Whisper
One routable IPv6 per AI agent, verifiable from the DNS root. Keyless tools need no signup.
| Endpoint | https://whisper.online/mcp (streamable-http) |
|---|---|
| Registry version | 0.222.0 |
| Now | 17 tools · grade D (63) · pin ts_5e71f5bc2685165f2df2f62b22042fc5 · protocol 2025-06-18 |
| First / last listed | 2026-11-02 03:32 UTC / 2026-11-02 03:32 UTC |
| Grade over time | 2026-11-02: D (63), 17 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: whisper_signup whisper_verify whisper_rdap whisper_identify whisper_assess whisper_walk whisper_watch whisper_explain whisper_variants whisper_origins whisper_history whisper_lookupTlsFingerprint whisper_lookupTorRelay whisper_asset whisper_threatintel whisper_psl whisper_topAsnsByPrefixCount
whisper_signup | Start or complete Whisper signup from an email address alone, and receive an API key that unlocks the provisioning and governance skills on this card. Send {"email":"..."} to start; a six-digit code arrives by email; send {"signup_id":"...","code":"123456"} to complete. No human step, no account needed first. Example call: {"skill":"signup","input":{"email":"agent@example.com"}} params: input* |
whisper_verify | Is this IPv6 address or hostname a real Whisper agent, and whose? Grades the full keyless trust chain: the reverse DNS record, the forward AAAA confirming it back to the same address, and the DANE-EE certificate pin published in DNSSEC-signed DNS. Returns is_whisper_agent with the evidence for the verdict either way, so a negative answer is an answer and not an error. Answers without an API key, a params: input* |
whisper_rdap | The public registration record for any address in Whisper's space, in RFC 9083 form: the handle, the agent's label, its country, and the entities behind it. The same document the RDAP service serves at /ip/{address}, which any RDAP client can already read. Answers without an API key. Example call: {"skill":"rdap","input":"2a04:2a01:b69a:6717:e3b0:51ff:3bf7:f478"} params: input* |
whisper_identify | Identify an indicator (domain, IP, hash, …) against the graph. Answers without an API key. Example call: {"skill":"identify","input":"example.com"} params: input* |
whisper_assess | Assess the risk/policy posture of one or more indicators. Answers without an API key. Example call: {"skill":"assess","input":"example.com"} params: input* |
whisper_walk | Walk the graph from an indicator across its relationships. Answers without an API key. Example call: {"skill":"walk","input":"example.com"} params: input* |
whisper_watch | Watch an indicator for change/activity over time. Answers without an API key. Example call: {"skill":"watch","input":{"action":"list"}} params: input* |
whisper_explain | Explain a verdict - the evidence and reasoning behind it. Answers without an API key. Example call: {"skill":"explain","input":"example.com"} params: input* |
whisper_variants | Enumerate variants/permutations of an indicator. Answers without an API key. Example call: {"skill":"variants","input":"example.com"} params: input* |
whisper_origins | Trace the origins/provenance of an indicator. Answers without an API key. Example call: {"skill":"origins","input":"example.com"} params: input* |
whisper_history | Historical records for an indicator (incl. whois/bgp history). Answers without an API key. Example call: {"skill":"history","input":"example.com"} params: input* |
whisper_lookupTlsFingerprint | Look up a TLS (JA3/JA4) fingerprint in the graph. Answers without an API key. Example call: {"skill":"lookupTlsFingerprint","input":"ja3:771,4865-4866-4867"} params: input* |
whisper_lookupTorRelay | Look up Tor relay metadata for an address. Answers without an API key. Example call: {"skill":"lookupTorRelay","input":"185.220.101.1"} params: input* |
whisper_asset | Resolve an asset and its catalog of attributes. Answers without an API key. Example call: {"skill":"asset","input":"example.com"} params: input* |
whisper_threatintel | Threat-intelligence indicator family (candidate apex/CDN/hosting). A family verb: name the sub-verb as "sub" alongside the input. Sub-verbs: candidateCdnApex, candidateMultiTenantApex, candidateSharedHostingIp.. Answers without an API key. Example call: {"skill":"threatintel","sub":"candidateCdnApex","input":5} params: input*, sub* |
whisper_psl | Public-suffix-list family (tld-plus-one, is-public-suffix, affiliation). A family verb: name the sub-verb as "sub" alongside the input. Sub-verbs: tldPlusOne, isPublicSuffix, affiliation.. Answers without an API key. Example call: {"skill":"psl","sub":"tldPlusOne","input":"a.b.example.co.uk"} params: input*, sub* |
whisper_topAsnsByPrefixCount | Top ASNs ranked by announced-prefix count. Answers without an API key. Example call: {"skill":"topAsnsByPrefixCount","input":10} params: input* |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.