AI-powered · Lightning-fast · Ultra-Lite · Multi-session · Fully customizable
Atom-MD is a next-generation WhatsApp bot engine built for power users and developers who demand performance without compromise. Engineered to run flawlessly on servers with as little as 512MB RAM, Atom-MD leverages external APIs, MongoDB-backed sessions, and real-time WebSocket communication to deliver enterprise-grade automation on minimal hardware.
Whether you want to automate your WhatsApp presence, deploy AI-powered replies, protect your privacy, or manage multiple bot sessions from a single dashboard — Atom-MD is the engine for you.
- Conversational AI powered by Google Gemini and Gemma 31B (heavy model)
- Vision AI — analyze and describe images sent in chat
- Image Generation — generate stunning AI art from text prompts via Pollinations AI
- Text-to-Voice — convert AI responses to lifelike audio messages
- Text Summarization — condense long passages instantly
- Grammar Correction — polish and fix writing in seconds
- Anti-Delete — automatically recovers deleted messages and forwards them to your inbox
- Anti-ViewOnce — intercepts view-once media and saves it before it disappears
- Anti-Call — auto-rejects incoming calls with a customizable message and audio response
- HMAC-signed WebSocket authentication for dashboard security
- reCAPTCHA verification layer on sensitive API endpoints
- Auto Status Viewer — silently views and reacts to all contacts' statuses 24/7
- Auto Status Saver — automatically saves status updates to your inbox
- Smart Auto-Replies — up to 6 keyword-triggered auto-reply slots with image support and per-slot cooldowns
- Target Tracker — send a one-time auto-message when a specific contact messages you
- Inbox Auto React — automatically react to incoming messages with a custom emoji
- Fake Typing / Recording — simulate presence indicators to appear active
- Connect via QR Code or Pairing Code — no manual setup
- Beautiful glassmorphic user interface served via an external frontend (e.g., Vercel)
- Real-time session management via Socket.io live events
- Per-session settings panel: toggle AI, privacy features, auto-replies, and more
- Receive your dashboard password directly inside WhatsApp on first connection
- Manage all connected sessions globally from a single panel
- View live system RAM usage and per-session stats
- Inspect individual bot settings including auto-reply configurations
- Force-delete any session and wipe its data from the database instantly
- Admin access secured by a master password defined in
.env
- Ultra-Lite by design — no local media processing; all heavy tasks offloaded to APIs
- MongoDB-backed sessions — no filesystem auth state; safe for multi-instance deployments
- Ghost Mode — stays offline/invisible by default, even while fully active
- Notification Fix — messages are processed without triggering WhatsApp read receipts
- Disk-based message store — anti-delete works without eating RAM
- Supports up to 10 concurrent bot sessions with automatic reconnection logic
- Channel Manager plugin for WhatsApp Channels with periodic health checks
- Node.js v18 or higher
- MongoDB database (MongoDB Atlas recommended — free tier works great)
- Cloudinary account (optional, for media uploads)
User's WhatsApp ←──→ Baileys (WA Web API)
│
index.js (Engine)
┌────┴────┐
MongoDB Socket.io
(Sessions) (Dashboard)
└────┬────┘
Vercel Frontend
(User / Admin UI)
- Session Lifecycle — Each bot session is identified by the user's phone number. On first connection, credentials are stored in MongoDB and loaded on every reconnect.
- Real-time Events — QR codes, pairing codes, connection status, and session lists are pushed live to the dashboard via Socket.io.
- Message Processing — Incoming messages are filtered, deduplicated, and routed through the feature pipeline (anti-delete → auto-replies → AI → commands).
- Ghost Mode — The bot marks itself as offline after every action, maintaining complete invisibility.
- All WebSocket connections are authenticated via HMAC-SHA256 time-based tokens
- File upload endpoints are protected with HMAC middleware
- reCAPTCHA verification prevents bot abuse on pairing endpoints
- Session data is fully isolated per user — no cross-session data leakage
- Admin panel is password-protected and requires a separate credential
Made with ❤️ by sh4lu-z
© 2026 Atom-MD Engine. All Rights Reserved.
⭐ Star this repo if Atom-MD powers your automation! ⭐