Holehe Email OSINT - Find Registered Accounts MCP server

Holehe Email OSINT - Find Registered Accounts

Reverse email lookup across 120+ online platforms without alerting the target. Check one email, or paste a whole list to check them in bulk. No login, no cookies, no API key.

Available as an Apify Actor. Pay only per email checked and per account found. No login, no cookies, no API key.

What does it do?

Give it an email, or a whole list, and it finds which of 120+ online platforms (Instagram, GitHub, Discord, Amazon, Spotify, LinkedIn, plus 110+ more) have an account registered to it. We clean each address (trim, lowercase, drop mailto: and stray characters), check the list concurrently, and return one summary per email plus one record per account found, including any recovery hint the site leaks. No login, no cookies, no alerts to the target.

How is it different from manual checks across each platform?

1,062+ users and 4,279+ runs on Apify Store as of 2026-05-29. Outperforms s-r/apifyosintemail (865 users) in adoption.

When should I use it?

• Fraud and trust teams - check whether an email has accounts on banking, shopping, or crypto sites
• Account discovery - map every service an email is registered on, in one run
• Bulk risk screening - run a whole signup or lead list and flag which emails are real and active
• Background checks and due diligence - profile an email's footprint before a hire or a deal
• OSINT and security research - reverse email lookup across 120+ platforms, alert-free

What does it cost?

Pay-per-event:

Typical scan costs

• One email, ~10 accounts found: $0.12
• One email, ~20 accounts found: $0.22
• 100 emails (~10 accounts each): $12.00

Which inputs does it take?

What does the output look like?

Each dataset record:

{
  "recordType": "account",
  "email": "target@example.com",
  "platform": "GitHub",
  "exists": true,
  "category": "coding",
  "domain": "github.com",
  "emailrecovery": "t***@e***.com",
  "phoneNumber": null
}

Common questions

Q: Does holehe send alerts to the target? No. All 120+ platform checks use endpoints chosen to be alert-free. The target does not receive any notification.

Q: Is this an email verifier for marketing? No. holehe finds where an email is registered across sites, for OSINT, fraud, and investigation work. It is not an SMTP deliverability or marketing-hygiene checker.

Q: Which platforms are covered? Instagram, GitHub, Discord, Amazon, Spotify, Twitter, Microsoft, Adobe, LinkedIn, Dropbox, Pinterest, Atlassian, Tumblr, Yahoo, plus 100+ more. Upstream holehe maintains the canonical list.

Shortened. The full README is on GitHub.