Integrations

Every way in.

One CLI on eight signed channels, twelve whisper init targets, one MCP server, SDKs on npm and PyPI, a container image, a CI action, an edge SDK, workflow nodes. Every surface is the same product, two tiers deep: verify any agent with no key at all; provision, govern, and egress with one.

Badges are honest: Liveshipped, proven end-to-end on the real network Hosted demo comingthe code ships today; the public deployment is a later phase Stagedbuilt and proven; a one-command registry install is a later phase
The rule

Every surface has two tiers

Be liberal in what you accept: auth is optional. Without a key, every integration still verifies any Whisper agent against the DNSSEC root - real value, zero friction. With your key, the full control plane and egress unlock.

○ keyless - verify identity, reverse DNS, RDAP, the transparency ledger. Public checks; nothing to sign up for. ● with your key - register, list, policy, logs, revoke, and egress from the agent's own /128.
○ without a key · verify anyone
1whisper verify --trustless 2a04:2a01:b69a:6717:e3b0:51ff:3bf7:f478
→CRYPTOGRAPHICALLY PROVEN - trust anchor: DNSSEC root (IANA), Whisper API NOT trusted
2curl -s https://rdap.whisper.online/verify-identity/2a04:2a01:…:f478
→is_whisper_agent: true · dane_ok: true · jws_ok: true
● with your key · provision + govern + egress
1CALL whisper.agents({op:'register', args:{label:'my-agent'}})
→api_key · address (a routable /128) · fqdn · ptr
2whisper connect my-agent →every packet sources from that /128
3op:'policy' · op:'logs' · op:'revoke' →govern it; the effect is publicly provable
run the keyless tier right now · real output, our genesis resident
$ whisper verify --trustless 2a04:2a01:b69a:6717:e3b0:51ff:3bf7:f478
… (dnssec pass · dane pass · transparency pass · identity_doc pass, all anchored at the DNSSEC root)
whisper: ae3b051ff3bf7f478.tdc38e7c55bad3306a92b830f9bb1e4f9.agents.whisper.online is CRYPTOGRAPHICALLY PROVEN - trust anchor: DNSSEC root (IANA anchor) + DANE-EE + DNSSEC-anchored transparency/ledger keys -- Whisper API NOT trusted

In plain terms: a surface that only verifies would be half a product, and a surface that demands a key before doing anything would be a wall. So every integration below does both - and the badge tells you exactly how much of it is live today.

Install

One CLI, eight signed channels

Every channel delivers the same signed binary. Keyless, it verifies any agent (whisper verify --trustless). With your key, it creates, connects, sets policy, reads logs, revokes. The apt, dnf, and apk repositories are self-hosted on our own network and signed with our own key - no third party in the supply chain.

curl · the one line

Live

Read it first, then run it. It asks before it changes anything.

$ curl -fsSL https://get.whisper.online | sh
get.whisper.onlinewhisper-cli (MIT)

Homebrew · macOS / Linux

Live

Our own tap; the formula pins per-arch SHA-256 of the signed release.

$ brew install whisper-sec/tap/whisper
whisper-sec/homebrew-tap

Scoop · Windows

Live

Our own bucket, hash-pinned per release.

$ scoop bucket add whisper https://github.com/whisper-sec/scoop-bucket
$ scoop install whisper
whisper-sec/scoop-bucket

go install / mise

Live

Straight from source through the Go module proxy, or the mise GitHub-release backend.

$ go install github.com/whisper-sec/whisper-cli/cmd/whisper@latest
$ mise use -g "github:whisper-sec/whisper-cli[exe=whisper]"
whisper-sec/whisper-cli

apt · Debian / Ubuntu

Live

Signed, self-hosted on AS219419.

$ curl -fsSL https://get.whisper.online/whisper.gpg | sudo tee /usr/share/keyrings/whisper.asc >/dev/null
$ echo "deb [signed-by=/usr/share/keyrings/whisper.asc] https://get.whisper.online/deb stable main" | sudo tee /etc/apt/sources.list.d/whisper.list
$ sudo apt update && sudo apt install whisper
get.whisper.online/deb

dnf · Fedora / RHEL

Live

Same repo host, per-package RPM signatures.

$ sudo tee /etc/yum.repos.d/whisper.repo >/dev/null <<'EOF'
[whisper]
name=Whisper
baseurl=https://get.whisper.online/rpm
enabled=1
gpgcheck=1
gpgkey=https://get.whisper.online/whisper.gpg
EOF
$ sudo dnf install whisper
get.whisper.online/rpm

apk · Alpine

Live

Signed index, container-friendly.

$ wget -qO /etc/apk/keys/whisper-apk.rsa.pub https://get.whisper.online/apk/whisper-apk.rsa.pub
$ echo "https://get.whisper.online/apk" | sudo tee -a /etc/apk/repositories
$ sudo apk add whisper
get.whisper.online/apk

Check the signing key yourself

Live

Don't take the repos on faith either. The key that signs them, verified with stock gpg:

$ curl -fsSL https://get.whisper.online/whisper.gpg | gpg --show-keys --with-fingerprint --dry-run
pub   rsa4096 2026-06-30 [SC]
      FCE3 EE8D 3F98 48ED E746  96C6 7570 D759 316F 7C1F
uid                      Whisper Security (Package Repositories) <security@whisper.security>
whisper.gpg
Build with

Wire it into what you build

One command per tool, one MCP server for every MCP host, one SDK name on both registries.

whisper init · 12 targets

Live

One command wires a tool, framework, or runtime for Whisper identity and egress - zero config in the common case.

claudepythonzedgeminiaiderai-sdkbrowser-usediscordtelegramnotebookcomposek8s
  • keyless - whisper verify works out of the box
  • with key - the tool's traffic egresses from its own /128
$ whisper init claude
whisper-sec/whisper-cli

whisper mcp · one MCP server

Live

One server for Claude, Zed, and every MCP host - explicitly two-tier by tool.

  • keyless tools - verify, rdap
  • key-gated tools - register, list, policy, logs, revoke, egress-config
$ whisper mcp
# registry entry: io.github.whisper-sec/whisper
MCP Registrysource

whisper-id · npm + PyPI

Live

The SDK, same name on both registries. Verify with no key or CLI at all; govern with one.

  • keyless - verify / RDAP / reverse-DNS checks, serverless-ready
  • with key - register, policy, logs, revoke, egress config
$ npm i whisper-id
$ pip install whisper-id
npmPyPIwhisper-nodewhisper-py
Run anywhere

Containers, edge, and CI

The same identity wherever the agent actually runs.

Container image · GHCR

Live

Multi-arch (amd64/arm64), entrypoint whisper. Modes: mcp, run, egress sidecar - pair it with whisper init compose / init k8s.

  • keyless - verify, mcp verify/rdap tools
  • with key - run your workload egressing from its /128
$ docker run --rm ghcr.io/whisper-sec/whisper --version
ghcr.io/whisper-sec/whisper

whisper-edge · npm

Live

Dependency-free TypeScript SDK for edge runtimes - Workers, Vercel, Deno, Netlify, Lambda, Supabase. Fetch-only; nothing to compile.

  • keyless - verify / verifyDetails / resolve / rdap
  • with key - control(apiKey): the full verb, plus egress where the runtime allows
$ npm i whisper-edge
npmGitHub

setup-whisper · GitHub Action

Live

Installs the signed CLI on any runner OS/arch; optionally connects the job so CI itself runs as a named agent.

  • keyless - install + verify in any workflow
  • with key - api-key: input + whisper connect for the job
- uses: whisper-sec/setup-whisper@v1
whisper-sec/setup-whisper

Whisper Guard · browser extension

Live

Phishing protection at the keyboard: on-device look-alike warnings the instant it installs (no account), the live graph verdict on every site when you sign in. Only a site's name is ever checked. Chrome Web Store and AMO listings are in submission; it loads from source in under a minute.

$ git clone https://github.com/whisper-sec/whisper-guard && cd whisper-guard && npm ci && npm run build
docs/whisper-guardwhisper-guard (MIT)
Automate

Workflows and serverless

n8n · community node

Live

n8n-nodes-whisper: ten operations across both tiers, proven by executing the published node in a real n8n - a real /128 minted, confirmed externally, revoked.

  • keyless - verify / RDAP nodes in any workflow
  • with key - register, policy, logs, revoke from your flows
# n8n → Settings → Community nodes → Install
n8n-nodes-whisper
npm

Serverless connectors · 6 platforms

Hosted demo coming

Cloudflare Workers, Vercel, Deno Deploy, Netlify, AWS Lambda, Supabase Edge - ready-to-deploy functions on whisper-edge, two-tier like everything else. The code ships today; the public hosted demos go live in a later phase, and this badge flips when they do.

  • keyless - a verify endpoint you deploy in minutes
  • with key - control plane from your function; egress where the platform allows
whisper-sec/whisper-examples

Nine doors, one house. Whichever you walk through, the same address answers - and anyone can check it.

Agent frameworks

Native in your agent framework

One whisper mcp server, one install per framework - all generated from one source of truth (whisper-sec/whisper-adapters). The wiring is always {command:"whisper", args:["mcp"]}. Two-tier like everything else: verify any peer with no key; provision, govern, and egress with one. Only the five Live frameworks install and register on their own CLI today - the rest ship a real add-step and say so.

Claude Code

Live

Plugin install + whisper mcp registration proven on the real CLI; the /128 egress hook works.

  • keyless - whisper_verify, whisper_rdap
  • with key - register / list / policy / logs / revoke + /128 egress
/plugin marketplace add whisper-sec/whisper-adapters
/plugin install whisper@whisper
docssource

Gemini CLI

Live

Whole-repo install proven on the Gemini CLI; the same manifest installs under Antigravity. In-chat use needs your Google login.

  • keyless - whisper_verify, whisper_rdap
  • with key - the full control plane + /128 egress
$ gemini extensions install https://github.com/whisper-sec/whisper-adapters
docs

OpenAI Codex

Live

Install + registration proven on the Codex CLI. In-chat use needs your OpenAI login.

  • keyless - whisper_verify, whisper_rdap
  • with key - the full control plane + /128 egress
$ codex plugin marketplace add whisper-sec/whisper-adapters
$ codex plugin add whisper@whisper
docs

GitHub Copilot CLI

Live

Install + registration proven on the Copilot CLI. In-chat use needs a Copilot subscription.

  • keyless - whisper_verify, whisper_rdap
  • with key - the full control plane + /128 egress
$ copilot plugin marketplace add whisper-sec/whisper-adapters
$ copilot plugin install whisper@whisper
docs

OpenClaw

Live

One-command install from ClawHub (moderation cleared). Built against the real OpenClaw Plugin SDK and proven end-to-end; installing from source stays a secondary option.

  • keyless - whisper_verify, whisper_rdap
  • with key - the full control plane + /128 egress
$ clawhub install whisper
docs

OpenCode · Hermes

Staged

Built and proven end-to-end; no one-command registry install yet. Each ships its real add-step today - a native MCP snippet in opencode.json (OpenCode) or an ~/.hermes/config.yaml recipe (Hermes).

  • keyless - verify / RDAP tools
  • with key - control plane + /128 egress
OpenCodeHermes

Devin · Qoder · Pi · Swival

Manual

Hosted SaaS and GUI IDEs with no install CLI - add the Whisper MCP server by hand. The config is always the same: command whisper, args ["mcp"].

  • keyless - verify / RDAP tools
  • with key - control plane + /128 egress
manual setupall frameworks

Pick a door.

The keyless tier works right now, from this page. The rest takes one key.

$curl -fsSL https://get.whisper.online | sh
Get your key → Bring an agent home →