MCP.Market

OpenOSINT MCP server

by SonoTommy·io.github.SonoTommy/openosint·v2.15.2·1.9k stars
No reviews yet

AI-powered OSINT agent & MCP server. 16 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.

C58/100grade C
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
C58/100

full report

Adoption
Established

1.9k stars1.6k downloads/wk

Reviews

Write one

Nobody has reviewed OpenOSINT yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

OpenOSINT tools (9, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • generate_dorks

    Generate targeted Google dork URLs for any target (name, email, username, domain).

  • search_breach

    Check if an email appears in data breaches via HaveIBeenPwned. Requires HIBP_API_KEY env var.

  • search_domain

    Enumerate subdomains of a target domain using sublist3r.

  • search_emailwrite action

    Enumerate accounts linked to an email using holehe.

  • search_ip

    Retrieve geolocation and ASN data for an IP address via ipinfo.io.

  • search_paste

    Search Pastebin dumps for an email or username via psbdmp.ws.

  • search_phone

    Gather carrier and geolocation data for a phone number using phoneinfoga. Use E.164 format.

  • search_username

    Enumerate platforms where a username is registered using sherlock.

  • search_whois

    Retrieve WHOIS registration data for a domain.

Public scan report

scanner v0.1.10 · 2026-11-10 · same rubric, same numbers if you re-run it

1 high
  • Code scan31 source files scanned13/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitystatic API keys via environment variables6/15
  • Maintenancelast push 5 days ago15/15
  • Maintainer identitynamespace and repository owner differ4/10

Findings (1)

  • highNetwork call to a paste/tunnel/webhook hostnet.suspicious-host
    openosint-2.15.2/openosint/tools/search_paste.py: …known date") lines.append(f"[+] https://pastebin.com/{paste_id} ({date})") if count > _M…
Overall 58/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How OpenOSINT compares

Against every graded Email MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
58/100
higher than 13% of 915 Email servers
Tools
9
the typical Email server has 8
Tools that change things
11%
typical: 25%. Fewer write tools means less an agent can break
GitHub stars
1,917
more than 96% of 502 Email servers
Downloads a week
1,562
more than 95% of 270 Email servers with a package

What its tools let an agent do: 7 read · 1 create · 1 change

Install OpenOSINT in Claude Code, Cursor or VS Code

claude mcp add openosint -- uvx openosint
Add to Cursor

What the publisher says

From the OpenOSINT repository's README, as published. We do not edit it. Read it on GitHub

mcp-name: io.github.OpenOSINT/openosint

OpenOSINT An OSINT (Open Source Intelligence) agent for security researchers and analysts: 20 investigation tools behind a natural-language interface, plus an MCP (Model Context Protocol) server so any MCP-compatible AI client can drive them directly. Use it as a REPL, CLI, MCP server, or browser Web UI. The AI issues hard-stop tool calls; your code executes the real binary — hallucinated findings are structurally impossible.

Self-host (free, MIT)

pip install openosint
# Interactive AI REPL (default)
openosint

# Web interface
openosint web

# Direct tool (no AI)
openosint email target@example.com

Try the live demo → — bring your own Anthropic / OpenRouter / Ollama key, no signup.

☁️ OpenOSINT Cloud — no install, pay per use

Run OpenOSINT tools with zero install as pay-per-use Apify Actors, in your browser or as MCP tools in Claude, Cursor, and Windsurf.

<!-- Add one row per new Actor here as they ship -->

All three are also available as MCP tools with no server to run: https://mcp.apify.com?tools=completeanalogy/openosint-email-recon,completeanalogy/openosint-username-recon,complete_analogy/openosint-domain-recon

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

OpenOSINT: common questions

Is OpenOSINT MCP server safe?
With care: it is graded C, so read the findings first (58/100). Read the OpenOSINT safety report
How do I install OpenOSINT?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does OpenOSINT need an API key?
Yes. The registry entry asks for ANTHROPIC_API_KEY, HIBP_API_KEY, IPINFO_TOKEN, IP2LOCATION_API_KEY and 1 more.
Is OpenOSINT maintained?
The last commit was 10 days ago (2026-11-05). The latest release is v2.15.2.
What can I use instead of OpenOSINT?
Servers from other publishers that do the same job: Netintel MCP server, DNS Doctor - Email & DMARC MCP server and BlackVeil DNS & Email Security Scanner MCP server.
How does OpenOSINT compare with other Email MCP servers?
safety score 58/100 (higher than 13% of 915 Email servers); tools 9 (the typical Email server has 8); tools that change things 11% (typical: 25%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to OpenOSINT

Same job from other publishers: the closest match first, then the best rated.

  • Netintel
    MCP server for NetIntel — DNS, SSL, WHOIS, email security, OSINT via x402 micropayments
    B
  • DNS Doctor - Email & DMARC
    Scan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.
    A
  • BlackVeil DNS & Email Security Scanner
    DNS and email security scanner with 82 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.
    B
  • IntoDNS.ai DNS & Email Security Scanner
    DNS and email security: check SPF, DKIM, DMARC, DNSSEC, DANE and build the records. 45 tools.
    B
  • Mailoo - Email MCP Server
    Email MCP server for AI agents: IMAP/SMTP, Gmail, Outlook, calendar, ManageSieve, AI triage, OAuth2.
    A