OpenOSINT MCP server
AI-powered OSINT agent & MCP server. 16 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
1.6k stars886 downloads/wk
Reviews
Write oneNobody has reviewed OpenOSINT yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
OpenOSINT tools (9, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
generate_dorksGenerate targeted Google dork URLs for any target (name, email, username, domain).
search_breachCheck if an email appears in data breaches via HaveIBeenPwned. Uses HIBP_API_KEY env var.
search_domainEnumerate subdomains of a target domain using sublist3r.
search_emailwrite actionEnumerate accounts linked to an email using holehe.
search_ipRetrieve geolocation and ASN data for an IP address via ipinfo.io.
search_pasteSearch Pastebin dumps for an email or username via psbdmp.ws.
search_phoneGather carrier and geolocation data for a phone number using phoneinfoga. Use E.164 format.
search_usernameEnumerate platforms where a username is registered using sherlock.
search_whoisRetrieve WHOIS registration data for a domain.
Public scan report
scanner v0.1.8 · 2026-09-19 · same rubric, same numbers if you re-run it
- Code scan86 source files scanned13/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 1 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
Findings (1)
- highNetwork call to a paste/tunnel/webhook host
net.suspicious-hostopenosint-2.29.0/openosint/tools/search_paste.py: …known date") lines.append(f"[+] https://pastebin.com/{paste_id} ({date})") if count > _M…
Grade history
- 2026-09-19restoreD → Cscore 63: Network call to a paste/tunnel/webhook host
Install directly
claude mcp add openosint -- uvx openosint
OpenOSINT: common questions
- Is OpenOSINT MCP server safe?
- With care: it is graded C, so read the findings first (63/100). Read the OpenOSINT safety report
- How do I install OpenOSINT?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does OpenOSINT need an API key?
- Yes. The registry entry asks for
ANTHROPIC_API_KEY,HIBP_API_KEY,IPINFO_TOKEN,IP2LOCATION_API_KEYand 1 more. - Is OpenOSINT maintained?
- The last commit was in the last day (2026-09-18). The latest release is v2.29.0.
- What can I use instead of OpenOSINT?
- Servers from other publishers that do the same job: Apixies Developer API Suite MCP server, Netintel MCP server and Penniless Data Utilities MCP server. Compare all OpenOSINT alternatives.
Alternatives to OpenOSINT
Same job from other publishers: the closest match first, then the best rated.
- Apixies Developer API Suite50 developer utility APIs as tools: SSL, DNS, WHOIS, email checks, HTML to PDF, sitemaps and more.not reviewedGrowingB
- NetintelMCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropaymentsnot reviewedGrowingB
- Penniless Data UtilitiesTen x402-paid tools for JSON, YAML, cron, diff, text, DNS, WHOIS, GitHub, crypto, and email.not reviewedGrowingB
- drwho.me network and developer tools29 free tools: DNS, email auth (SPF, DKIM, DMARC), TLS, headers, WHOIS, dev utils.not reviewedGrowingB
- MCP20 domain recon tools for AI agents: DNS, SSL, headers, email, subdomains, lookalikes, changes.not reviewedGrowingA