MCP.Market

Is OpenOSINT MCP server safe?

Probably. Read the findings first.

C58/100grade C

Use with care. Some checks failed or could not be verified.

What to know before installing
  • highNetwork call to a paste/tunnel/webhook host

How OpenOSINT compares

Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
58/100
higher than 13% of 915 Email servers
Tools that change things
11%
typical: 25%. Fewer write tools means less an agent can break

What its tools let an agent do: 7 read · 1 create · 1 change

Public scan report

scanner v0.1.10 · 2026-11-10 · same rubric, same numbers if you re-run it

1 high
  • Code scan31 source files scanned13/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 5 days ago15/15
  • Maintainer identitynamespace and repository owner differ4/10

Findings (1)

  • highNetwork call to a paste/tunnel/webhook hostnet.suspicious-host
    openosint-2.15.2/openosint/tools/search_paste.py: …known date") lines.append(f"[+] https://pastebin.com/{paste_id} ({date})") if count > _M…
Overall 58/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Other servers that do what OpenOSINT does

  • Netintel
    MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments
    B
  • DNS Doctor - Email & DMARC
    Scan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.
    A
  • BlackVeil DNS & Email Security Scanner
    DNS and email security scanner with 82 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.
    B

OpenOSINT reviews, tools and install