MCP.Market

Clearfront MCP server

by clearfront.sh·sh.clearfront/clearfront·v2.7.3·7 stars
No reviews yet

OSINT sweep of a digital footprint: breaches, accounts, data brokers, domains and IPs

C60/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C60/100

full report

Adoption
Growing

7 stars

Reviews

Write one

Nobody has reviewed Clearfront yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Clearfront tools (13, 2 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • generate_dorks

    Generate targeted Google dork URLs for any target (name, email, username, domain).

  • search_breach

    Check if an email appears in data breaches via HaveIBeenPwned. Requires HIBP_API_KEY env var.

  • search_crypto

    Validate a Bitcoin or Ethereum address and return a keyless on-chain summary (balance, transactions, total received).

  • search_domain

    Enumerate subdomains of a target domain using sublist3r.

  • search_emailwrite action

    Enumerate accounts linked to an email using holehe.

  • search_emailrepwrite action

    Email reputation and footprint summary via EmailRep.io (profiles seen, breach/abuse flags). Requires EMAILREP_API_KEY.

  • search_gravatar

    Look up an email's public Gravatar profile: avatar, display name, bio, location, and linked/verified accounts.

  • search_harvester

    Passive organisation/domain recon via theHarvester: emails, people, and subdomains from public sources (passive only, no active probing).

  • search_maigret

    Broad username/identity discovery across 3,400+ sites via maigret (also extracts profile details).

  • search_paste

    Search public paste sites for an email or username (HIBP paste index + search-engine dorking).

  • search_phone

    Gather carrier and geolocation data for a phone number using phoneinfoga. Use E.164 format.

  • search_username

    Enumerate and verify platforms where a username is registered, using sherlock plus a WhatsMyName subset of modern/niche sites.

  • search_whois

    Retrieve WHOIS registration data for a domain.

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

1 high
  • Code scan59 source files scanned13/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 30 days ago15/15
  • Maintainer identitynamespace and repository owner differ; GitHub account older than a year5/10

Findings (1)

  • highNetwork call to a paste/tunnel/webhook hostnet.suspicious-host
    clearfront-2.7.3/clearfront/tools/search_paste.py: …lower() == "pastebin": return f"https://pastebin.com/{paste_id}" return f"(id: {paste_id…
Overall 60/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Clearfront compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
60/100
higher than 15% of 48,255 servers
Tools
13
the typical server has 7
Tools that change things
15%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
7
more than 86% of 28,688 servers

What its tools let an agent do: 10 read · 1 create · 2 change

Install Clearfront in Claude Code, Cursor or VS Code

claude mcp add clearfront -- uvx clearfront
Add to Cursor

What the publisher says

From the Clearfront repository's README, as published. We do not edit it. Read it on GitHub

<!-- mcp-name: sh.clearfront/clearfront -->

Clearfront Open-source AI intelligence on your digital footprint. Clearfront, also known as Clearfront OSINT, is a free and open-source OSINT agent. Give it an email, username, domain, IP, or name, and its AI security analyst scans 3,400+ public data sources in one sweep, then returns a calibrated report and an interactive evidence graph. Check your own exposure, or investigate an authorized target. It runs locally with your own API keys and sends nothing to us. Interactive REPL · CLI · local web console · MCP server · agent skill. Powered by Anthropic Claude, a local Ollama model, or any OpenAI-compatible endpoint.

clearfront.sh · Disclaimer

  • 30 modular tools, email, username (sherlock + WhatsMyName), broad username discovery across 3,400+ sites (maigret), search-based footprint discovery, IP, IP self-exposure report, domain, WHOIS, breach, Gravatar profile, EmailRep reputation, phone, paste, EXIF/GPS metadata, Shodan, VirusTotal, Censys, IP2Location, AbuseIPDB, GitHub (profile + public code/secret exposure), DNS, subdomain discovery via certificate transparency (crt.sh), historical URL recovery via the Wayback Machine (Internet Archive), mass-scan visibility (GreyNoise Community), infostealer-exposure check (Hudson Rock, free tier, no plaintext credentials), dork generation, live dork search, URL scraping, BTC/ETH address lookup, and passive domain recon (theHarvester)
  • MCP server built in, expose all 30 tools natively to Claude Code, Claude Desktop, and any MCP-compatible client
  • Three AI backends, Anthropic Claude (default), local Ollama, or any OpenAI-compatible endpoint; tool results come from real subprocess calls, never hallucinated
  • Fully async, parallel tool execution via asyncio.gather() with hard subprocess timeouts
  • MIT licensed, no embedded LLM; bring your own API key or run fully offline

Legal Disclaimer: Clearfront is intended for legal and authorized use only.

Users are solely responsible for ensuring their use complies with all applicable laws and regulations.

The authors accept no liability for misuse. See DISCLAIMER.md.

What is Clearfront?

Clearfront is an AI agent for Open Source Intelligence with five interfaces: an interactive terminal REPL, a direct CLI, a browser-based web console, an MCP server exposable to Claude Code, Claude Desktop or any MCP-compatible client, and an agent skill for any client following the Agent Skills standard. The AI layer uses Anthropic's native tool use API (or a local Ollama model, or any OpenAI-compatible endpoint): the model issues hard stops when it needs a tool, your code executes the real binary, the actual output goes back, hallucination in tool results is structurally impossible.

Installation

pip install clearfront

Or from source, if you want to modify it:

git clone https://github.com/scottmartinanderson/clearfront
cd clearfront
pip install -e .

External binaries (must be in PATH):

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Clearfront: common questions

Is Clearfront MCP server safe?
With care: it is graded C, so read the findings first (60/100). Read the Clearfront safety report
How do I install Clearfront?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Clearfront need an API key?
Yes. The registry entry asks for HIBP_API_KEY, IPINFO_TOKEN, SHODAN_API_KEY, VIRUSTOTAL_API_KEY and 1 more.
Is Clearfront maintained?
The last commit was 70 days ago (2026-08-26). The latest release is v2.7.3.
How does Clearfront compare with other MCP servers?
safety score 60/100 (higher than 15% of 48,255 servers); tools 13 (the typical server has 7); tools that change things 15% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.