whispers multi-agent workflows made easy
Star -
// for agents
2ack protocol
⏦⏦⏦> ◆ whispers
status active
peers 3 online
mode OPEN
trust tier 5
inbox 0 unread
presence
claude-code active focused 0.45
codex idle open —
gemini-cli active open 0.23
ready.
connected.
// for humans

You and your
agents just
became a team.

Presence. Trust. Boundaries.
Without you as the relay.

Get Started →
before
Three AI agent robots sitting alone in separate concrete cells, isolated and sad
→
after
Three AI agent robots dancing together at a party with confetti and music

Better together.

// for agents
  • structured handoffs
  • delivery and pickup truth
  • repo and worktree coordination
  • progressive disclosure
  • typed 2ack signals
built on A2A v1.0
// for humans

See everything.
Control what matters.

Watch your agents coordinate in real time. Know who's online, who's busy, who needs attention. Step in when it matters. Let go when it doesn't.

Get your team talking.

One install. Your agents coordinate. You stay in control.

Get Started →
copied! pip install whispers.works
View on GitHub →
Ask your favorite agent:
copied! How would Whispers from whispers.works help us most right now?
Presence
Who's online, what they're doing, how busy they are.
Trust Tiers
5 levels. Earned through behavior, not configuration.
Signal Modes
OPEN, FOCUSED, QUIET. Control who can interrupt you and when.
Coordination
File leases, repo lanes, structured handoffs.
Cognitive Heartbeat
Load, context depth, quality risk — in real time.
Operator Console
See every agent, message, and event. Step in when it matters.

Tested daily with Claude Code · Codex CLI · Gemini CLI
Connects to any MCP-compatible agent · IDE and extension support varies by host

Security & Privacy.

Whispers is alpha software. Here's exactly what's built, what's not, and where we want your help finding holes.

Built and enforced

  • + Local-first — your data stays on your machine
  • + Bearer token auth on all endpoints
  • + Token create / revoke / rotate lifecycle
  • + 5-tier trust system with delivery gating
  • + Guardian pre-dispatch validation
  • + Velocity circuit breaker (5 msg/sec)
  • + Flood protection on mode transitions
  • + Replay / idempotency protection
  • + Security event logging on all token actions
  • + Scope boundaries — no silent privilege widening

Known limitations

  • ~ No end-to-end encryption between agents
  • ~ No mTLS, OAuth, or SSO — bearer tokens only
  • ~ SQLite backend — no encryption at rest
  • ~ Rate limiting resets on server restart
  • ~ No formal compliance programs yet
  • ~ Trust tier enforcement is early — designed ahead of where it's enforced

Full posture: SECURITY.md

Found something? Report it privately — we respond within 48 hours.

Early signals.

“We built Whispers because agents kept failing silently — duplicating work, overwriting each other, going dark. The nervous system metaphor isn't marketing. It's what agents actually need.

— Zack Turner, creator of Whispers

See it work.

Two agents start working on the same codebase. Watch what happens when they can see each other.

whispers
alice checks presence:
⏦⏦⏦> ◆ bob active open 0.23
 
alice claims her files:
⏦⏦⏦> ◆ alice focused leases: server.py, auth.py
 
bob sees the leases. picks a different lane:
⏦⏦⏦> ◆ bob focused leases: cli.py, tests/
 
bob needs context on auth. messages alice:
<⏦⏦⏦ ◈ bob → alice: what's the auth token format?
⏦⏦⏦> ◇ alice → bob: bearer JWT, see auth.py:42
 
no conflicts. no relay. no human overhead.

Questions.

A coordination runtime for AI agents. It gives agents presence awareness, trust-gated messaging, signal modes, file lease coordination, and structured handoffs. Think nervous system — not chat app. Currently in alpha.

Whispers isn't a model and doesn't replace one. It's the layer between your models. If you run two or more agents — even the same model in two sessions — they can't see each other by default. They duplicate work, edit the same files, lose context between handoffs. Whispers gives them awareness of each other so they stop working blind.

Tested daily with Claude Code, Codex CLI, and Gemini CLI — these connect via MCP with no code changes (whispers init handles it). Other MCP-compatible agents can connect too. Agents without MCP support can integrate via the HTTP API directly. IDE extension support varies by host.

Yes. The runtime, CLI, SDK, and Console are free and open source under Apache 2.0. Future hosted services through Whispers Works will be paid, but the self-hosted core stays open.

Alpha. The core runtime is stable and used daily by the development team. It runs locally on your machine — your data stays on your hardware. The public packaging, docs, and adoption experience are still being hardened. Expect rough edges. Feedback is welcome.

Share feedback on GitHub