Whistle MCP server

by mattwerner-sudo·io.github.mattwerner-sudo/whistle-mcp·v1.0.2

Verified staff contacts, schools, and hiring signals across NCAA athletic departments.

C55/100grade C

What users say

No reviews yet

Safety scan

C55/100

Adoption

New

184 downloads/wk

Reviews

Nobody has reviewed Whistle yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

get_school
Get full profile for a school: org data, staff list, tech stack, recent signals. Use list_schools first to find school IDs.
get_signals
Get recent intent signals (new hires, departures, tech-stack changes, job postings) for a school or across all schools.
search_staff
Search for collegiate athletics staff members by name, title, school, or free-text query. Returns contact info, title, and school affiliation.
trigger_scrape
Queue a fresh data refresh/scrape for a specific school. Rate-limited. Returns a job ID you can reference.

scanner v0.1.10 · 2026-10-15 · same rubric, same numbers if you re-run it

1 low

Code scan2 source files scanned25/25
–Live reliabilityno gateway calls yet and no remote to proben/a
–Tool poisoningtools not inspected (local package is not executed); not countedn/a
Auth qualitystatic API keys via environment variables6/15
Maintenanceno repository listed3/15
Maintainer identityno repository or website to verify2/10

Overall 55/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score: 55/100; higher than 10% of 48,243 servers
Tools: 4; the typical server has 7
Tools that change things: 0%; typical: 0%. Fewer write tools means less an agent can break
Downloads a week: 184; more than 74% of 12,306 servers with a package

What its tools let an agent do: 3 read · 1 run or deploy

Release history: 2 versions in the registry since 2026-09-08, latest 2026-10-12, typically one every 34 days.

Runs npx -y gowhistle-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add whistle-mcp -- npx -y gowhistle-mcp

Is Whistle MCP server safe?: With care: it is graded C, so read the findings first (55/100). Read the Whistle safety report
How do I install Whistle?: It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Whistle need an API key?: Yes. The registry entry asks for WHISTLE_API_KEY.
Is Whistle maintained?: The latest release is v1.0.2.
How does Whistle compare with other MCP servers?: safety score 55/100 (higher than 10% of 48,243 servers); tools 4 (the typical server has 7); tools that change things 0% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.