Is OpenOSINT MCP server safe?
Probably. Read the findings first.
Use with care. Some checks failed or could not be verified.
What to know before installing
- highNetwork call to a paste/tunnel/webhook host
How OpenOSINT compares
Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 58/100
- higher than 13% of 915 Email servers
- Tools that change things
- 11%
- typical: 25%. Fewer write tools means less an agent can break
What its tools let an agent do: 7 read · 1 create · 1 change
Public scan report
scanner v0.1.10 · 2026-11-10 · same rubric, same numbers if you re-run it
1 high
- Code scan31 source files scanned13/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 5 days ago15/15
- Maintainer identitynamespace and repository owner differ4/10
Findings (1)
- highNetwork call to a paste/tunnel/webhook host
net.suspicious-hostopenosint-2.15.2/openosint/tools/search_paste.py: …known date") lines.append(f"[+] https://pastebin.com/{paste_id} ({date})") if count > _M…
Overall 58/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON
Other servers that do what OpenOSINT does
- NetintelMCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropaymentsnot reviewedGrowingB
DNS Doctor - Email & DMARCScan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.not reviewedGrowingA- BlackVeil DNS & Email Security ScannerDNS and email security scanner with 82 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.not reviewedGrowingB