a separate adapter set up through the wizard that hermes whatsapp-cloud starts. Its documentation lists what you need: a Meta Business account, a phone number set aside for the business, and a web address reachable over HTTPS where Meta sends the incoming messages. It also notes that a reply more than 24 hours after the customer’s last message needs a pre-approved template, which is Meta’s rule rather than a Hermes limit.

That is a sound choice for a business that needs a stable, supported bot on a public number. It is not a way to get an assistant inside your own personal WhatsApp, and ReadyHermes does not offer it: its WhatsApp connection is the linked-device kind described next.

Route two: an agent linked to your number

Hermes Agent’s built-in WhatsApp support uses a small bridge built on Baileys, an open-source library. Its documentation says it works by emulating a WhatsApp Web session, not through the official Business API. You scan a QR code once from WhatsApp, under Settings, Linked devices, and the agent then reads and answers messages in that account. The login is saved, so a restart does not need a new scan.

Hermes offers two modes:

• Self-chat. The agent sits on your own account, and your conversation with it happens in “Message yourself”, the chat WhatsApp gives you with your own number. Messages from everyone else are ignored here, and the bridge code drops any message that is not in that one chat. This is the mode the documentation describes as quick to set up, for a single user.
• Separate bot number. The agent has a number of its own and people message that number. The documentation recommends this mode, for a cleaner experience, several users and lower risk of trouble.

The step-by-step commands, the settings file and the fixes for common errors are in the Hermes Agent WhatsApp setup guide. If you would rather run it yourself from scratch, start with installing Hermes Agent. This page stays on the question of whether it suits you.

The risk, stated plainly

The Hermes documentation puts a warning above everything else on this route: third-party bots outside the Business API are not something WhatsApp officially supports, and using a third-party bridge carries a small risk of account restrictions. Its advice is to use a dedicated phone number for the bot rather than your personal one, to keep usage conversational, and not to automate messages to people who have not messaged you first. It also warns that WhatsApp changes its web protocol from time to time, and a change like that can stop such a bridge working until Hermes catches up.

WhatsApp’s Terms of Service, read on 31 October 2026, say WhatsApp may modify, suspend or terminate access to its services at any time, including for violating the letter or spirit of the terms. We are not lawyers and will not tell you whether a given linked-device agent breaches them. What we can say is that Meta does not describe this as a supported product, and nobody can promise Meta will allow it, now or later.

So decide with that in mind. If the number holds your family chats, years of history or your only line to customers, a separate number is the cautious choice, and it is the one Hermes recommends. If you try it on your main number anyway, you are accepting the risk the documentation describes, and keeping to your own self-chat is the lightest-touch way to do it.

What an agent in your own chat can do for you

Think of it as a contact that never sleeps and knows your accounts. A few messages you might send, and what comes back:

Reminders and scheduled messages

You write “remind me at four to ring the plumber” or “every weekday at 8, send me today’s plan”. Hermes has a built-in scheduler, and a job can deliver its result back to the chat it was created in, so the reminder arrives in the same conversation. On a hosted agent it keeps running while your phone and laptop are off.

Things you forward or paste

Send it a long supplier message, a photo of a form or a document and ask for the short version, the deadline, or a reply in a different tone. Hermes passes photos, videos and documents to the agent as attachments and transcribes voice notes, so you can also talk to it instead of typing.

Drafts you approve

With Gmail connected, you can say “draft a reply to the last email from the landlord, polite but firm”. The connected-app actions include creating a Gmail draft, so the text can wait in your Drafts folder for you to read and send. Ask for a draft when you want to send it yourself; connecting Gmail also lets it send, so the draft habit is an instruction, not a lock.

Your diary and your sheets

With Google Calendar connected it can list your events, find free slots and create an event once you agree a time. If you keep a Google Sheet, it can be asked to read or add rows. See the AI calendar assistant page for that job on its own, and whether ChatGPT can answer your emails for the email side.

If you run a small business from your own phone, the wider picture is in an AI assistant for small business owners and an AI agent for a one-person business.

Who it should and should not answer

An agent that can read your email and calendar should not take instructions from anyone who happens to have your number. Hermes trusts no one by default. A sender has to be on the allowlist, or approved through pairing, before anything they write reaches the agent. The practical choices are:

• Only you. Self-chat, where the bridge ignores everyone else. The right default for a personal assistant.
• A short list. Your partner, your assistant or a few regular contacts, by phone number in international form. The Hermes setting for this is WHATSAPP_ALLOWED_USERS.
• Anyone. Possible, but then a stranger can try to talk the agent into using whatever it is connected to. The ReadyHermes panel makes you tick a box acknowledging exactly that, and its own text says instructions in chat are guidance, not a lock.

On a separate bot number, Hermes by default sends an unknown direct sender a short pairing code, and the setting whatsapp.unauthorized_dm_behavior: ignore keeps it silent to everyone not allowed. In self-chat mode, messages from other people are dropped anyway. Replies to people who have contacted you, or to your existing customers and members, are the fair use here. Starting conversations with people who never wrote to you is what both the Hermes documentation and common sense tell you to avoid.

What it cannot do, and what stays yours

It is software that sometimes misreads a date or a name, so keep a human step wherever a mistake is costly. Payments, anything that commits you to a contract, and final replies to a customer you care about are yours to approve. Asking for drafts or approval is guidance to the agent, not a technical gate.

• It reaches your accounts only through the apps you connect and the chats you allow. It also has its own tools, such as web browsing and files in its own workspace, but linking it does not give it the rest of your phone.
• It answers while the agent and its WhatsApp connection are running. Your phone does not have to stay online, but WhatsApp unlinks devices if you do not use WhatsApp on your main phone for about 14 days; then you pair again.
• The saved login is as sensitive as a password; anyone who copied it could use the account. If in doubt, remove the device under Settings, Linked devices.
• Group chats are off by default in Hermes, and not supported on ReadyHermes yet, which answers direct chats only.
• The text of what you ask goes to an AI model provider to be answered.

None of this removes the account risk from the earlier section, and none of it is a promise about how Meta will treat the account.

An AI agent for your WhatsApp on ReadyHermes

ReadyHermes runs your own Hermes Agent on our servers, so there is no bridge for you to install or keep running. Connecting is a few clicks: Channels, then WhatsApp, then Connect. A QR code shows up after a restart of about a minute. You scan it from WhatsApp under Settings, Linked devices, Link a device, and keep using WhatsApp on that phone at least every couple of weeks. This is the linked-device route, so everything in the risk section applies, and a separate number is the cautious option.

After connecting, a panel lets you choose who can message the assistant: only you (the default, in your chat with yourself), specific numbers you list (up to 50), or anyone. Changing it restarts the assistant for about a minute, and anyone outside your choice is simply not answered. Connected apps such as Gmail and Google Calendar are added from the Apps panel, where you sign in to each one yourself and can disconnect it at any time. The same Channels panel also connects Telegram, Discord, WeChat and Lark. Read the setup guide for the finer points, and the apps page for what can be connected.

You can try it for an hour for free. If the number matters to you, try it first on a spare one.