Silent Push

aid: silent-push
name: Silent Push
description: Silent Push is a preemptive cyber defense company that maps adversary infrastructure before it is weaponized,
  using a continuously scanned view of the global DNS, web content, certificate and WHOIS landscape. Its platform turns that
  data into Indicators of Future Attack (IOFA), risk scores for domains and IP addresses, and threat intelligence feeds that
  security teams push into SIEM, SOAR and blocking infrastructure. The developer surface is a REST API gateway at api.silentpush.com
  covering enrichment, Passive Active DNS (PADNS), live web scanning and screenshots, SPQL search, feed and indicator CRUD,
  Threat Check, TLP reports and export in CSV, JSON, TXT, RPZ and STIX formats, authenticated with an x-api-key header. Silent
  Push also runs a hosted Model Context Protocol server that exposes 33 read-only investigation tools to MCP-compatible AI
  clients over OAuth 2.1.
deliveryModel:
  model: saas
  open_source: false
  commercial: true
  callable_host: false
  label: Hosted service · you call their endpoint
  confidence: medium
  source:
  - pricing
  generated: '2026-08-28'
  method: derived
accessModel:
  pricing: freemium
  onboarding: self-serve
  trial: false
  try_now: true
  public: false
  label: Freemium · Self-serve signup
  confidence: high
  source:
  - plans
  - authentication
  - rate-limits
  - security
  generated: '2026-09-02'
  method: derived
image: https://www.silentpush.com/wp-content/uploads/Silent-Push-Logo-@2x.png
url: https://raw.githubusercontent.com/api-evangelist/silent-push/refs/heads/main/apis.yml
x-type: company
x-source: harvest:secondary-market
specificationVersion: '0.20'
created: '2026-08-27'
modified: '2026-08-27'
tags:
- Company
- Security
- Threat Intelligence
- Cybersecurity
- DNS
- Domain Intelligence
- Passive DNS
- Enrichment
- Threat Feeds
- WHOIS
- MCP
tags_raw:
- Company
- Security
- Threat Intelligence
- Cybersecurity
- DNS
- Domain Intelligence
- Passive DNS
- Enrichment
- Threat Feeds
- WHOIS
- Model Context Protocol
maintainers:
- FN: Kin Lane
  email: kin@apievangelist.com
- FN: APIs.json
  email: info@apis.io
apis:
- name: Silent Push API
  description: Unified REST gateway for Silent Push threat intelligence. Sections cover Enrich (single and bulk domain, IPv4
    and IPv6 enrichment plus IP diversity), Export (CSV, JSON, TXT, RPZ, STIX), Feeds, Feed Indicators, Feed Tags, Live Scan,
    SPQL Search, Threat Check, TLP Reports, Users and Quota, and Traffic Origin. Authenticated with an x-api-key request header.
  humanURL: https://help.silentpush.com/docs/api
  baseURL: https://api.silentpush.com/api/v1/merge-api/
  tags:
  - Threat Intelligence
  - Enrichment
  - Passive DNS
  - Security
  properties:
  - type: Documentation
    url: https://help.silentpush.com/docs/api
  - type: GettingStarted
    url: https://help.silentpush.com/docs/get-started-with-api
  - type: APIReference
    url: https://help.silentpush.com/apidocs/perform-a-live-scan
  - type: Authentication
    url: authentication/silent-push-authentication.yml
  - type: ErrorCatalog
    url: errors/silent-push-problem-types.yml
  - type: Conventions
    url: conventions/silent-push-conventions.yml
  - type: DataModel
    url: data-model/silent-push-data-model.yml
  - type: Postman
    url: postman/silent-push-web-scanner.postman_collection.json
- name: Silent Push MCP Server
  description: SaaS-hosted Model Context Protocol server announced in Release 6.0 (2026-06-12, beta). Exposes 33 read-only
    investigation tools across enrichment, PADNS, reputation, live scanning and SPQL fingerprinting to MCP-compatible AI clients
    such as Claude and Cursor. Authorized with OAuth 2.1 (authorization code + PKCE S256, dynamic client registration) or
    a bearer token.
  humanURL: https://help.silentpush.com/docs/mcp-for-silent-push
  baseURL: https://mcp.silentpush.com/mcp
  tags:
  - MCP
  - Agents
  - Threat Intelligence
  tags_raw:
  - Model Context Protocol
  - Agents
  - Threat Intelligence
  properties:
  - type: MCPServer
    url: mcp/silent-push-mcp.yml
  - type: ToolCrosswalk
    url: mcp/silent-push-tool-crosswalk.yml
  - type: Documentation
    url: https://help.silentpush.com/docs/mcp-for-silent-push
common:
- type: DomainSecurity
  url: security/silent-push-domain-security.yml
- type: Website
  url: https://www.silentpush.com/
- type: DeveloperPortal
  url: https://help.silentpush.com/docs/api
- type: Documentation
  url: https://help.silentpush.com/docs/introduction
- type: APIReference
  url: https://help.silentpush.com/apidocs/perform-a-live-scan
- type: GettingStarted
  url: https://help.silentpush.com/docs/get-started-with-api
- type: Support
  url: https://www.silentpush.com/contact/
- type: Blog
  url: https://www.silentpush.com/blog/
- type: GitHubOrganization
  url: https://github.com/Silent-Push
- type: SignUp
  url: https://explore.silentpush.com/register
- type: TermsOfService
  url: https://www.silentpush.com/terms-of-use/
- type: PrivacyPolicy
  url: https://www.silentpush.com/privacy-policy/
- type: Postman
  url: postman/silent-push-web-scanner.postman_collection.json
- type: LLMsTxt
  url: llms/silent-push-llms.txt
- type: WellKnown
  url: well-known/silent-push-well-known.yml
- type: MCPServer
  url: mcp/silent-push-mcp.yml
- type: ToolCrosswalk
  url: mcp/silent-push-tool-crosswalk.yml
- type: Packages
  url: packages/silent-push-packages.yml
- type: SDKs
  url: packages/silent-push-packages.yml
- type: CLI
  url: cli/silent-push-cli.yml
- type: ChangeLog
  url: changelog/silent-push-changelog.yml
- type: Lifecycle
  url: lifecycle/silent-push-lifecycle.yml
- type: Authentication
  url: authentication/silent-push-authentication.yml
- type: Conventions
  url: conventions/silent-push-conventions.yml
- type: ErrorCatalog
  url: errors/silent-push-problem-types.yml
- type: Conformance
  url: conformance/silent-push-conformance.yml
- type: DataModel
  url: data-model/silent-push-data-model.yml
- type: Plans
  url: plans/silent-push-plans-pricing.yml
- type: RateLimits
  url: rate-limits/silent-push-rate-limits.yml
- type: VulnerabilityDisclosure
  url: security/silent-push-vulnerability-disclosure.yml
- type: Security
  url: https://www.silentpush.com/responsible-disclosure/
x-enrichment:
  date: '2026-08-27'
  status: enriched
  artifacts_added: 20
  pass: local-v1
x-contract-note:
  finding: 'Silent Push DOES publish an OpenAPI - it is simply not readable without an account. GET https://api.silentpush.com/api/schema/
    returns HTTP 401 with content-type application/vnd.oai.openapi (a drf-spectacular schema endpoint), and https://api.silentpush.com/api/docs/
    302s to login. Recorded here so a later round does not re-litigate "no spec": the spec exists, nothing was saved to openapi/,
    and every derived artifact in this repo is built from published documentation and live probes instead.'
  probed: '2026-08-27'
  evidence:
  - url: https://api.silentpush.com/api/schema/
    status: 401
    content_type: application/vnd.oai.openapi
  - url: https://api.silentpush.com/api/docs/
    status: 302
    note: redirects to login