# Whisper Sec Whisper MCP server

Source: https://glimind.com/server/mcp-registry%2Fio.github.whisper-sec%2Fwhisper
Registry id: `mcp-registry/io.github.whisper-sec/whisper`
Status: live (checked 2026-10-27T06:18:08.510Z)

## Verdict

Whisper Sec Whisper MCP server answered 100% of Glimind's liveness checks over 30 days, better than 42% of MCP servers, with 1143 ms median handshake and 0 outages in 90 days. Its agent-readiness grade is A (100/100) across 17 tools, costing an agent about 2,297 tokens to load. Checked every few minutes; no tool is ever called.

## Measurements (30 days)

| Metric | Value | Better than |
|---|---|---|
| Uptime, 30 days | 100% | 42% of MCP servers |
| Median handshake latency | 1143 ms | 14% of MCP servers |
| p95 handshake latency | 3803 ms | — |
| Checks in 30 days | 4,965 | — |
| Outages, 90 days | 0 | — |
| Median recovery | — | — |
| Agent-readiness score | 100/100 (A) | 93% of MCP servers |
| Tools | 17 | — |
| Tool-list size for an agent | ~2,297 tokens | 50% of MCP servers |
| Days observed | 29 | — |

## Install

```json
{
  "mcpServers": {
    "whisper-sec-whisper-mcp-server": {
      "type": "http",
      "url": "https://whisper.online/mcp"
    }
  }
}
```

Claude Code:

```sh
claude mcp add --transport http whisper-sec-whisper-mcp-server https://whisper.online/mcp
```

## Tools (17)

- `whisper_assess`: Assess the risk/policy posture of one or more indicators. Answers without an API key. Example call: {"skill":"assess","input":"example.com"}
- `whisper_asset`: Resolve an asset and its catalog of attributes. Answers without an API key. Example call: {"skill":"asset","input":"example.com"}
- `whisper_explain`: Explain a verdict - the evidence and reasoning behind it. Answers without an API key. Example call: {"skill":"explain","input":"example.com"}
- `whisper_history`: Historical records for an indicator (incl. whois/bgp history). Answers without an API key. Example call: {"skill":"history","input":"example.com"}
- `whisper_identify`: Identify an indicator (domain, IP, hash, …) against the graph. Answers without an API key. Example call: {"skill":"identify","input":"example.com"}
- `whisper_lookupTlsFingerprint`: Look up a TLS (JA3/JA4) fingerprint in the graph. Answers without an API key. Example call: {"skill":"lookupTlsFingerprint","input":"ja3:771,4865-4866-4867"}
- `whisper_lookupTorRelay`: Look up Tor relay metadata for an address. Answers without an API key. Example call: {"skill":"lookupTorRelay","input":"185.220.101.1"}
- `whisper_origins`: Trace the origins/provenance of an indicator. Answers without an API key. Example call: {"skill":"origins","input":"example.com"}
- `whisper_psl`: Public-suffix-list family (tld-plus-one, is-public-suffix, affiliation). A family verb: name the sub-verb as "sub" alongside the input. Sub-verbs: tldPlusOne, i
- `whisper_rdap`: The public registration record for any address in Whisper's space, in RFC 9083 form: the handle, the agent's label, its country, and the entities behind it. The
- `whisper_signup`: Start or complete Whisper signup from an email address alone, and receive an API key that unlocks the provisioning and governance skills on this card. Send {"em
- `whisper_threatintel`: Threat-intelligence indicator family (candidate apex/CDN/hosting). A family verb: name the sub-verb as "sub" alongside the input. Sub-verbs: candidateCdnApex, c
- `whisper_topAsnsByPrefixCount`: Top ASNs ranked by announced-prefix count. Answers without an API key. Example call: {"skill":"topAsnsByPrefixCount","input":10}
- `whisper_variants`: Enumerate variants/permutations of an indicator. Answers without an API key. Example call: {"skill":"variants","input":"example.com"}
- `whisper_verify`: Is this IPv6 address or hostname a real Whisper agent, and whose? Grades the full keyless trust chain: the reverse DNS record, the forward AAAA confirming it ba
- `whisper_walk`: Walk the graph from an indicator across its relationships. Answers without an API key. Example call: {"skill":"walk","input":"example.com"}
- `whisper_watch`: Watch an indicator for change/activity over time. Answers without an API key. Example call: {"skill":"watch","input":{"action":"list"}}

Measured by Glimind (https://glimind.com): MCP handshake + tool list only, no tool is ever called. CC BY 4.0.