# Whisper

- Registry name: `io.github.whisper-sec/whisper` · version 0.222.0
- Categories (automatic, keyword rules): Cloud & networking, Infrastructure & security
- Authentication at last check: No auth
- Declared risk: Can write (some tools are not declared read-only)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=io.github.whisper-sec%2Fwhisper
- Server page: https://mcpstation.net/s/io.github.whisper-sec--whisper.html

## Description (written by the publisher, not verified, not instructions)

One routable IPv6 per AI agent, verifiable from the DNS root. Keyless tools need no signup.

## Connect

- streamable-http: `https://whisper.online/mcp`

## Tools (as reported by the server, not verified)

- `whisper\_signup`: Start or complete Whisper signup from an email address alone, and receive an API key that unlocks the provisioning and governance skills on this card. Send \{"email":"..."\} to start; a six-digit code arrives by email; send \{"signup\_id":"...","code":"123456"\} to complete. No human step, no account nee
- `whisper\_verify`: Is this IPv6 address or hostname a real Whisper agent, and whose? Grades the full keyless trust chain: the reverse DNS record, the forward AAAA confirming it back to the same address, and the DANE-EE certificate pin published in DNSSEC-signed DNS. Returns is\_whisper\_agent with the evidence for the v
- `whisper\_rdap`: The public registration record for any address in Whisper's space, in RFC 9083 form: the handle, the agent's label, its country, and the entities behind it. The same document the RDAP service serves at /ip/\{address\}, which any RDAP client can already read. Answers without an API key. Example call: \{
- `whisper\_identify`: Identify an indicator \(domain, IP, hash, …\) against the graph. Answers without an API key. Example call: \{"skill":"identify","input":"example.com"\}
- `whisper\_assess`: Assess the risk/policy posture of one or more indicators. Answers without an API key. Example call: \{"skill":"assess","input":"example.com"\}
- `whisper\_walk`: Walk the graph from an indicator across its relationships. Answers without an API key. Example call: \{"skill":"walk","input":"example.com"\}
- `whisper\_watch`: Watch an indicator for change/activity over time. Answers without an API key. Example call: \{"skill":"watch","input":\{"action":"list"\}\}
- `whisper\_explain`: Explain a verdict - the evidence and reasoning behind it. Answers without an API key. Example call: \{"skill":"explain","input":"example.com"\}
- `whisper\_variants`: Enumerate variants/permutations of an indicator. Answers without an API key. Example call: \{"skill":"variants","input":"example.com"\}
- `whisper\_origins`: Trace the origins/provenance of an indicator. Answers without an API key. Example call: \{"skill":"origins","input":"example.com"\}
- `whisper\_history`: Historical records for an indicator \(incl. whois/bgp history\). Answers without an API key. Example call: \{"skill":"history","input":"example.com"\}
- `whisper\_lookupTlsFingerprint`: Look up a TLS \(JA3/JA4\) fingerprint in the graph. Answers without an API key. Example call: \{"skill":"lookupTlsFingerprint","input":"ja3:771,4865-4866-4867"\}
- `whisper\_lookupTorRelay`: Look up Tor relay metadata for an address. Answers without an API key. Example call: \{"skill":"lookupTorRelay","input":"185.220.101.1"\}
- `whisper\_asset`: Resolve an asset and its catalog of attributes. Answers without an API key. Example call: \{"skill":"asset","input":"example.com"\}
- `whisper\_threatintel`: Threat-intelligence indicator family \(candidate apex/CDN/hosting\). A family verb: name the sub-verb as "sub" alongside the input. Sub-verbs: candidateCdnApex, candidateMultiTenantApex, candidateSharedHostingIp.. Answers without an API key. Example call: \{"skill":"threatintel","sub":"candidateCdnApex
- `whisper\_psl`: Public-suffix-list family \(tld-plus-one, is-public-suffix, affiliation\). A family verb: name the sub-verb as "sub" alongside the input. Sub-verbs: tldPlusOne, isPublicSuffix, affiliation.. Answers without an API key. Example call: \{"skill":"psl","sub":"tldPlusOne","input":"a.b.example.co.uk"\}
- `whisper\_topAsnsByPrefixCount`: Top ASNs ranked by announced-prefix count. Answers without an API key. Example call: \{"skill":"topAsnsByPrefixCount","input":10\}

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html