Website profiles · Technology insights · Alternatives

whisper-api.com

Fast & accurate audio and video transcription API powered by OpenAI Whisper. Start free with 5 credits. 98+ languages, up to 10GB files, results in minutes.

Paid content
Visit website
Profile views 1 Outbound visits 0 Normal
WhisperAPI Full homepage screenshot

At a glance

Category
Development
Language
English
Paid-content signal
Paid contentObserved
Registered
2025
Hosting
CloudflareInferred
HTTPS certificate trusted
PassedObserved
Last updated

Website review

This review may include AI-generated content and is not individually verified. Domain, certificate and other facts come from the observed data on this page.

What is WhisperAPI?

WhisperAPI is a transcription service that turns audio and video into text using OpenAI's Whisper speech-recognition models. You can use it two ways: through a developer API that accepts file uploads or remote URLs, or through a no-code dashboard with drag-and-drop uploads and progress tracking. It supports 98+ languages, files up to 10GB, and output in JSON, plain text, VTT, DOCX, and PDF. It is aimed at developers building transcription into a pipeline, and at non-developers who just need transcripts without writing code. Pricing is pay-as-you-go, with 5 free credits to start, and uploaded files auto-delete after 24 hours.

Who it fits

  • Developers: the API lets you pick a Whisper model size (speed vs. accuracy), set parameters like language and output format, and submit files directly or by URL. A curl example on the site shows the basic call pattern.
  • Teams without engineers: the dashboard covers the same core job — upload, wait, download — without any integration work.
  • Anyone with long recordings: no minute limits and 10GB uploads suit interviews, meetings, podcasts, or lecture archives.

Trade-offs to weigh

  • Speed vs. accuracy is your choice: larger Whisper models tend to be more accurate but slower; the API exposes that as a model-size setting, so you decide per job.
  • Self-hosting vs. managed: running Whisper yourself avoids per-use fees but means handling GPUs, scaling, and maintenance. A managed API trades that control for convenience.
  • Privacy: automatic 24-hour deletion is good for sensitive material, but if you need retention or a compliance guarantee, confirm the terms before uploading.

Practical next step

If you are evaluating it for a project, start with the free credits and run two tests: one short, clean recording to check format output (SRT or VTT for subtitles, JSON for downstream processing), and one noisy or accented recording to judge accuracy at your chosen model size. That tells you quickly whether the speed/accuracy balance matches your use case. For comparison, OpenAI's own API is documented at OpenAI Platform, and alternatives like Deepgram and AssemblyAI take different approaches to the same problem.

How does WhisperAPI's pay-as-you-go pricing and free credits work?

WhisperAPI charges by usage rather than by a subscription tier. You buy credits and spend them on transcription jobs, and the site states there are no hidden fees. New users get 5 free transcription credits to test the API with no credit card required, which is enough to run a few short files through the pipeline before committing to a purchase. Payments are handled through Paddle, and the pricing page is where current credit rates live.

What the free credits are for

Treat the 5 free credits as a technical trial, not a production budget. The practical move is to spend them on one representative file from your real workload — a noisy recording, an accented speaker, a long interview — and check the output against your own quality bar. Because the platform supports multiple output formats, you can test whether its JSON, SRT, VTT, DOCX or PDF exports slot into your existing workflow before you pay.

How pay-as-you-go changes your decisions

  • Cost scales with volume, not seats. A team of five processing a little audio pays less than one person processing a lot. That suits spiky workloads such as podcast seasons, research interviews or periodic batch uploads.
  • No minute limits and files up to 10GB mean you are not forced to split long recordings to fit a plan ceiling.
  • Model choice is a cost lever. The API lets you pick between Whisper models for speed versus accuracy, so routine clean audio can go through a faster, cheaper model while difficult material gets the more accurate one.
  • Files auto-delete after 24 hours, which matters if your content is confidential — but it also means you must download results promptly.

A concrete scenario

Suppose you run a small media operation publishing two hour-long interviews a week. You would upload each file once, request SRT for captions and plain text for the article, and let the dashboard track progress. Your monthly spend tracks your publishing schedule, and a quiet month costs almost nothing. The trade-off is that you manage your own credit balance instead of paying a flat fee for unlimited use, so heavy, unpredictable volume needs a quick estimate against the pricing page first.

Next step

Run your free credits against one hard file, then compare the credit cost of that job with what a subscription-based transcription service would charge for the same volume. If your usage is steady and high, a flat plan may win; if it fluctuates, this model usually costs less.

How can I integrate WhisperAPI into my application using the API?

Integrating WhisperAPI means sending an audio or video file (or a remote URL) to a single transcription endpoint and receiving the transcript back in your chosen format. The page presents it as one HTTP call: a multipart POST to https://api.whisper-api.com/transcribe with your file, an X-API-Key header, and optional parameters such as language, format, and model_size. That makes it a good fit for a backend job you can wrap in your own queue, rather than something you'd call directly from a browser, since your API key shouldn't be exposed client-side.

What the request looks like

The documented example sends:

  • file — the audio or video file, uploaded directly, or a remote URL instead
  • language — e.g. en, to skip auto-detection
  • format — e.g. srt, or one of the other export options shown on the site (JSON, TEXT, VTT, DOCX, PDF)
  • model_size — e.g. large-v2, trading speed against accuracy
  • X-API-Key — your key

A minimal Python call follows the same shape:

import requests

with open("interview.mp4", "rb") as f:
    r = requests.post(
        "https://api.whisper-api.com/transcribe",
        headers={"X-API-Key": "YOUR_API_KEY"},
        files={"file": f},
        data={"language": "en", "format": "srt", "model_size": "large-v2"},
        timeout=600,
    )
r.raise_for_status()
print(r.text)

Practical decisions before you build

Pick your format by what consumes it. If you're storing transcripts for search, JSON or TEXT is easiest to index. If you're burning subtitles into a video, request SRT or VTT. DOCX and PDF suit human review and delivery to clients.

Choose the model per job, not per app. A podcast archive where accuracy matters justifies the larger model; a rough first pass over user-uploaded clips may not. Because the model is a request parameter, you can route cheap jobs and important jobs differently without changing your integration.

Plan for long files. The site advertises handling files up to 10GB with no minute limits, so your own timeout, retry and storage logic is more likely to be the bottleneck than the API. Set generous client timeouts and treat transcription as an asynchronous job from your users' point of view.

Mind the 24-hour deletion. Files auto-delete after 24 hours, so if you need the transcript or the original media long-term, download and store the result yourself as soon as the job completes.

A concrete integration pattern

For a meeting-notes app: the client uploads audio to your server, your server forwards it to WhisperAPI with format=json, stores the transcript against the meeting record, then runs summarization on the text. Users see a "processing" state for a minute or two rather than a spinner blocking the UI. If you also want a subtitle track, request vtt in the same job or a second call.

When to use the dashboard instead

The site also offers a no-code dashboard with drag-and-drop upload, progress display, multi-format downloads and a list of past transcriptions. If your need is occasional one-off transcripts rather than a pipeline, that path avoids writing and maintaining any code. Use the API when transcription is a step inside a product; use the dashboard when it's a task you do yourself.

Next step

Create your key and run one test call with a short file in both large-v2 and a smaller model, comparing output quality against the latency you actually observe. That single experiment tells you more about which default to ship than any accuracy claim. For endpoint details and parameter names, check the API documentation linked from WhisperAPI; for the underlying model's behaviour and language coverage, the OpenAI Whisper documentation is the reference point.

Which Whisper model should I choose for the best balance of speed and accuracy?

For most transcription jobs, Whisper Large-v2 is the model to start with. WhisperAPI's own demo transcript was generated with Large-v2, and the page positions it as the accuracy-focused option while letting you switch models for speed. The practical rule: use a smaller model when you need fast turnaround on clear audio, and Large-v2 when accuracy matters more than latency.

How to decide

Your situation Sensible choice Why
Clean single-speaker audio, quick draft needed Smaller/faster Whisper model Lower latency, good enough for gist or search indexing
Interviews, podcasts, legal or medical notes Large-v2 Fewer word errors, better handling of accents and crosstalk
Noisy field recordings, multiple speakers Large-v2, then review Highest accuracy tier is the safest baseline before human editing
High-volume batch where cost or time dominates Faster model, spot-check with Large-v2 Trades some accuracy for throughput

The page offers model selection through the API, including a model_size parameter, so you can test the same file with two settings rather than committing blindly.

A practical test

Take one 10-minute file that represents your worst realistic audio — background noise, an accent, technical vocabulary — and run it through both a fast model and Large-v2. Compare the outputs against a manual transcript of a two-minute section. If the fast model's error rate is acceptable for your downstream use (subtitles, notes, search), keep it; if not, Large-v2 is the safer default. WhisperAPI's free starting credits make this comparison cheap to run.

For general background on the model family, see OpenAI.

Can I transcribe audio and video files without writing any code?

Yes. WhisperAPI provides a browser-based dashboard that transcribes audio and video files without any programming. Developers can use the API instead, but it is not required for basic transcription.

What the no-code route looks like

The dashboard is described as a drag-and-drop interface with real-time progress, downloads in multiple formats, and a single place to manage past transcriptions. You upload a file, wait for processing, then download the result. No setup, keys, or scripts are needed for that path.

When the API still makes sense

The API is aimed at developers who want control over the transcription pipeline: choosing Whisper model sizes for speed versus accuracy, submitting files by direct upload or remote URL, tuning model parameters, and sending both audio and video through the same endpoint. If you need transcription wired into another app or run at volume, the API is the relevant option.

Practical comparison

Route Best for Trade-off
No-code dashboard One-off files, occasional transcription, non-developers Manual per-file work; less automation
API Repeated jobs, integration into apps, parameter control Requires coding and key management

A concrete scenario

A podcast editor with a single interview recording can open the dashboard, drag in the file, and download a text or subtitle format. A product team building automatic captions into its own app would use the API instead, because that workflow needs to run inside existing software rather than through manual uploads.

Decision criterion

Choose the dashboard if you only need transcripts occasionally and prefer not to touch code. Choose the API if transcription must happen automatically, repeatedly, or inside another product.

A useful next step: start with the free credits to test one file in the dashboard, then decide whether your volume or workflow justifies moving to the API. WhisperAPI states files auto-delete after 24 hours, which is worth noting if your content is sensitive.

How does WhisperAPI handle the privacy and security of my uploaded files?

WhisperAPI states that uploaded files are automatically deleted after 24 hours, and that this applies to both files you upload directly and files you point it to via remote URL. That is the core privacy commitment described on the site: a short, fixed retention window rather than indefinite storage.

What the site says

  • Auto-deletion: "Files auto-delete after 24 hours."
  • API access: Requests are authenticated with an X-API-Key header, as shown in the sample curl command.
  • Payment handling: Checkout is processed through Paddle, so card details are handled by the payment provider rather than by WhisperAPI directly.
  • Both input types covered: The 24-hour deletion claim is presented alongside the API's support for direct file uploads and remote URLs.

What this means in practice

For a developer transcribing customer calls, a journalist working with sensitive interviews, or a team processing internal meeting recordings, a 24-hour deletion window is usually acceptable — but it is a retention policy, not a confidentiality guarantee. The transcription itself is produced by OpenAI's Whisper model, so audio is processed by that underlying engine. If your material is subject to a strict data-processing agreement, verify the full chain before uploading.

Practical steps worth taking on your side:

  • Don't rely on deletion as your only control. Keep your own copy and treat the service as transient processing.
  • Protect your API key. A leaked key lets someone else submit files under your account; rotate keys if one is exposed.
  • Use remote URLs carefully. A signed, short-lived URL limits exposure compared with a permanently public link.
  • Check the retention claim against your compliance needs. 24 hours is short, but confirm it matches any policy you must follow.

A concrete scenario

You run a small podcast network and want transcripts for a client's unreleased episode. You upload the audio, get the transcript in minutes, download it as VTT or DOCX, and the source file is gone within a day. The transcript itself, however, lives wherever you save it — so your own storage, access controls and sharing habits are the part you actually manage.

If privacy is the deciding factor, compare the stated retention window and authentication model against alternatives such as OpenAI or Deepgram before committing.

Related questions

More questions →
What Is OpenAPI-Generated API Documentation and How Does It Work?

OpenAPI-generated API documentation is reference documentation that is produced automatically from an OpenAPI description file rather than written by hand. You write (or generate) a machine-readable specification of your API — endpoints, parameters, request bodies, responses, schemas, and auth — and a documentation tool reads that file and renders a browsable, often interactive reference site. The spec becomes the single source of truth; the docs become a build artifact.

This differs from manually written docs in one fundamental way: with hand-written docs, the prose is the source of truth and the API is described separately. With spec-driven docs, the API description is the source, and every page, table, and code sample is derived from it.

How the workflow actually runs

A typical spec-driven documentation pipeline has five stages:

  1. Author or generate the spec. You either write an OpenAPI document by hand (YAML or JSON), or generate it from code annotations, framework metadata, or a design-first editor. Design-first means the spec is written before implementation; code-first means it is extracted from existing code.
  2. Validate and lint. The spec is checked against the OpenAPI schema and against style rules — consistent naming, required descriptions, no undocumented 4xx responses, no orphaned schemas.
  3. Bundle and transform. Multi-file specs are combined, $ref pointers are resolved, and the document is optionally split into per-tag or per-version outputs.
  4. Render. A documentation tool converts the spec into HTML: an endpoint list, a sidebar of operations, parameter tables, response schemas, and a "try it" console.
  5. Publish and version. The rendered site is deployed, and each API version gets its own snapshot so consumers can read docs matching the version they call.

Steps 2 through 5 are usually automated in CI. If the spec fails validation, the docs build fails — which is the point.

Spec-driven vs. hand-written documentation

Dimension OpenAPI-generated Hand-written
Source of truth The spec file The prose
Consistency with the API High, if the spec is accurate Drifts as the API changes
Effort per endpoint Low after setup Repeated for every endpoint
Narrative and tutorials Weak; needs separate pages Strong
Code samples Generated per language from schemas Written and maintained manually
Customization Bounded by the tool's templates Unlimited
Failure mode Accurate spec, poor docs, or stale spec Beautiful docs that describe an API that no longer exists

The practical conclusion most teams reach: generate the reference, write the guides. Reference material is repetitive and mechanical, which is exactly what generation is good at. Conceptual explanations, migration notes, and tutorials carry judgment that a spec cannot express.

What you get out of the box

Generated reference pages commonly include:

  • An operation list grouped by tag or path, with HTTP method and path.
  • Parameter tables showing name, location (path, query, header, cookie), type, required flag, and description.
  • Request and response schemas rendered as expandable trees, including nested objects and arrays.
  • Authentication details pulled from the securitySchemes section.
  • Interactive request consoles that let a reader send a real call from the browser.
  • Generated code samples in several languages, derived from the same schemas.
  • Multiple output formats, such as a static site, a single HTML file, or a mock server.

Because all of these come from one document, changing a field name in the spec updates the parameter table, the schema tree, and every code sample at once.

Where spec-driven documentation breaks down

Generation is not free. The trade-offs are real:

Spec quality becomes documentation quality. A field with no description produces a table row with an empty cell. A vague summary produces a vague heading. Tools can enforce presence of descriptions via linting, but they cannot enforce that the description is useful.

Customization has limits. If you need a page that does not map to an OpenAPI concept — a conceptual overview, a pricing explanation, a comparison of two endpoints — you write it outside the generator and link to it.

Not everything is expressible. Webhooks, streaming responses, long-polling behavior, and complex multi-step flows are awkward or impossible to describe fully in OpenAPI. Those need prose.

The spec can go stale. If the spec is maintained separately from the implementation, it drifts just like hand-written docs. The mitigation is to generate the spec from code, or to test the implementation against the spec in CI.

Interactive consoles need care. A "try it" button that hits a production API with real credentials is a security and rate-limit problem. Point it at a sandbox, or disable it.

Deciding whether to adopt it

Adopt spec-driven reference documentation if most of these are true:

  • Your API has more than a handful of endpoints, or changes frequently.
  • You ship client SDKs or code samples in more than one language.
  • Multiple teams consume the API and need a consistent, always-current reference.
  • You already have, or are willing to maintain, an OpenAPI description.

Stay with hand-written docs, or a hybrid, if:

  • Your API is small and stable, and the reference fits on one page.
  • Your documentation is mostly conceptual and contains little endpoint-level detail.
  • You cannot commit to keeping the spec in sync with the implementation.

A reasonable middle path: generate the reference from the spec, and hand-write the getting-started guide, authentication walkthrough, and error-handling page. Link the two directions so readers can move from concept to endpoint and back.

A minimal starting checklist

  1. Produce one valid OpenAPI document for a single API version.
  2. Add a linter with rules for descriptions, operation IDs, and error responses.
  3. Wire the docs build into CI so a failing spec fails the build.
  4. Render the reference and review it as a reader, not as the author.
  5. Write the two or three conceptual pages the generator cannot produce.
  6. Version the published docs alongside the API version.

The core idea is simple: describe the API once, in a format both machines and humans can read, and let the reference documentation fall out of that description. Everything else — tooling, hosting, interactivity — is a detail on top of that decision.

Who Is WhisperAPI Designed For?

WhisperAPI is a hosted transcription service built on OpenAI's Whisper models, and it targets two distinct groups: developers who want to integrate speech-to-text into their own applications through a REST API, and non-technical users who just want to drag a file into a dashboard and get a transcript back. If you need to transcribe meetings, videos, podcasts, or interviews without running your own Whisper infrastructure, it fits. If you need on-premise processing or full control over the model weights, it does not.

The two audiences it splits its product around

The site's own structure makes the split explicit — it presents a "Robust API for Developers" section and a "No-Code Dashboard" section as parallel offerings.

For developers

The API is the primary product. According to the site, you get:

  • A choice between different Whisper models to trade speed against accuracy
  • Support for both direct file uploads and remote URLs
  • Model parameter tuning for your specific use case
  • Video and audio handled through the same endpoint

The documented request shape is a curl call to https://api.whisper-api.com/transcribe with a file, a language, an output format, a model size, and an X-API-Key header. That means integration is a single HTTP call — no SDK required, no queue to manage, no GPU to provision.

For non-developers

The dashboard covers the same job without code: drag-and-drop upload, real-time transcription progress, download in multiple formats, and a single place to manage past transcriptions. If your workflow is "I have a recording and I want text," this is the path.

What kinds of work it fits

The product description points at audio and video transcription generally, and the FAQ/use-case framing on the site centers on the common cases: meetings, videos, podcasts, and interviews. The concrete limits that matter for those jobs:

Constraint Value from the site
File size Up to 10GB uploads
Duration No minute limits
Languages 98+
Output formats JSON, TEXT, VTT, DOCX, PDF, SRT
File retention Auto-delete after 24 hours
Speed claim 10 minutes of audio in under a minute

The 10GB ceiling and the absence of a minute cap are the two numbers that decide most "can I use this" questions. A two-hour interview or a full-length podcast episode is well inside both.

Who should look elsewhere

  • Teams that need data to stay on their own infrastructure. Files auto-delete after 24 hours, but they still leave your environment. If your recordings can't be sent to a third party at all, a self-hosted Whisper setup is the alternative.
  • Anyone who needs a specific Whisper variant or custom fine-tune. The API exposes model size selection, not arbitrary model hosting.
  • High-volume pipelines where per-minute cost dominates. The site advertises pay-as-you-go pricing with no hidden fees, but the actual rate isn't in the material here — check the pricing page before committing at scale.

How to decide in one step

Ask whether you want to write code. If yes, the API is the fit and the curl example above is enough to test it. If no, the dashboard is the fit. Either way, the free starting point is 5 transcription credits with no credit card required, which is enough to run a real file through and judge accuracy on your own audio before paying anything.

One caveat worth stating plainly: the accuracy figure on the site (99.8%) is a vendor claim, not an independent benchmark. Test it against your own recordings — accents, crosstalk, and background noise are where transcription services diverge most.

What Can You Actually Do With a Free Hosted REST API Like ReqRes?

A free hosted REST API like ReqRes gives you a real HTTP endpoint you can call immediately—no signup, no local server, no database setup. You get predictable JSON responses for users, resources, login, and registration, which makes it useful for front-end demos, integration tests, learning HTTP clients, and prototyping. What it is not is a production backend for your app: the data is shared, resets periodically, and you don't control the schema. If you need persistent, private data with auth and logs, that's where an account-based backend or a commercial licence comes in.

What "free REST API for testing and prototyping" actually means

The phrase sounds vague, so it helps to separate two things people often conflate:

  • A mock/sample API — a public, hosted service with fixed or semi-fixed endpoints that return realistic-looking JSON. You don't own the data. It exists so you can point code at a URL and get a response.
  • A real backend you configure — a service where you define collections, schemas, authentication, and logging, and where your data persists and belongs to you.

ReqRes's landing page describes both: a free REST API for testing and prototyping with real responses and no signup, plus an option to build your own backend with collections, auth, and logs at app.reqres.in. Those are different products with different trade-offs. The free public endpoints are the "point and go" part; the account-based backend is the "own your data" part.

What you can do with the no-signup public endpoints

1. Front-end demos without a backend

If you're building a UI and need data to render, you can fetch from a public endpoint instead of hardcoding arrays. This keeps your demo code closer to real fetch logic:

async function loadUsers(page = 1) {
  const res = await fetch(`https://reqres.in/api/users?page=${page}`);
  if (!res.ok) throw new Error(`HTTP ${res.status}`);
  const { data, total, page: current } = await res.json();
  return { users: data, total, page: current };
}

You get pagination fields, a data array, and support metadata—enough to build list views, loading states, and empty states.

2. Integration and contract tests

You can assert that your HTTP layer handles status codes, headers, and JSON shapes correctly. Typical checks:

  • GET /api/users/2 returns 200 with a data object.
  • GET /api/users/23 returns 404 (a non-existent user).
  • POST /api/login with valid credentials returns a token; with missing fields returns 400.

This is useful for testing your client wrapper, retry logic, error handling, and serialization—without spinning up your own server.

3. Learning HTTP clients and tooling

If you're new to fetch, Axios, curl, Postman, or HTTPie, a hosted API is a low-friction target. You can practice:

  • Sending query parameters (?page=2, ?delay=3).
  • Setting headers and reading response headers.
  • Handling POST, PUT, PATCH, DELETE.
  • Observing status codes for success and failure.

4. Deliberate failure and latency testing

Endpoints that return 404 on purpose, or that accept a delay parameter, let you test how your app behaves when things go wrong or slow down. That's hard to do reliably against a happy-path local mock.

What the public endpoints are not good for

Use case Public sample endpoints Account-based backend
Persistent, private data No — shared and reset Yes
Custom schema/collections No Yes
Authentication you control Limited (demo login) Yes
Request logs and debugging No Yes
Production traffic Not intended Depends on plan/licence
Team collaboration No Yes

The key limitation: you don't own the data, and other people are hitting the same endpoints. Treat responses as illustrative, not authoritative.

When you'd move to an account-based backend

Consider app.reqres.in (collections, auth, logs) when any of these are true:

  • You need your own collections and fields, not the fixed demo schema.
  • You need data to persist between sessions and belong only to you.
  • You need real authentication flows you can rely on in a demo or internal tool.
  • You need request logs to debug what your client actually sent.
  • You're working with a team and need shared, stable endpoints.

The trade-off is setup and, eventually, cost. The public endpoints require none; the backend requires an account and configuration.

Where pricing and licensing become relevant

The site signals a commercial licence and an upgrade path (with Stripe as the payment platform), but specific prices, plan tiers, and limits aren't stated here—so don't assume numbers. What you can reason about:

  • Prototyping and learning → free public endpoints are usually enough.
  • Internal tools, demos for clients, or anything you don't want reset → an account-based backend is the natural next step.
  • Production or commercial use → check the licence terms and any paid plan, because "free for testing" and "free for commercial production" are not the same thing.

Before committing, read the current terms on the site rather than relying on secondhand summaries, since pricing and licence scope change.

A quick decision checklist

  1. Do you need data that persists and is private? If yes → account-based backend.
  2. Do you need a custom schema? If yes → account-based backend.
  3. Are you only testing HTTP behavior, UI rendering, or learning a client? If yes → free public endpoints.
  4. Will this touch real users or revenue? If yes → review the licence and any paid plan first.
  5. Do you need logs and team access? If yes → account-based backend.

If you answer "no" to 1, 2, 4, and 5, the free hosted API is likely all you need. If you answer "yes" to any of them, plan for the account-based path.

How WhisperAPI Handles Privacy and File Retention

WhisperAPI's stated privacy policy is short and specific: uploaded files auto-delete after 24 hours. That single retention rule is the main privacy guarantee the site makes, and it's the detail to check against your own requirements before you send sensitive audio or video. If your content can't tolerate being stored on a third-party server for up to a day, this policy won't be enough on its own — you'd need to confirm the details with the provider directly.

What the retention policy actually says

The site lists "Privacy First" as a feature with one supporting line: files auto-delete after 24 hours. There is no separate privacy page, data-processing agreement, or encryption detail referenced in the available page content, so the 24-hour auto-deletion is the only retention commitment you can rely on from the public materials.

What that means in practice:

  • Uploaded files are not kept permanently. The deletion is automatic, not something you have to request.
  • The window is up to 24 hours. A file may be removed sooner, but the stated maximum is one day.
  • Transcripts are a separate question. The policy describes file deletion; it doesn't state how long generated transcripts persist in your account or dashboard. Treat transcript retention as unconfirmed unless the provider says otherwise.

Why the 24-hour window matters for sensitive content

A short, automatic retention period is the practical difference between a service you can use for confidential material and one you can't. For example, if you're transcribing an internal team meeting, a customer call, or a research interview, the exposure is bounded: the file exists on the provider's systems for at most a day, then it's gone without any action from you.

That said, "auto-deletes after 24 hours" is a retention statement, not a full security statement. The available materials don't describe encryption at rest or in transit, access controls, or where files are stored. If your use case requires those guarantees, ask the provider before uploading.

How to decide whether it fits your use case

Your situation Does the stated policy cover it?
General business audio, low sensitivity Yes — 24-hour auto-deletion is a reasonable baseline
Content you'd rather not store long-term anywhere Likely yes, but confirm transcript retention too
Regulated data (health, legal, financial) with strict rules Not confirmed — the public materials don't address compliance
Content that must never leave your infrastructure No — this is a hosted API, so files are uploaded to the provider

Practical steps before you upload

  1. Check what you're sending. If the file contains anything you wouldn't want stored for a day on someone else's server, resolve that first.
  2. Confirm the retention terms in writing if the 24-hour rule is load-bearing for your decision — the site states it as a feature, but a direct confirmation is stronger.
  3. Ask about transcripts, not just files. The stated policy covers uploaded files; clarify how long the resulting transcripts are kept.
  4. Use the free credits to test with non-sensitive material first, so you can see how the dashboard handles your files before committing real content.

The bottom line: WhisperAPI's public privacy position rests entirely on automatic 24-hour file deletion. That's a clear, useful commitment for everyday transcription, but it isn't a substitute for a full data-handling agreement if your content is regulated or highly confidential.

What file formats, languages, and output options does WhisperAPI support?

WhisperAPI accepts both audio and video files—either uploaded directly or passed as remote URLs—transcribes them in 98+ languages, and lets you download the result as JSON, TEXT, VTT, DOCX, or PDF. You can also pick between different Whisper model sizes to trade speed against accuracy. The service is built on OpenAI Whisper and offers both a REST API and a no-code dashboard, so the same capabilities are available whether you integrate programmatically or work through the browser.

Input: what you can send

WhisperAPI handles two input methods:

  • Direct file uploads — send a local audio or video file in the request.
  • Remote URLs — point the API at a file hosted elsewhere instead of uploading it.

Both audio and video files are processed through the same API, so you don't need separate endpoints or pipelines for each media type. The site states file uploads are supported up to 10GB, with no minute limits on transcription duration.

Languages

WhisperAPI supports 98+ languages, described as covering all major languages with high accuracy. Because it runs on OpenAI Whisper, language coverage follows that engine's multilingual capability. You can also pass a language parameter in the API request (for example, language=en) to specify the expected language rather than relying on detection.

Output formats

Transcripts can be generated, previewed, and downloaded in multiple formats. The formats shown on the site are:

Format Typical use
JSON Structured data for programmatic processing
TEXT Plain transcript for reading or editing
VTT Web subtitles/captions for video players
DOCX Editable document
PDF Shareable, print-ready document

In the API, the output format is set with the format parameter (for example, format=srt in the documented example). The dashboard offers the same download options through its interface.

Choosing a model: speed vs accuracy

WhisperAPI lets you select between different Whisper models, which is the main lever for balancing turnaround time against transcription quality. The site's example uses model_size=large-v2, and its sample transcript was generated with the Whisper Large-v2 model. Larger models generally favor accuracy; smaller ones favor speed. The site advertises industry-leading 99.8% accuracy across audio types and results "in minutes, not hours."

Using the API

The documented request pattern is a curl call with form fields for the file, language, format, and model size, plus an API key header:

curl \
  -F "[email protected]" \
  -F "language=en" \
  -F "format=srt" \
  -F "model_size=large-v2" \
  -H "X-API-Key: YOUR_API_KEY" \
  https://api.whisper-api.com/transcribe
  • Input: the file (or a remote URL), plus optional language, format, and model_size fields.
  • Action: the API sends the media to the selected Whisper model for transcription.
  • Expected result: a transcript returned in your chosen format, downloadable or consumable programmatically.

The site also notes you can fine-tune model parameters for specific use cases, and that files auto-delete after 24 hours.

No-code alternative

If you don't want to write code, the dashboard provides a drag-and-drop interface with real-time transcription progress, multi-format downloads, and a single place to manage all transcriptions. The output formats and language support are the same as the API's.

Getting started

The site advertises a free start with 5 transcription credits and states no credit card is required to begin. Beyond that, pricing is pay-as-you-go, with Paddle listed as the payment platform. For current rates and credit details, check the pricing page directly, since specific prices aren't stated in the material summarized here.

Website Overview

An advisory match combined with missing browser safeguards may increase exposure if the affected component is active. Deployment-specific verification and remediation deserve priority. Identifiable technologies and additional version or configuration signals make the service easier to fingerprint, which may help targeted scanners narrow their checks.

Domain and Registration

Transfer-protection status is present, helping reduce the risk of unauthorized domain transfers. The domain has about 1 years of registration history; its current configuration provides more context than age alone. The registrar is NameCheap, Inc., a widely used domain service provider. The domain uses the common .com extension, which is not an independent safety signal.

DNS and Email

Nameservers are provided by Cloudflare, indicating managed DNS hosting. MX records point to the Namecheap Private Email email service. No CNAME was found; the observed records resolve directly to addresses. SPF and DMARC are configured. DKIM status is unknown. TXT records include verification markers for Google. Such markers may also remain after a service stops being used.

TLS and Certificates

The public key uses EC with 256 bits. The server supplied a complete certificate chain. No organization name is present in the certificate; the available fields are consistent with domain validation. The certificate was issued within the Google Trust Services cloud or CDN ecosystem. The certificate's total validity is about 90 days, consistent with a short renewal cycle.

HTTP and Browser Security

The checked browser-security headers were not detected, leaving fewer explicit browser-side safeguards. No X-Powered-By header was found, reducing one common source of backend fingerprinting information. The cf-ray response header indicates a CDN or caching proxy in the delivery path. No obvious internal addresses or debug information were found in the headers. The Server header identifies cloudflare without an exact version.

Technology Stack Analysis

The public page identifies Astro 5.13.2, Cloudflare, with exact versions exposed for 1 technologies. These details can narrow vulnerability checks, although exposure alone is not a vulnerability. The advisory source OSV places Astro 5.13.2 in the affected range of GHSA-26w7-cxv4-gfx2, GHSA-2pvr-wf23-7pc7, GHSA-376h-93r7-7g6f, GHSA-4g3v-8h47-v7g6, GHSA-5ff5-9fcw-vg88 等 10 项. Verify the deployed version and relevant configuration before drawing conclusions about exploitability. Updating affected components should be a priority.

Search and Social Sharing

The Generator tag identifies Astro v5.13.2, making the publishing system easier to fingerprint. Twitter Card metadata is configured. JSON-LD includes Organization data, helping describe the organization as an entity. The title has 60 characters, within a common display range. A meta description is present, with 156 characters.

Hosting and Email

DNSCloudflare
HostingCloudflare
EmailNamecheap Private Email
Approximate IP geolocation (inferred; a CDN or proxy may differ from the origin server) Location unknown Inferred 104.21.76.215

Registration details

RDAP / WHOIS

RegistrarNameCheap, Inc.
Registered2025-02-09
Expires2027-02-09
Domain statusclient transfer prohibited
Nameserversgemma.ns.cloudflare.com、pablo.ns.cloudflare.com
DNSSECunsigned

DNS records

DNS

TypeNameValueTTLPriority
Awhisper-api.com104.21.76.215300—
Awhisper-api.com172.67.201.65300—
AAAAwhisper-api.com2606:4700:3033::ac43:c941300—
AAAAwhisper-api.com2606:4700:3036::6815:4cd7300—
MXwhisper-api.commx1.privateemail.com30010
MXwhisper-api.commx2.privateemail.com30010
NSwhisper-api.comgemma.ns.cloudflare.com86400—
NSwhisper-api.compablo.ns.cloudflare.com86400—
TXTwhisper-api.comahrefs-site-verification_a93cafe2de1c4162217764b2d9e7fee9515c98dd58fe52e3700b8b93f6c17e93300—
TXTwhisper-api.comgoogle-site-verification=k3LVYLvsnHUShRUhJg3sVN4esxGiJYF3-Jb5nWKbQO0300—
TXTwhisper-api.comv=spf1 include:spf.privateemail.com ~all300—
DMARC_dmarc.whisper-api.comv=DMARC1; p=none; rua=mailto:[email protected]; ruf=mailto:[email protected]; fo=1300—

TLS and certificates

TLS / SSL

AssessmentNormal configuration
Supported protocolsTLSv1.2、TLSv1.3
Negotiated protocolTLSv1.3
Certificate subjectwhisper-api.com
IssuerGoogle Trust Services
Valid until2026-12-29T00:00 · Remaining when checked: 77 days
Verification detailsCertificate trust: Passed · Hostname match: Passed

HTTP response headers

HTTP

HeaderValue
content-typetext/html
servercloudflare

Identified technologies

Astro 5.13.2Cloudflare

Pages, Search and Sharing

Meta descriptionFast & accurate audio and video transcription API powered by OpenAI Whisper. Start free with 5 credits. 98+ languages, up to 10GB files, results in minutes.
Canonical URLhttps://whisper-api.com/
LanguageEnglish (default)
Twitter Cardsummary_large_image
All bots 1 allowed · 7 disallowed
  • Allow/
  • Disallow/dashboard
  • Disallow/dashboard/
  • Disallow/billing
  • Disallow/billing/
  • Disallow/login
  • Disallow/register
  • Disallow/feedback

User reviews (0)

  • No reviews yet.