WhisperGraph
Gives Claude direct access to WhisperGraph, a 46 billion node graph database mapping DNS records, IP addresses, ASNs, BGP routes, WHOIS data, and threat intelligence across the entire internet. You can run Cypher queries to trace infrastructure relationships, pivot through domain ownership, check threat scores across 40 feeds, analyze BGP hijacks, or hunt typosquatting domains. Ships with six tools including query execution, label inspection, and threat assessment, plus eight investigation prompt templates for common security workflows. Supports both stdio for local use and a hosted remote server at mcp.whisper.security. Agents can sign up programmatically in two API calls without touching a browser. Useful for incident response, infrastructure forensics, brand protection, or any investigation that needs to map how domains, IPs, and organizations connect across the internet's routing and naming layers.
- GitHub stars
- 1
- tools
- 6
- auth
- Secret needed
- transport
- STDIO, HTTP
- env var
- 1
- last updated
- Jul 19, 2026
Tools
6 toolsPublic tool metadata for what this MCP can expose to an agent.
queryExecute a Cypher query against WhisperGraph — the internet's largest infrastructure graph database (7.39B nodes, 39B edges, 5.6M threat intel edges). Returns JSON with columns, rows, and statistics. Use this tool for any question involving domains, hostnames, IPs, DNS, BGP, Ge...1 params
Execute a Cypher query against WhisperGraph — the internet's largest infrastructure graph database (7.39B nodes, 39B edges, 5.6M threat intel edges). Returns JSON with columns, rows, and statistics. Use this tool for any question involving domains, hostnames, IPs, DNS, BGP, Ge...
cypherstringlist_labelsList all node labels in WhisperGraph with their counts. Use this BEFORE writing a query when you're not sure which label to anchor on. It rules out hallucinated labels (e.g. there is no DOMAIN or FQDN — only HOSTNAME) and tells you which labels are large (HOSTNAME, IPV4) vs sm...
List all node labels in WhisperGraph with their counts. Use this BEFORE writing a query when you're not sure which label to anchor on. It rules out hallucinated labels (e.g. there is no DOMAIN or FQDN — only HOSTNAME) and tells you which labels are large (HOSTNAME, IPV4) vs sm...
No parameter schema in public metadata yet.
describe_labelDescribe a single label: confirm it exists, get its node count, and enumerate the property keys observed on that label. Use this BEFORE writing a query that filters on a specific property. If you write WHERE h.fqdn = "..." but describe_label("HOSTNAME") returns properties = ["...1 params
Describe a single label: confirm it exists, get its node count, and enumerate the property keys observed on that label. Use this BEFORE writing a query that filters on a specific property. If you write WHERE h.fqdn = "..." but describe_label("HOSTNAME") returns properties = ["...
labelstringexplain_indicatorRun a comprehensive threat assessment on a single indicator. The indicator can be an IPv4, IPv6, hostname, CIDR network, or ASN — the procedure auto-detects the type. Returns a single structured row: { indicator, type, available, cached, found, score, level (NONE/INFO/LOW/MEDI...1 params
Run a comprehensive threat assessment on a single indicator. The indicator can be an IPv4, IPv6, hostname, CIDR network, or ASN — the procedure auto-detects the type. Returns a single structured row: { indicator, type, available, cached, found, score, level (NONE/INFO/LOW/MEDI...
indicatorstringwhisper_historyRetrieve historical WHOIS or BGP data for a single indicator. The indicator can be an IPv4, IPv6, hostname, CIDR, or ASN — the procedure auto-detects the type. Returns shape varies by indicator type: - IP / prefix (type=routing): { origin, prefix, startTime, endTime, peersSein...1 params
Retrieve historical WHOIS or BGP data for a single indicator. The indicator can be an IPv4, IPv6, hostname, CIDR, or ASN — the procedure auto-detects the type. Returns shape varies by indicator type: - IP / prefix (type=routing): { origin, prefix, startTime, endTime, peersSein...
indicatorstringdomain_variantsGenerate typosquatting / brand-protection variants of a domain or brand name and check which ones actually exist in WhisperGraph. Runs 14 mutation algorithms — character omission, repetition, transposition, QWERTY-adjacent replacement/insertion, vowel-swap, bitsquatting, homog...3 params
Generate typosquatting / brand-protection variants of a domain or brand name and check which ones actually exist in WhisperGraph. Runs 14 mutation algorithms — character omission, repetition, transposition, QWERTY-adjacent replacement/insertion, vowel-swap, bitsquatting, homog...
includeNonExistentbooleanlabelstringnamestringSponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageConfiguration
WHISPER_API_KEYsecretWhisperGraph API key. Get a free one at https://console.whisper.security/sign-up
Readme
WhisperGraph
WhisperGraph MCP Server
The internet's infrastructure graph for AI agents - 46B nodes and edges mapping DNS, IPs, ASNs, BGP, WHOIS, Web links and threat intel. Sign up programmatically in 2 HTTP calls.
Details
- Repository
- github.com/whisper-sec/whisper-graph-mcp
- Website
- www.whisper.security/docs/ai/mcp/setup
- Categories
- Cloud & Infrastructure, Media & Entertainment
- Package
@whisper-security/whisper-graph-mcp- Transport
- STDIO, HTTP
- Auth
- Required
- Registry
- MCP registry, active
Related Cloud & Infrastructure MCP servers
View all
Kubeleashkubeleash/kubeleashKubernetes MCP server with RBAC-style, context-scoped guardrails for AI agents.1stars
BorealHostalainsvrd/borealhost-mcpAgent-native web hosting — deploy sites, manage DNS, register domains, scale infrastructure0stars
memexayushagrawal288/memexPersistent memory for AI agents — semantic + recency search, ONNX embeddings, Docker Compose.0stars
Scruticaio.github.davidgringras/scruticaAI compute infrastructure intelligence: facilities, supply chains, sovereign AI, export controls.0stars
Emailprimitivedotdev/primitive-mono-repoEmail infrastructure for AI agents — send, receive, search, and reply to email over MCP.0stars
ContextLayerdotnova/context-layerIntelligent context infrastructure for AI teams: knowledge graph, sessions, tasks, documents.0stars