[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_127":128},"routes/modules.$creator.$moduleId",{"_14":15,"_16":17,"_18":19,"_20":21},"routes/modules.$creator.$moduleId.endpoints",{"_11":12,"_13":-5},"error","Module not found","tools","module",{"_20":22,"_23":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":26,"_36":37,"_38":-5,"_39":-5,"_40":41,"_42":43,"_44":45,"_46":47,"_48":49,"_50":51,"_52":53,"_54":55,"_56":-5,"_57":49,"_58":59,"_60":61,"_62":63,"_64":65,"_66":67,"_68":49,"_69":70,"_71":72,"_73":74,"_75":76,"_77":78,"_79":-5,"_80":-5,"_81":-5,"_82":49,"_83":-5,"_84":85,"_86":87,"_88":89,"_90":91,"_92":93,"_94":95,"_96":97},"apiUrl","https://odel.app/api","creator","whisper-sec","moduleId","whisper-graph-mcp","@whisper-sec/whisper-graph-mcp","displayName","WhisperGraph","tagline","The internet's infrastructure graph for AI agents - 46B nodes and edges, free trial via 2 HTTP calls","iconKey","https://images.prismic.io/whisper/aWgDKwIvOtkhBhBc_logo.png","category","remote","status","published","visibility","public","metaDescription","deploymentType","external","workerName","bindingName","mcpConfig","{\"url\":\"https://mcp.whisper.security\",\"transport\":\"streamable-http\",\"authType\":\"none\"}","pricingModel","free","creatorUserId","system:external-import","createdAt",1783399177000,"updatedAt",1788069798000,"sourceRegistry","official-mcp-registry","sourceUrl","https://registry.modelcontextprotocol.io/v0/servers?search=io.github.whisper-sec%2Fwhisper-graph","sourceVerified",true,"sourceMissingSince","importedAt","upstreamStars",1,"upstreamUpdatedAt",1784423398000,"detectedTransport","streamable-http","detectedAuthType","oauth","probeStatus","ok","lastProbedAt","githubRepoUrl","https://github.com/whisper-sec/whisper-graph-mcp","githubRepoFullName","whisper-sec/whisper-graph-mcp","releaseId","ext-whisper-sec-whisper-graph-mcp","version","0.2.0","descriptionMarkdown","

\n $\"WhisperGraph\"$ \n

\n\n

WhisperGraph MCP Server

\n\n

\n The internet's infrastructure graph for AI agents - 46B nodes and edges mapping DNS, IPs, ASNs, BGP, WHOIS, Web links and threat intel. Sign up programmatically in 2 HTTP calls.\n

\n\n

\n $\"npm$ \n $\"License:$ \n $\"Node$ = 20\" />\n

\n\n---\n\n**WhisperGraph** is an MCP server backed by the world's largest internet-infrastructure graph database - **46 billion nodes and edges across 20 entity types**, mapping every domain, IP, ASN, prefix, organization, Web link and threat-intelligence listing into a single Cypher-queryable graph. Used by security teams, incident responders, and AI agents for investigation, attribution, brand protection, and infrastructure forensics.\n\n**Built for agents from day one.**\n\n- **Programmatic signup in 2 HTTP calls.** No browser, no CAPTCHA, no human-in-the-loop. Email verification only. Working API key in ~5 seconds.\n- **Free trial for everyone**, including agents. Paid tiers for higher quotas.\n\n**What you can ask:**\n\n- DNS: resolution, nameservers, MX, SPF chains, DNSSEC\n- Routing: ASN ownership, BGP origin history, MOAS conflicts, peering\n- Hosting & ownership: registrar, WHOIS contacts, organization mapping\n- Threat intel: ~40 feeds across 18 categories, `CALL explain()` for full threat scoring\n- Historical: WHOIS history, BGP route changes\n- Web: 10.9B hyperlinks for inter-domain analysis\n\n**Learn more:**\n[Agent signup](https://www.whisper.security/docs/agent-signup) ·\n[WhisperGraph intro](https://www.whisper.security/docs/whisper-graph-intro) ·\n[Cypher API reference](https://www.whisper.security/docs/cypher-api-reference) ·\n[Query guide](https://www.whisper.security/docs/cypher-query-guide) ·\n[Cypher syntax](https://www.whisper.security/docs/cypher-syntax) ·\n[Functions](https://www.whisper.security/docs/cypher-functions) ·\n[Best practices](https://www.whisper.security/docs/cypher-best-practices) ·\n[MCP setup](https://www.whisper.security/docs/mcp/setup)\n\n## Quick start\n\nYou need a WhisperGraph API key. Get one either:\n\n- **Programmatically** (recommended for agents) - see [Agent quickstart](#agent-quickstart) below.\n- **Via the dashboard** (recommended for humans) - [console.whisper.security/sign-up](https://console.whisper.security/sign-up).\n\n### Hosted remote server (no install)\n\nWhisper runs a hosted MCP server at `https://mcp.whisper.security`. Point any MCP client that supports remote servers at it and authenticate with your API key:\n\n```json\n{\n \"mcpServers\": {\n \"whisper\": {\n \"url\": \"https://mcp.whisper.security\",\n \"headers\": { \"Authorization\": \"Bearer \" }\n }\n }\n}\n```\n\n### MCP clients (stdio)\n\nFor local stdio transport, add this to your MCP client config:\n\n```json\n{\n \"mcpServers\": {\n \"whisper-graph\": {\n \"command\": \"npx\",\n \"args\": [\"-y\", \"@whisper-security/whisper-graph-mcp\"],\n \"env\": { \"WHISPER_API_KEY\": \"your-api-key\" }\n }\n }\n}\n```\n\nSelf-hosting this repo is for teams who want to run the MCP layer in their own environment. See [How to set up](https://www.whisper.security/docs/mcp/setup).\n\n## Agent quickstart\n\nGet a working API key in two HTTP calls - no browser, no CAPTCHA, no waiting list.\n\n**Step 1** - start signup (Whisper emails a verification code):\n\n```http\nPOST https://console.whisper.security/api/signup\nContent-Type: application/json\n\n{\"email\":\"your-agent@example.com\",\"attribution\":{\"agent_name\":\"your-agent\",\"source\":\"\"}}\n```\n\n**Step 2** - verify with the emailed code:\n\n```http\nPOST https://console.whisper.security/api/signup/verify\nContent-Type: application/json\n\n{\"signup_id\":\"...\",\"code\":\"...\"}\n```\n\nThe response contains `api_key`, `mcp_url`, `dashboard_url`, and `docs_url`. Use `api_key` in the MCP config snippet above. Full docs: [whisper.security/docs/agent-signup](https://www.whisper.security/docs/agent-signup).\n\n## Tools\n\nAll eight tools are read-only.\n\n| Tool | What it does |\n| ------------------- | --------------------------------------------------------------------------------------------------------------- |\n| `query` | Execute a Cypher query against WhisperGraph. Validated against a safety rule set before it reaches the backend. |\n| `list_labels` | List every node label with counts. Call it before writing a query when you're unsure which label to anchor on. |\n| `describe_label` | Confirm a label exists and enumerate its property keys. |\n| `explain_indicator` | Threat assessment for an IP, hostname, CIDR, or ASN - score, level, factors, sources. |\n| `whisper_history` | Historical WHOIS or BGP data for an indicator. |\n| `domain_variants` | Typosquatting / brand-protection variants of a domain, checked against the graph. |\n| `list_recipes` | List the full whisper.security catalog of ready-made recipes (see below). |\n| `run_recipe` | Run any catalog recipe by slug - a keyless direct procedure or a keyed multi-step flow. |\n\n### Catalog recipes\n\n`list_recipes` + `run_recipe` expose the entire [whisper.security catalog](https://github.com/whisper-sec/whisper-catalog) - 29 curated recipes, no hand-written Cypher required. The vendored catalog (`src/catalog/recipes.json`) is generated from the canonical source with `npm run sync:catalog`, so it tracks the platform.\n\nTwo kinds:\n\n- **Direct recipes (keyless).** A single graph procedure that runs without a key (rate-limited): `assess` (threat posture), `identify` (vendor/operator), `explain`, `variants`, `origins` (CDN de-cloak), `history` / `history-whois`, `walk`, `psl-tldplusone`, `psl-affiliation`, `asset`, `lookup-tor-relay`, `db-schema`.\n- **Flow recipes (keyed).** Curated multi-step investigations that need an API key: `attack-path`, `attack-surface`, `indicator-enrichment`, `infrastructure-mapping`, `subdomain-takeover`, `bgp-hijack-exposure`, `blast-radius`, `route-health`, `typosquat`, `nameserver-hijack-dns-consistency`, `map-supply-chain-concentration`, `discover-ai-agent-infrastructure`, `build-takedown-evidence-package`, `indicator`, `anycast-dns-root-sovereignty`.\n\n```jsonc\n// keyless direct recipe\n{ \"name\": \"run_recipe\", \"arguments\": { \"recipe\": \"assess\", \"inputs\": { \"v\": \"185.220.101.33\" } } }\n\n// keyed multi-step flow (needs WHISPER_API_KEY / X-API-Key)\n{ \"name\": \"run_recipe\", \"arguments\": { \"recipe\": \"indicator-enrichment\", \"inputs\": { \"value\": \"github.com\" } } }\n```\n\nEach recipe carries a `docsUrl` (visible in `list_recipes`) linking to its page under [whisper.security/docs](https://www.whisper.security/docs).\n\n### Resources\n\nSix MCP resources: the full schema, the relationship map, a Cypher function reference, a query cookbook, plus live `whisper://stats` and `whisper://quota`.\n\n### Prompts\n\nEight investigation-workflow prompt templates: `investigate-ip`, `map-attack-surface`, `compare-domains`, `blast-radius`, `threat-triage`, `whois-pivot`, `bgp-investigation`, `typosquat-sweep`.\n\n## Self-hosting (Docker / HTTP)\n\nFor remote or team deployments, run the server over Streamable HTTP:\n\n```bash\ndocker run -p 8080:8080 -e MCP_TRANSPORT=http \\\n ghcr.io/whisper-sec/whisper-graph-mcp:latest\n```\n\nOr with Docker Compose:\n\n```bash\ndocker compose up\n```\n\nIn HTTP mode the server **does not authenticate inbound requests** - it relays the\ncaller's `X-API-Key` or `Authorization: Bearer` header to the hosted WhisperGraph\nAPI, falling back to the `WHISPER_API_KEY` environment variable when no header is\npresent. Put it behind your own gateway if you need access control.\n\n## Configuration\n\nAll configuration is via environment variables.\n\n| Variable | Default | Description |\n| -------------------------- | -------------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |\n| `WHISPER_API_KEY` | _(none)_ | Your WhisperGraph API key. Get one [programmatically in 2 HTTP calls](https://www.whisper.security/docs/agent-signup) or via the [dashboard](https://console.whisper.security/sign-up). |\n| `MCP_TRANSPORT` | `stdio` | `stdio` for local CLI use, `http` for remote/Docker. |\n| `HTTP_HOST` | `0.0.0.0` | Bind host for the HTTP transport. |\n| `HTTP_PORT` | `8080` | Bind port for the HTTP transport. |\n| `WHISPER_ALLOWED_HOSTS` | _(none)_ | Comma-separated `Host` header allowlist for DNS-rebinding protection in HTTP mode. Leave empty only behind a trusted gateway. |\n| `WHISPER_DB_URL` | `https://graph.whisper.security` | Base URL of the hosted WhisperGraph API. |\n| `WHISPER_QUERY_TIMEOUT_MS` | `60000` | Hard per-query deadline forwarded to the API. |\n| `WHISPER_DB_TIMEOUT_MS` | `10000` | HTTP timeout for non-query calls. |\n| `LOG_LEVEL` | `info` | `debug`, `info`, `warn`, or `error`. |\n\n## Development\n\n```bash\nnpm install\nnpm run dev # run from source over stdio\nnpm test # unit + integration tests (no secrets needed)\nnpm run build # bundle to dist/\nnpm run lint # eslint\nnpm run typecheck # tsc --noEmit\n```\n\n## Contributing\n\nContributions are welcome. See [CONTRIBUTING.md](https://github.com/whisper-sec/whisper-graph-mcp/blob/main/CONTRIBUTING.md) and our\n[Code of Conduct](https://github.com/whisper-sec/whisper-graph-mcp/blob/main/CODE_OF_CONDUCT.md). Security issues: see [SECURITY.md](https://github.com/whisper-sec/whisper-graph-mcp/blob/main/SECURITY.md).\n\n## License\n\n[Apache-2.0](https://github.com/whisper-sec/whisper-graph-mcp/blob/main/LICENSE). \"Whisper\", the Whisper logo, and \"WhisperGraph\" are\ntrademarks of Whisper Security - see [NOTICE](https://github.com/whisper-sec/whisper-graph-mcp/blob/main/NOTICE).\n","changelogMarkdown","videoKey","requiredSecretsJson","publishedAt","priceCents","trialDays",0,"iconType","image","upstream",{"_108":109,"_110":111,"_112":113,"_114":115,"_116":117,"_118":119},"requiredSecrets",[],"tags",[100,101,102,103,104,105,106,107],"assets",[],"stats",{"_98":85,"_99":85},"ratingAvg","reviewCount","bgp","cypher","dns","graph-database","osint","security","threat-intelligence","whois","topics",[100,101,102,103,125,126,104,105,106,107],"license","Apache-2.0","language","TypeScript","registryName","io.github.whisper-sec/whisper-graph","homepage","https://www.whisper.security/docs/ai/mcp/setup","packages",[120],{"_121":122,"_123":124,"_75":76},"registryType","npm","identifier","@whisper-security/whisper-graph-mcp","mcp","model-context-protocol","ENV",{"_129":130,"_131":132,"_133":134},"ENVIRONMENT","production","TURNSTILE_SITE_KEY","0x4AAAAAAB8-rEI2gNDf_QhU","SENTRY_DSN","https://45fd1229f78089d5c3ee78be128030e1@o4510583261757440.ingest.de.sentry.io/4510584253448272"]