Mmcp.market

OpenOSINT MCP server

by OpenOSINT·io.github.OpenOSINT/openosint·v2.29.0

AI-powered OSINT agent & MCP server. 16 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.

C63/100grade C
What users say
No reviews yet
Be the first
Safety scan
C63/100

full report

Adoption
Established

1.6k stars886 downloads/wk

Reviews

Write one

Nobody has reviewed OpenOSINT yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

OpenOSINT tools (9, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • generate_dorks

    Generate targeted Google dork URLs for any target (name, email, username, domain).

  • search_breach

    Check if an email appears in data breaches via HaveIBeenPwned. Uses HIBP_API_KEY env var.

  • search_domain

    Enumerate subdomains of a target domain using sublist3r.

  • search_emailwrite action

    Enumerate accounts linked to an email using holehe.

  • search_ip

    Retrieve geolocation and ASN data for an IP address via ipinfo.io.

  • search_paste

    Search Pastebin dumps for an email or username via psbdmp.ws.

  • search_phone

    Gather carrier and geolocation data for a phone number using phoneinfoga. Use E.164 format.

  • search_username

    Enumerate platforms where a username is registered using sherlock.

  • search_whois

    Retrieve WHOIS registration data for a domain.

Public scan report

scanner v0.1.8 · 2026-09-19 · same rubric, same numbers if you re-run it

1 high
  • Code scan86 source files scanned13/25
  • Live reliabilityno gateway calls yet and no remote to proben/a
  • Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10

Findings (1)

  • highNetwork call to a paste/tunnel/webhook hostnet.suspicious-host
    openosint-2.29.0/openosint/tools/search_paste.py: …known date") lines.append(f"[+] https://pastebin.com/{paste_id} ({date})") if count > _M…
Overall 63/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Grade history

  • 2026-09-19restoreDCscore 63: Network call to a paste/tunnel/webhook host

Install directly

claude mcp add openosint -- uvx openosint
Add to Cursor

OpenOSINT: common questions

Is OpenOSINT MCP server safe?
With care: it is graded C, so read the findings first (63/100). Read the OpenOSINT safety report
How do I install OpenOSINT?
It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
Does OpenOSINT need an API key?
Yes. The registry entry asks for ANTHROPIC_API_KEY, HIBP_API_KEY, IPINFO_TOKEN, IP2LOCATION_API_KEY and 1 more.
Is OpenOSINT maintained?
The last commit was in the last day (2026-09-18). The latest release is v2.29.0.
What can I use instead of OpenOSINT?
Servers from other publishers that do the same job: Apixies Developer API Suite MCP server, Netintel MCP server and Penniless Data Utilities MCP server. Compare all OpenOSINT alternatives.

Alternatives to OpenOSINT

Same job from other publishers: the closest match first, then the best rated.

All OpenOSINT alternatives →
  • Apixies Developer API Suite
    50 developer utility APIs as tools: SSL, DNS, WHOIS, email checks, HTML to PDF, sitemaps and more.
    B
  • Netintel
    MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments
    B
  • Penniless Data Utilities
    Ten x402-paid tools for JSON, YAML, cron, diff, text, DNS, WHOIS, GitHub, crypto, and email.
    B
  • drwho.me network and developer tools
    29 free tools: DNS, email auth (SPF, DKIM, DMARC), TLS, headers, WHOIS, dev utils.
    B
  • MCP
    20 domain recon tools for AI agents: DNS, SSL, headers, email, subdomains, lookalikes, changes.
    A

More from OpenOSINT