aid: silent-push
name: Silent Push
description: >-
  Silent Push is a preemptive cyber defense company that maps adversary
  infrastructure before it is weaponized, using a continuously scanned view of
  the global DNS, web content, certificate and WHOIS landscape. Its platform
  turns that data into Indicators of Future Attack (IOFA), risk scores for
  domains and IP addresses, and threat intelligence feeds that security teams
  push into SIEM, SOAR and blocking infrastructure. The developer surface is a
  REST API gateway at api.silentpush.com covering enrichment, Passive Active DNS
  (PADNS), live web scanning and screenshots, SPQL search, feed and indicator
  CRUD, Threat Check, TLP reports and export in CSV, JSON, TXT, RPZ and STIX
  formats, authenticated with an x-api-key header. Silent Push also runs a hosted
  Model Context Protocol server that exposes 33 read-only investigation tools to
  MCP-compatible AI clients over OAuth 2.1.
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: false
  label: Hosted service · you call their endpoint
  confidence: medium
  source:
  - pricing
  generated: '2026-08-28'
  method: derived
image: https://www.silentpush.com/wp-content/uploads/Silent-Push-Logo-@2x.png
url: https://raw.githubusercontent.com/api-evangelist/silent-push/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.20'
created: '2026-08-27'
modified: '2026-08-27'
tags:
- Company
- Security
- Threat Intelligence
- Cybersecurity
- DNS
- Domain Intelligence
- Passive DNS
- Enrichment
- Threat Feeds
- WHOIS
- MCP
tags_raw:
- Company
- Security
- Threat Intelligence
- Cybersecurity
- DNS
- Domain Intelligence
- Passive DNS
- Enrichment
- Threat Feeds
- WHOIS
- Model Context Protocol
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
apis:
- name: Silent Push API
  description: >-
    Unified REST gateway for Silent Push threat intelligence. Sections cover
    Enrich (single and bulk domain, IPv4 and IPv6 enrichment plus IP diversity),
    Export (CSV, JSON, TXT, RPZ, STIX), Feeds, Feed Indicators, Feed Tags, Live
    Scan, SPQL Search, Threat Check, TLP Reports, Users and Quota, and Traffic
    Origin. Authenticated with an x-api-key request header.
  humanURL: https://help.silentpush.com/docs/api
  baseURL: https://api.silentpush.com/api/v1/merge-api/
  tags:
  - Threat Intelligence
  - Enrichment
  - Passive DNS
  - Security
  properties:
  - type: Documentation
    url: https://help.silentpush.com/docs/api
  - type: GettingStarted
    url: https://help.silentpush.com/docs/get-started-with-api
  - type: APIReference
    url: https://help.silentpush.com/apidocs/perform-a-live-scan
  - type: Authentication
    url: authentication/silent-push-authentication.yml
  - type: ErrorCatalog
    url: errors/silent-push-problem-types.yml
  - type: Conventions
    url: conventions/silent-push-conventions.yml
  - type: DataModel
    url: data-model/silent-push-data-model.yml
  - type: Postman
    url: postman/silent-push-web-scanner.postman_collection.json
- name: Silent Push MCP Server
  description: >-
    SaaS-hosted Model Context Protocol server announced in Release 6.0
    (2026-06-12, beta). Exposes 33 read-only investigation tools across
    enrichment, PADNS, reputation, live scanning and SPQL fingerprinting to
    MCP-compatible AI clients such as Claude and Cursor. Authorized with OAuth
    2.1 (authorization code + PKCE S256, dynamic client registration) or a
    bearer token.
  humanURL: https://help.silentpush.com/docs/mcp-for-silent-push
  baseURL: https://mcp.silentpush.com/mcp
  tags:
  - MCP
  - Agents
  - Threat Intelligence
  tags_raw:
  - Model Context Protocol
  - Agents
  - Threat Intelligence
  properties:
  - type: MCPServer
    url: mcp/silent-push-mcp.yml
  - type: ToolCrosswalk
    url: mcp/silent-push-tool-crosswalk.yml
  - type: Documentation
    url: https://help.silentpush.com/docs/mcp-for-silent-push
common:
- type: DomainSecurity
  url: security/silent-push-domain-security.yml
- type: Website
  url: https://www.silentpush.com/
- type: DeveloperPortal
  url: https://help.silentpush.com/docs/api
- type: Documentation
  url: https://help.silentpush.com/docs/introduction
- type: APIReference
  url: https://help.silentpush.com/apidocs/perform-a-live-scan
- type: GettingStarted
  url: https://help.silentpush.com/docs/get-started-with-api
- type: Support
  url: https://www.silentpush.com/contact/
- type: Blog
  url: https://www.silentpush.com/blog/
- type: GitHubOrganization
  url: https://github.com/Silent-Push
- type: SignUp
  url: https://explore.silentpush.com/register
- type: TermsOfService
  url: https://www.silentpush.com/terms-of-use/
- type: PrivacyPolicy
  url: https://www.silentpush.com/privacy-policy/
- type: Postman
  url: postman/silent-push-web-scanner.postman_collection.json
- type: LLMsTxt
  url: llms/silent-push-llms.txt
- type: WellKnown
  url: well-known/silent-push-well-known.yml
- type: MCPServer
  url: mcp/silent-push-mcp.yml
- type: ToolCrosswalk
  url: mcp/silent-push-tool-crosswalk.yml
- type: Packages
  url: packages/silent-push-packages.yml
- type: SDKs
  url: packages/silent-push-packages.yml
- type: CLI
  url: cli/silent-push-cli.yml
- type: ChangeLog
  url: changelog/silent-push-changelog.yml
- type: Lifecycle
  url: lifecycle/silent-push-lifecycle.yml
- type: Authentication
  url: authentication/silent-push-authentication.yml
- type: Conventions
  url: conventions/silent-push-conventions.yml
- type: ErrorCatalog
  url: errors/silent-push-problem-types.yml
- type: Conformance
  url: conformance/silent-push-conformance.yml
- type: DataModel
  url: data-model/silent-push-data-model.yml
- type: Plans
  url: plans/silent-push-plans-pricing.yml
- type: RateLimits
  url: rate-limits/silent-push-rate-limits.yml
- type: VulnerabilityDisclosure
  url: security/silent-push-vulnerability-disclosure.yml
- type: Security
  url: https://www.silentpush.com/responsible-disclosure/
x-enrichment:
  date: '2026-08-27'
  status: enriched
  artifacts_added: 20
  pass: local-v1
x-contract-note:
  finding: >-
    Silent Push DOES publish an OpenAPI - it is simply not readable without an
    account. GET https://api.silentpush.com/api/schema/ returns HTTP 401 with
    content-type application/vnd.oai.openapi (a drf-spectacular schema endpoint),
    and https://api.silentpush.com/api/docs/ 302s to login. Recorded here so a
    later round does not re-litigate "no spec": the spec exists, nothing was
    saved to openapi/, and every derived artifact in this repo is built from
    published documentation and live probes instead.
  probed: '2026-08-27'
  evidence:
  - url: https://api.silentpush.com/api/schema/
    status: 401
    content_type: application/vnd.oai.openapi
  - url: https://api.silentpush.com/api/docs/
    status: 302
    note: redirects to login