MCP.Market

OSINT Toolbox MCP server

by renkagod·io.github.renkagod/osint-toolbox-mcp·v1.1.0

Run Sherlock, Maigret, Holehe, GHunt, theHarvester, SpiderFoot and more OSINT tools locally

A92/100grade A
What users say
No reviews yet
Be the first
Safety scan
A92/100

full report

Adoption
New

0 stars

Reviews

Write one

Nobody has reviewed OSINT Toolbox yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

OSINT Toolbox tools

No tool declarations could be read from the package source. They show once the server is installed.

Public scan report

scanner v0.1.9 · 2026-09-24 · same rubric, same numbers if you re-run it

no findings
  • Code scan16 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 0 days ago15/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 92/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How OSINT Toolbox compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
92/100
higher than 95% of 48,255 servers

Install OSINT Toolbox in Claude Code, Cursor or VS Code

claude mcp add osint-toolbox-mcp -- uvx osint-toolbox-mcp
Add to Cursor

What the publisher says

From the OSINT Toolbox repository's README, as published. We do not edit it. Read it on GitHub

osint-toolbox-mcp

An MCP server that lets AI agents run classic OSINT tools on your own machine: Sherlock, Maigret, Blackbird, Holehe, GHunt, theHarvester, SpiderFoot, subfinder, dnstwist, dnsrecon, PhoneInfoga and ExifTool, plus built-in WHOIS, DNS, certificate transparency and Wayback Machine lookups. No API keys and no cloud service in between: the tools run locally and query public sources directly.

<!-- mcp-name: io.github.renkagod/osint-toolbox-mcp -->

Ask your assistant "which sites have an account for jane@example.com?" or "what can you find about example.com?", and it picks the tools, runs them and reads the results for you.

Tools

Only installed tools are offered to the agent. Runs take from seconds to half an hour (a full SpiderFoot scan); requests run in parallel and can be cancelled.

Quick start

Pick one:

  • Docker: every tool but Blackbird in one image, nothing else to install.
  • uvx: one command installs the tools on your machine, without admin rights.

Docker

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

OSINT Toolbox: common questions

Is OSINT Toolbox MCP server safe?
Yes, by our scan: it is graded A (92/100). Read the OSINT Toolbox safety report
How do I install OSINT Toolbox?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does OSINT Toolbox need an API key?
No secret keys are declared. It reads 3 settings from the environment.
Is OSINT Toolbox maintained?
The last commit was 42 days ago (2026-09-23). The latest release is v1.1.0.