Mmcp.market

Is OpenOSINT MCP server safe?

Probably. Read the findings first.

C58/100grade C

Use with care. Some checks failed or could not be verified.

What to know before installing
  • highNetwork call to a paste/tunnel/webhook host

Public scan report

scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it

1 high
  • Code scan31 source files scanned13/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 1 days ago15/15
  • Maintainer identitynamespace and repository owner differ4/10

Findings (1)

  • highNetwork call to a paste/tunnel/webhook hostnet.suspicious-host
    openosint-2.15.2/openosint/tools/search_paste.py: …known date") lines.append(f"[+] https://pastebin.com/{paste_id} ({date})") if count > _M…
Overall 58/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Other servers that do what OpenOSINT does

  • OpenOSINT
    AI-powered OSINT agent & MCP server. 16 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
    C
  • Apixies Developer API Suite
    50 developer utility APIs as tools: SSL, DNS, WHOIS, email checks, HTML to PDF, sitemaps and more.
    B
  • Netintel
    MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments
    B

OpenOSINT reviews, tools and install