Search GitHub for “whatsapp bulk sender” and you get thousands of stars across hundreds of repositories. A developer’s instinct is that one of them solves the problem for free. Most of them solve a different problem, automating WhatsApp Web, and carry a risk the README does not mention. Here is how to read what you are looking at, and when building on the official API yourself is the right call.
The two kinds of repository
WhatsApp Web automation
A headless browser, Puppeteer or Playwright, logged in with your phone’s QR code, scripted to open chats and send. Popular, well-documented, and every one of them is a blaster: consumer account, 256-contact cap, pattern detection, ban.
Cloud API client
A wrapper around Meta’s official Graph API endpoints for the WhatsApp Business Platform. Legitimate and within the rules. Gives you authentication and a send method. Everything else is yours to build.
The README usually tells you which: “scan the QR code” means the first kind; “set your WABA id and access token” means the second.
Why the WhatsApp Web repos are a trap
- They automate a consumer account. Same mechanism as every commercial blaster, same detection, same ban on the number. Open source does not change what WhatsApp sees.
- They break constantly. They scrape an interface Meta did not design for them; each WhatsApp Web release can move the DOM. The issue trackers are a log of this.
- No delivery events. A blue tick scraped from a screen is not a webhook, and a closed browser sees nothing.
- Your phone is the server. It must stay online and paired.
- Sessions hold your chats. The session directory on the server contains the keys to your WhatsApp. Treat a leaked one as a leaked account.
What the Cloud API repos give you, and what they do not
A good client library is worth using if you are building on the Cloud API yourself. Be clear about what it is: an HTTP wrapper. The product you would then have to build around it:
- Template management: create, submit for Meta approval, version, track status.
- Media hosting with Meta’s upload flow and expiry.
- Contacts and consent: storage, tags, opt-in source and date, opt-out handling that actually suppresses sends.
- Campaign pacing inside the number’s messaging tier, with retry and failure handling.
- Webhook intake: signature verification, idempotency, event storage, and a place for inbound replies to go.
- An inbox for the humans who answer those replies, with assignment and history.
- Reporting per template, per segment, per contact.
- Billing reconciliation against Meta’s per-message invoices.
The send call is one line. The list above is the product.
Build vs buy, honestly
- Build on the Cloud API if WhatsApp is core to what you sell, you have engineers who will own it for years, and you need behaviour no platform offers. Register directly with Meta or through a provider, pay Meta per message, and budget the list above.
- Buy a platform with a real API if you want programmatic sends and webhooks without building templates, consent, pacing, inbox and reporting. You get the same REST surface on top of a finished product, and the marketing team gets a dashboard you did not have to write.
- Do not deploy a WhatsApp Web automation repo for anything you care about keeping. It is a blaster with a licence file.
The middle path: a platform that exposes its API
WappBlaster’s REST API covers template sends, contacts, templates, media and campaigns, with signed webhooks for sent, delivered, read, failed, inbound and button-click events. It is included in the flat fee with unlimited calls and no developer tier. A backend can drive transactional sends while the marketing team runs campaigns from the dashboard on the same number. Reference in the WhatsApp bulk message sender API guide and how the webhooks work.
What each route costs
- WhatsApp Web repo: free code, hosting, a developer’s time chasing breakages, and the number.
- Cloud API yourself: Meta’s per-message charge, hosting, and the engineering to build and maintain the eight layers above.
- Platform with API: WappBlaster ₹7,999 a year in India or $200 elsewhere, unlimited calls, plus Meta’s per-message charge at cost. Service replies inside the 24-hour window are free today and become billable from 1 October 2026 (details).
Next step
The WhatsApp Marketing API page documents the developer surface; API keys are issued on the free trial call. If you are evaluating the build route, rate limits and tiers is the part most builders underestimate.