# whisper [Health: Active]

**Category:** 🎙️ Speech-to-Text  
**Repository:** https://github.com/whisper-sec/whisper-cli  
**GitHub Stars:** 3  
**npm Downloads (last month):** 1020  
**Views:** 1  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/whisper

## Description
Verify Whisper agent identities and look up RDAP for a routable /128 — keyless.

## Tools
Capabilities this server exposes over MCP:

- **whisper_verify** — Verify whether an address or FQDN is a real Whisper agent and, if so, whose - running the full keyless trust chain (reverse-DNS + DANE-EE TLSA pin + DNSSEC + JWS identity doc). Returns the verdict as JSON. Use it to check any peer's claimed identity before trusting it. No API key needed.
- **whisper_rdap** — Fetch the RDAP record for a Whisper IPv6 /128 (the IP-anchored registration object: who operates the agent identity, since when, under which tenant). Returns RDAP JSON. Use it to look up ownership/registration facts about an address. No API key needed.
- **whisper_identify** — Name the vendor and operator role behind a host or IP in one call. Resolves a host/IP to its canonical vendor, category and operator roles (DNS_OPERATOR / CDN / ORIGIN_AS / MAIL_RECEIVER) with a confidence band. No API key needed. Docs: https://www.whisper.security/docs/whisper-graph/procedures/identify
- **whisper_assess** — Get a labelled threat posture for a host or IP - malicious, benign, or unknown. Returns a posture label + severity band + sub-labels + coverage + evidence for an indicator; benign-allowlisted vs malicious-evidenced, never a bare score. No API key needed. Docs: https://www.whisper.security/docs/whisper-graph/procedures
- **whisper_explain** — Score an indicator against the threat feeds and explain exactly why. Threat-intel scorer: score + level + human explanation + the feeds it is listed in (feedId, weight, firstSeen/lastSeen). Two live forms: bare CALL explain($v) (full columns) and CALL whisper.explain($v) (restricted YIELD). No API key needed. Docs: https://www.whisper.security/docs/whisper-graph/procedures/explain

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "whisper": {
    "command": "npx",
    "args": ["-y","@whisper-security/whisper-mcp"]
  }
}
```

## Documentation

## What whisper does

The whisper MCP server connects AI clients to Whisper’s identity and security services. It can verify whether an IPv6 address or hostname represents a real agent, retrieve the public registration record for an IPv6 `/128`, and assess domains, IPs, ASNs, and file hashes. It also exposes security-graph queries and explanations for verdicts.

The command-line client can additionally give an agent a routable IPv6 `/128` on AS219419, configure egress from that address, and verify the resulting source address. The address functions as the agent identity and is associated with DNSSEC-signed DNS, DANE pinning, and public RDAP data.

## How it works

There are two MCP connection choices. A local installation runs the same MCP service with `whisper mcp`; clients start it as a standard command. The README also provides an `npx` configuration for `@whisper-security/whisper-mcp`. The remote option uses `https://whisper.online/mcp` and streamable HTTP, so clients that accept an MCP URL can connect without installing the CLI.

The local server exposes five tools without credentials: `whisper_verify`, `whisper_rdap`, `whisper_assess`, `whisper_identify`, and `whisper_explain`. With a key, that server lists 45 tools, including graph access, agent registration, resolver policy, egress configuration, activity lookup, and identity revocation.

The remote endpoint has a different catalog. It lists 15 keyless tools, including graph traversal, history, asset, threat-intelligence, TLS-fingerprint, and origin-related operations, plus `whisper_signup`. Supplying an API key adds 22 provisioning and governance tools, including `whisper_agents_*` and `whisper_submit`. The remote endpoint does not provide the local `whisper_verify` or `whisper_rdap` tools.

## Setup and configuration

Install the CLI from GitHub Releases, Homebrew, Scoop, Go, mise, or the signed Debian/Ubuntu, Fedora/RHEL, and Alpine repositories. The documented installer commands fetch a release, verify its SHA-256 checksum, and perform an additional PGP check when applicable. `WHISPER_CLI_BASE` can override the download source used by the installer.

For MCP use, add the local `npx` command and package shown in the README, or point a compatible client at the remote URL. Authentication is optional for the keyless tool sets. The CLI supports browser device login or a pasted API key, and `whisper login` stores authentication for later use.

## Tools and capabilities

- Verify an agent address or hostname and inspect its DANE pin.
- Retrieve public RDAP information for an IPv6 `/128`.
- Assess indicators and return supporting evidence.
- Identify an indicator’s category, vendor, or band.
- Explain the scoring and sources behind a verdict.
- Query the Whisper security graph through raw Cypher or cataloged recipes.
- Connect agent traffic through SOCKS5/HTTPS or a userspace WireGuard tunnel.
- Run commands through the selected Whisper egress and check verification with `whisper ip`.

The `whisper ip` command returns exit code 0 only when the observed egress address is in `2a04:2a01::/32` and matches the selected agent’s `/128`. Commands can request JSON output for scripting.

## Limitations and notes

The local and remote MCP services are not equivalent: they expose different tools and have different keyless behavior. Remote access does not currently include the local identity-verification and RDAP tools. The keyed `whisper_agents_verify` operation verifies a domain controlled by the caller, so it is not a substitute for verifying another agent.

Creating an agent requires a name in the guided CLI flow. The CLI’s WireGuard mode is described as a userspace tunnel that does not require root; the default connection mode uses Tier-1.5 SOCKS5/HTTPS.

_Full upstream README: https://allmcps.com/mcp/whisper/readme_