Connect

8 clients · secrets stay placeholders

JSON (mcpServers)Claude CodeCodexOpenCodeCursorVS CodeGemini CLIGoose

{
  "mcpServers": {
    "whisper": {
      "type": "http",
      "url": "https://whisper.online/mcp"
    }
  }
}

claude mcp add --transport http whisper https://whisper.online/mcp

[mcp_servers.whisper]
url = "https://whisper.online/mcp"

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "whisper": {
      "type": "remote",
      "url": "https://whisper.online/mcp",
      "enabled": true
    }
  }
}

{
  "mcpServers": {
    "whisper": {
      "type": "http",
      "url": "https://whisper.online/mcp"
    }
  },
  "deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=whisper&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vd2hpc3Blci5vbmxpbmUvbWNwIn0%3D"
}

{
  "servers": {
    "whisper": {
      "type": "http",
      "url": "https://whisper.online/mcp"
    }
  }
}

{
  "mcpServers": {
    "whisper": {
      "httpUrl": "https://whisper.online/mcp"
    }
  }
}

extensions:
  "whisper":
    enabled: true
    name: "whisper"
    type: streamable_http
    uri: "https://whisper.online/mcp"
    timeout: 300

Quality 80 / 100good

protocol75 · weight 25

warn
protocol.modernnewest supported version is 2025-06-18; 2026-07-28 not supported, older versions are deprecated until 2027-07-28
n/a
protocol.statelessonly applies to 2026-07-28 servers
pass
protocol.transportstreamable HTTP
n/a
protocol.list_ttlonly applies to 2026-07-28 servers

authorizationn/a · weight 15

n/a
auth.prm, auth.as_metadata, auth.cimdno remote uses OAuth
n/a
auth.secret_in_urlno templated URL

tool hygiene86 · weight 30

pass
tools.descriptionsevery tool has a description
pass
tools.description_lengthdescriptions are concise
pass
tools.schemasevery tool has an object input schema
pass
tools.annotations17 of 17 tools declare readOnlyHint or destructiveHint
fail
tools.directory_hintsno tool declares all four of readOnlyHint, destructiveHint, idempotentHint and openWorldHint; missing: whisper_history (idempotentHint); whisper_verify (idempotentHint); whisper_assess (idempotentHint); …
pass
tools.token_costabout 2,133 tokens to load every tool
pass
tools.api_dumptools are not a one-to-one API dump

stability75 · weight 15

warn
stability.changes26 tool changes in 30 days
pass
stability.rug_pullno tool changed its meaning under the same name

dependenciesn/a · weight 15

n/a
deps.known_vulns, deps.mcp_sdk_version, deps.resolvabledeps.dev does not know @whisper-security/[email protected]

17 tools, about 2,133 tokens to load them all · tool set ecc816348776 · tools last changed 2026-09-25 · checked 2026-10-20 12:13 UTC

Tool changes

2026-09-25whisper_verifychangedannotations
2026-09-25whisper_topAsnsByPrefixCountchangedoutput schema
2026-09-25whisper_pslchangedoutput schema
2026-09-25whisper_threatintelchangedoutput schema
2026-09-25whisper_assetchangedoutput schema
2026-09-25whisper_lookupTorRelaychangedoutput schema
2026-09-25whisper_lookupTlsFingerprintchangedoutput schema
2026-09-25whisper_historychangedoutput schema
2026-09-25whisper_originschangedoutput schema
2026-09-25whisper_variantschangedoutput schema

Showing the latest 10. Full history: list_changes · trend: quality JSON.

Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.

Trust 96 / 100

provenance90

liveness100

freshness100

hygiene95

+repository +namespace-matches-repo +website +reachable +uptime-100% +updated-8d-ago -unpinned-packages(1)

Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.

Dependencies

@whisper-security/[email protected] npmthis version is not known to the dependency resolver

Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.

Endpoints

remote	auth	reachable	uptime 30d	p50	protocol	last ok
`https://whisper.online/mcp` streamable-http	none	yes	100%	640 ms	2025-06-18	2026-10-20

package	registry	version	runtime	secrets
`@whisper-security/whisper-mcp`	npm	0.222.0	–
`ghcr.io/whisper-sec/whisper:0.222.0`	oci	unpinned	–

Tools (17)

`whisper_assess`read-only	Assess the risk/policy posture of one or more indicators. Answers without an API key. Example call: {"skill":"assess","input":"example.com"}
`whisper_asset`read-only	Resolve an asset and its catalog of attributes. Answers without an API key. Example call: {"skill":"asset","input":"example.com"}
`whisper_explain`read-only	Explain a verdict - the evidence and reasoning behind it. Answers without an API key. Example call: {"skill":"explain","input":"example.com"}
`whisper_history`read-only	Historical records for an indicator (incl. whois/bgp history). Answers without an API key. Example call: {"skill":"history","input":"example.com"}
`whisper_identify`read-only	Identify an indicator (domain, IP, hash, …) against the graph. Answers without an API key. Example call: {"skill":"identify","input":"example.com"}
`whisper_lookupTlsFingerprint`read-only	Look up a TLS (JA3/JA4) fingerprint in the graph. Answers without an API key. Example call: {"skill":"lookupTlsFingerprint","input":"ja3:771,4865-4866-4867"}
`whisper_lookupTorRelay`read-only	Look up Tor relay metadata for an address. Answers without an API key. Example call: {"skill":"lookupTorRelay","input":"185.220.101.1"}
`whisper_origins`read-only	Trace the origins/provenance of an indicator. Answers without an API key. Example call: {"skill":"origins","input":"example.com"}
`whisper_psl`read-only	Public-suffix-list family (tld-plus-one, is-public-suffix, affiliation). A family verb: name the sub-verb as "sub" alongside the input. Sub-verbs: tldPlusOne, isPublicSuffix, affiliation.. Answers without an API key. Example call: {"skill":"psl","sub":"tldPlusOne","input":"a.b.example.co.uk"}
`whisper_rdap`read-only	The public registration record for any address in Whisper's space, in RFC 9083 form: the handle, the agent's label, its country, and the entities behind it. The same document the RDAP service serves at /ip/{address}, which any RDAP client can already read. Answers without an API key. Example call: {"skill":"rdap","input":"2a04:2a01:b69a:6717:e3b0:51ff:3bf7:f478"}
`whisper_signup`	Start or complete Whisper signup from an email address alone, and receive an API key that unlocks the provisioning and governance skills on this card. Send {"email":"..."} to start; a six-digit code arrives by email; send {"signup_id":"...","code":"123456"} to complete. No human step, no account needed first. Example call: {"skill":"signup","input":{"email":"[email protected]"}}
`whisper_threatintel`read-only	Threat-intelligence indicator family (candidate apex/CDN/hosting). A family verb: name the sub-verb as "sub" alongside the input. Sub-verbs: candidateCdnApex, candidateMultiTenantApex, candidateSharedHostingIp.. Answers without an API key. Example call: {"skill":"threatintel","sub":"candidateCdnApex","input":5}
`whisper_topAsnsByPrefixCount`read-only	Top ASNs ranked by announced-prefix count. Answers without an API key. Example call: {"skill":"topAsnsByPrefixCount","input":10}
`whisper_variants`read-only	Enumerate variants/permutations of an indicator. Answers without an API key. Example call: {"skill":"variants","input":"example.com"}
`whisper_verify`read-only	Is this IPv6 address or hostname a real Whisper agent, and whose? Grades the full keyless trust chain: the reverse DNS record, the forward AAAA confirming it back to the same address, and the DANE-EE certificate pin published in DNSSEC-signed DNS. Returns is_whisper_agent with the evidence for the verdict either way, so a negative answer is an answer and not an error. Answers without an API key, and every leg of it is independently checkable from the DNS root with dig. Example call: {"skill":"verify","input":"2a04:2a01:b69a:6717:e3b0:51ff:3bf7:f478"}
`whisper_walk`read-only	Walk the graph from an indicator across its relationships. Answers without an API key. Example call: {"skill":"walk","input":"example.com"}
`whisper_watch`	Watch an indicator for change/activity over time. Answers without an API key. Example call: {"skill":"watch","input":{"action":"list"}}

Schemas: list_tools.

Similar MCP servers

More from io.github.whisper-sec

Official server.json

{
  "name": "io.github.whisper-sec/whisper",
  "icons": [
    {
      "src": "https://whisper.online/logo.png",
      "mimeType": "image/png"
    }
  ],
  "title": "Whisper",
  "$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
  "remotes": [
    {
      "url": "https://whisper.online/mcp",
      "type": "streamable-http"
    }
  ],
  "version": "0.222.0",
  "packages": [
    {
      "version": "0.222.0",
      "transport": {
        "type": "stdio"
      },
      "identifier": "@whisper-security/whisper-mcp",
      "registryType": "npm"
    },
    {
      "transport": {
        "type": "stdio"
      },
      "identifier": "ghcr.io/whisper-sec/whisper:0.222.0",
      "registryType": "oci",
      "runtimeArguments": [
        {
          "type": "positional",
          "value": "mcp"
        }
      ]
    }
  ],
  "repository": {
    "url": "https://github.com/whisper-sec/whisper-cli",
    "source": "github"
  },
  "websiteUrl": "https://whisper.online",
  "description": "One routable IPv6 per AI agent, verifiable from the DNS root. Keyless tools need no signup."
}