Documentation

Whisper Security Docs

Cypher API docs, MCP setup, Splunk integration — everything you need to query and integrate the Whisper graph.

QUICK LINKS

Two tracks: Knowledge Graph for query and analysis, Integrations to connect Whisper to your tools.

Knowledge Graph

Getting Started

Run your first Cypher query in 5 minutes

Knowledge Graph

Cypher Cookbook

Copy-paste queries for SOC, threat intel, attack surface

Integrations

MCP Client Setup

Connect Claude, Cursor, and other AI assistants

Integrations

Splunk Integration

IOC enrichment, threat intel, attack-surface monitoring

Knowledge Graph

Introduction to Whisper Knowledge Graph

Overview of the Whisper Knowledge Graph — what it is, how it works, what data it contains, and what you can do with it.

Getting Started

Run your first WhisperGraph query in five minutes: API key, curl, three-step tutorial, Python quickstart, common pitfalls, and where to go next.

Cypher

Hub for the Cypher language reference: schema, syntax, functions, and best practices for WhisperGraph.

Cypher API Reference Cypher Syntax Reference Cypher Functions & Procedures Cypher Best Practices Cypher Cheat Sheet

Use cases

Copy-paste Cypher queries organized by security workflow. Each persona has its own page with self-contained recipes.

SOC Analysts & Incident Responders Threat Intelligence Analysts Penetration Testers & Red Teams Brand Protection & Anti-Phishing DNS & Email Security Network & BGP Security Compliance & Risk Assessment Cyber Insurance & Third-Party Risk Law Enforcement & Cybercrime Security Researchers & Academics Cross-Cutting Recipes

AI

Programmatic Signup (for Agents)

Two HTTP calls to a working Whisper API key. Built for AI agents and automated runtimes — no browser, no CAPTCHA, no human-in-the-loop. Email verification only.

MCP

Connect Claude Desktop, Claude Code, Cursor, VS Code, Windsurf, ChatGPT or any MCP client to the Whisper graph. Per-client config snippets, authentication setup, and a list_labels validation step.

Reference Agent Skills

Integrations

COMING SOON

SentinelShipping soon

OpenCTIPlanned

Cortex XSOARPlanned

Want priority on a specific integration? Tell us.

Splunk

Connect Splunk to WhisperGraph for IOC enrichment, ad-hoc graph queries, threat intel, and attack-surface monitoring. Components, commands, macros, and the full documentation index.

Setup

Requirements Installation Deployment Architecture Configuration

Core features

Search Commands Enrichment Pipeline Splunk Dashboards Reference Splunk Lookups & KV Store Reference Modular Inputs Saved Searches

Advanced

Splunk Use Cases for Infrastructure Intel Investigation Macros Cypher Reference for Splunk Enterprise Security Integration CIM Mapping Source Types

Reference

Troubleshooting

Reference

Graph Schema Reference

Node labels, edge types, multi-hop patterns, and the ER diagram for WhisperGraph. Used by every Cypher query.

Feed Catalog

All 39 threat-intel feeds aggregated by WhisperGraph, with category and refresh cadence.

Feed Categories

The 18 categories WhisperGraph uses to group threat-intel feeds.

Error Codes & Rate Limits

HTTP status codes, RFC 7807 problem-detail format, rate limits, and the anonymous-tier fallback gotcha.

Glossary

Definitions for terms used across WhisperGraph documentation: BGP, DNS, threat-intel, graph mechanics, Splunk, and API protocol.

Support

FAQ

Common questions about WhisperGraph: query performance, edge types, threat scoring, freshness, anonymous tier, and SDKs.

Known Limitations

What WhisperGraph doesn't know: subdomain WHOIS, anycast GeoIP, BGP route flux, threat-feed staleness, and Cypher write restrictions.

How to Ask for Help

Open a support ticket with the right context, plus links to FAQ, glossary, error codes, and status page.

Changelog

Notable changes to WhisperGraph docs, API, MCP server, and Splunk integration.