Step 1: Get Your API Key
Before you can make any calls, you need an API key. All requests to the Whisper API must be authenticated to identify you.
Once you have your key, keep it secure. Never expose it in client-side code.
Step 2: Authenticate Your Request
The Whisper API uses Bearer Token authentication. This means you must include an Authorization
header in every request.
The header must be formatted like this:Authorization: Bearer {YOUR_API_KEY}
Simply replace {YOUR_API_KEY}
with the key you received.
Step 3: Make Your First Call: IP Intelligence
Let's start by fetching data for an IP address. The IP Intelligence endpoint provides a comprehensive overview of any IP, including its location, network, and associated domains.
Open your terminal and run the following cURL
command. Make sure to replace YOUR_API_KEY
with your actual key.
Example Call
curl -X GET "https://api.whisper.security/intelligence/v1/ip/8.8.8.8" \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Accept: application/json"
Sample Response
A successful request will return a detailed JSON object. You can see the IP's organization, location, risk score, and network details at a glance.
{
"query": {
"ip": "8.8.8.8",
"timestamp": "2025-09-20T17:02:40.111653898Z",
"response_time_ms": 17
},
"summary": {
"organization": "GOOGLE LLC",
"location": "Mountain View, United States",
"network": "8.8.8.0/24",
"asn_primary": "AS15169",
"risk_score": 85.5,
"ip_type": "hosting",
"total_domains": 49,
"total_dns_records": 49
},
"geolocation": {
"country": {
"name": "United States",
"confidence": 0.95,
"iso_code": "US"
},
"city": {
"name": "Mountain View",
"confidence": 0.85
},
"coordinates": {
"latitude": 37.4223,
"longitude": -122.085,
"accuracy_radius": 10,
"time_zone": "America/Los_Angeles"
}
},
"relationships": {
"a_records": ["example.com", "test.com"],
"ptr_records": ["dns.google"]
}
}
Step 4: Make Your Second Call: Domain Intelligence
Next, let's get information about a domain. The Domain Intelligence endpoint gives you a complete picture, including WHOIS registration data, DNS records, and the underlying infrastructure.
Use the following cURL
command to query google.com
.
Example Call
curl -X GET "https://api.whisper.security/intelligence/v1/domain/google.com" \
-H "Authorization: Bearer YOUR_API_KEY" \
-H "Accept: application/json"
Sample Response
The response contains detailed information about the domain's registrar, registration dates, DNS records, and associated IP addresses.
{
"query": {
"domain": "google.com",
"timestamp": "2025-09-20T17:03:45.123456789Z",
"response_time_ms": 125
},
"summary": {
"registrar": "MarkMonitor Inc.",
"creation_date": "1997-09-15",
"expiration_date": "2028-09-14",
"status": "active",
"risk_score": 5.0
},
"whois": {
"domain": "google.com",
"registrar": {
"name": "MarkMonitor Inc.",
"iana_id": "292"
},
"registration": {
"created": "1997-09-15T04:00:00Z",
"expires": "2028-09-14T04:00:00Z"
},
"nameservers": [
"ns1.google.com",
"ns2.google.com"
]
},
"dns": {
"a_records": [
{"ip": "142.250.185.78", "ttl": 300}
],
"aaaa_records": [
{"ip": "2607:f8b0:4004:c07::71", "ttl": 300}
],
"mx_records": [
{"priority": 10, "host": "smtp.google.com", "ttl": 3600}
]
},
"infrastructure": {
"ip_addresses": [
{"ip": "142.250.185.78", "asn": "AS15169", "org": "GOOGLE"}
]
}
}
Next Steps
Congratulations! You've successfully queried the Whisper API.
Now you're ready to:
- Explore the full API Reference for details on every endpoint.
- Check out our Use Case guides to see how to apply this data.
- Integrate the API into your projects using our official SDKs.