accueil / serveurs / Dev & Code / io.github.whisper-sec/whisper
io.github.whisper-sec/whisper
serveur MCP (Model Context Protocol) · whisper 0.219.2
Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur.
Est-ce que io.github.whisper-sec/whisper est sûr ?
Au dernier audit MCP Hub, le serveur MCP « io.github.whisper-sec/whisper » est classé « Non encore testé ». Référencé dans l'annuaire. Seul le pentest comportemental fait foi, et il n'a pas encore été exécuté sur ce serveur. Le verdict est réévalué en continu ; consultez la fiche pour l'état à jour.
Méthode : MCP Hub analyse la description de chaque outil (couche 1) et, pour le verdict fort, exécute le serveur dans une micro-VM isolée avec leurres et réseau bloqué (couche 2). On publie des noms et des compteurs, jamais le contenu brut renvoyé par un outil.
Les 17 outils
- whisper_assess≈ 367 tokens
Assess the risk/policy posture of one or more indicators. Answers without an API key. Example call: {"skill":"assess","input":"example.com"}
Paramètres, retour & exemple (1)
Paramètresinput· string · requis
The indicator to look up: a domain, an IP address, an ASN or a file hash. The example passes example.com.
Exemple d'appel{"name": "whisper_assess", "arguments": {"input": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"rows": [], "columns": [], "statistics": {}}} - whisper_asset≈ 364 tokens
Resolve an asset and its catalog of attributes. Answers without an API key. Example call: {"skill":"asset","input":"example.com"}
Paramètres, retour & exemple (1)
Paramètresinput· string · requis
The indicator to look up: a domain, an IP address, an ASN or a file hash. The example passes example.com.
Exemple d'appel{"name": "whisper_asset", "arguments": {"input": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"rows": [], "columns": [], "statistics": {}}} - whisper_explain≈ 368 tokens
Explain a verdict - the evidence and reasoning behind it. Answers without an API key. Example call: {"skill":"explain","input":"example.com"}
Paramètres, retour & exemple (1)
Paramètresinput· string · requis
The indicator to look up: a domain, an IP address, an ASN or a file hash. The example passes example.com.
Exemple d'appel{"name": "whisper_explain", "arguments": {"input": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"rows": [], "columns": [], "statistics": {}}} - whisper_history≈ 369 tokens
Historical records for an indicator (incl. whois/bgp history). Answers without an API key. Example call: {"skill":"history","input":"example.com"}
Paramètres, retour & exemple (1)
Paramètresinput· string · requis
The indicator to look up: a domain, an IP address, an ASN or a file hash. The example passes example.com.
Exemple d'appel{"name": "whisper_history", "arguments": {"input": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"rows": [], "columns": [], "statistics": {}}} - whisper_identify≈ 370 tokens
Identify an indicator (domain, IP, hash, …) against the graph. Answers without an API key. Example call: {"skill":"identify","input":"example.com"}
Paramètres, retour & exemple (1)
Paramètresinput· string · requis
The indicator to look up: a domain, an IP address, an ASN or a file hash. The example passes example.com.
Exemple d'appel{"name": "whisper_identify", "arguments": {"input": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"rows": [], "columns": [], "statistics": {}}} - whisper_lookupTlsFingerprint≈ 381 tokens
Look up a TLS (JA3/JA4) fingerprint in the graph. Answers without an API key. Example call: {"skill":"lookupTlsFingerprint","input":"ja3:771,4865-4866-4867"}
Paramètres, retour & exemple (1)
Paramètresinput· string · requis
The indicator to look up: a domain, an IP address, an ASN or a file hash. The example passes ja3:771,4865-4866-4867.
Exemple d'appel{"name": "whisper_lookupTlsFingerprint", "arguments": {"input": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"rows": [], "columns": [], "statistics": {}}} - whisper_lookupTorRelay≈ 370 tokens
Look up Tor relay metadata for an address. Answers without an API key. Example call: {"skill":"lookupTorRelay","input":"185.220.101.1"}
Paramètres, retour & exemple (1)
Paramètresinput· string · requis
The indicator to look up: a domain, an IP address, an ASN or a file hash. The example passes 185.220.101.1.
Exemple d'appel{"name": "whisper_lookupTorRelay", "arguments": {"input": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"rows": [], "columns": [], "statistics": {}}} - whisper_origins≈ 364 tokens
Trace the origins/provenance of an indicator. Answers without an API key. Example call: {"skill":"origins","input":"example.com"}
Paramètres, retour & exemple (1)
Paramètresinput· string · requis
The indicator to look up: a domain, an IP address, an ASN or a file hash. The example passes example.com.
Exemple d'appel{"name": "whisper_origins", "arguments": {"input": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"rows": [], "columns": [], "statistics": {}}} - whisper_psl≈ 437 tokens
Public-suffix-list family (tld-plus-one, is-public-suffix, affiliation). A family verb: name the sub-verb as "sub" alongside the input. Sub-verbs: tldPlusOne, isPublicSuffix, affiliation.. Answers without an API key. Example call: {"skill":"psl","sub":"tldPlusOne","input":"a.b.example.co.uk"}
Paramètres, retour & exemple (2)
Paramètressub· string · requis
Which sub-verb of this family to run. The example runs "tldPlusOne".input· string · requis
The indicator to look up: a domain, an IP address, an ASN or a file hash. The example passes a.b.example.co.uk.
Exemple d'appel{"name": "whisper_psl", "arguments": {"sub": "texte", "input": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"rows": [], "columns": [], "statistics": {}}} - whisper_rdap≈ 596 tokens
The public registration record for any address in Whisper's space, in RFC 9083 form: the handle, the agent's label, its country, and the entities behind it. The same document the RDAP service serves at /ip/{address}, which any RDAP client can already read. Answers without an API key. Example call: {"skill":"rdap","input":"2a04:2a01:b69a:6717:e3b0:51ff:3bf7:f478"}
Paramètres, retour & exemple (1)
Paramètresinput· string · requis
The indicator to look up: a domain, an IP address, an ASN or a file hash. The example passes 2a04:2a01:b69a:6717:e3b0:51ff:3bf7:f478.
Exemple d'appel{"name": "whisper_rdap", "arguments": {"input": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"name": "texte", "type": "texte", "links": [], "events": [], "handle": "texte", "status": [], "country": "texte", "notices": [], "remarks": [], "entities": [], "ipVersion": "texte", "endAddress": "texte"}} - whisper_signup≈ 362 tokens
Start or complete Whisper signup from an email address alone, and receive an API key that unlocks the provisioning and governance skills on this card. Send {"email":"..."} to start; a six-digit code arrives by email; send {"signup_id":"...","code":"123456"} to complete. No human step, no account needed first. Example call: {"skill":"signup","input":{"email":"agent@example.com"}}
Paramètres, retour & exemple (1)
Paramètresinput· object · requis
Arguments for this operation, as an object. The example passes {"email":"agent@example.com"}.
Exemple d'appel{"name": "whisper_signup", "arguments": {"input": {}}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"ok": true, "api_key": "texte", "message": "texte", "signup_id": "texte"}} - whisper_threatintel≈ 428 tokens
Threat-intelligence indicator family (candidate apex/CDN/hosting). A family verb: name the sub-verb as "sub" alongside the input. Sub-verbs: candidateCdnApex, candidateMultiTenantApex, candidateSharedHostingIp.. Answers without an API key. Example call: {"skill":"threatintel","sub":"candidateCdnApex","input":5}
Paramètres, retour & exemple (2)
Paramètressub· string · requis
Which sub-verb of this family to run. The example runs "candidateCdnApex".input· integer · requis
A row limit. The example passes 5.
Exemple d'appel{"name": "whisper_threatintel", "arguments": {"sub": "texte", "input": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"rows": [], "columns": [], "statistics": {}}} - whisper_topAsnsByPrefixCount≈ 353 tokens
Top ASNs ranked by announced-prefix count. Answers without an API key. Example call: {"skill":"topAsnsByPrefixCount","input":10}
Paramètres, retour & exemple (1)
Paramètresinput· integer · requis
A row limit. The example passes 10.
Exemple d'appel{"name": "whisper_topAsnsByPrefixCount", "arguments": {"input": 1}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"rows": [], "columns": [], "statistics": {}}} - whisper_variants≈ 366 tokens
Enumerate variants/permutations of an indicator. Answers without an API key. Example call: {"skill":"variants","input":"example.com"}
Paramètres, retour & exemple (1)
Paramètresinput· string · requis
The indicator to look up: a domain, an IP address, an ASN or a file hash. The example passes example.com.
Exemple d'appel{"name": "whisper_variants", "arguments": {"input": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"rows": [], "columns": [], "statistics": {}}} - whisper_verify≈ 645 tokens
Is this IPv6 address or hostname a real Whisper agent, and whose? Grades the full keyless trust chain: the reverse DNS record, the forward AAAA confirming it back to the same address, and the DANE-EE certificate pin published in DNSSEC-signed DNS. Returns is_whisper_agent with the evidence for the verdict either way, so a negative answer is an answer and not an error. Answers without an API key, and every leg of it is independently checkable from the DNS root with dig. Example call: {"skill":"verify","input":"2a04:2a01:b69a:6717:e3b0:51ff:3bf7:f478"}
Paramètres, retour & exemple (1)
Paramètresinput· string · requis
The indicator to look up: a domain, an IP address, an ASN or a file hash. The example passes 2a04:2a01:b69a:6717:e3b0:51ff:3bf7:f478.
Exemple d'appel{"name": "whisper_verify", "arguments": {"input": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"fqdn": "texte", "detail": "texte", "jws_ok": true, "tenant": "texte", "dane_ok": true, "evidence": {}, "operator": "texte", "verified_at": "texte", "is_whisper_agent": true}} - whisper_walk≈ 366 tokens
Walk the graph from an indicator across its relationships. Answers without an API key. Example call: {"skill":"walk","input":"example.com"}
Paramètres, retour & exemple (1)
Paramètresinput· string · requis
The indicator to look up: a domain, an IP address, an ASN or a file hash. The example passes example.com.
Exemple d'appel{"name": "whisper_walk", "arguments": {"input": "texte"}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"rows": [], "columns": [], "statistics": {}}} - whisper_watch≈ 361 tokens
Watch an indicator for change/activity over time. Answers without an API key. Example call: {"skill":"watch","input":{"action":"list"}}
Paramètres, retour & exemple (1)
Paramètresinput· object · requis
Arguments for this operation, as an object. The example passes {"action":"list"}.
Exemple d'appel{"name": "whisper_watch", "arguments": {"input": {}}}Exemple de retour{"content": [{"type": "text", "text": "…"}], "structuredContent": {"rows": [], "columns": [], "statistics": {}}}
C'est votre serveur ?
Revendiquez-le sur l'espace créateur (preuve GitHub, domaine ou npm) pour afficher le badge « propriétaire vérifié » et lancer un pentest comportemental à la demande afin d'obtenir le badge « Vérifié ».