MCP serverCautionAuth & securitySome setup

OpenOSINT

This MCP server provides an AI-powered OSINT agent with 20 investigation tools, enabling security researchers to gather open-source intelligence with verified findings.

AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 20 tools. Works with Claude, GPT-4, or local models. For authorized security research only.

1.7k stars268License: MITUpdated 12 days ago0 opens

Preview

▍

What you can do with it

Perform email reconnaissance to find linked accounts across various online services.
Investigate usernames to identify every platform where they are registered.
Analyze domain information for email security grades, RDAP data, and dork URLs.

Safety check

Caution

Usable, but read the notes first.

●Installer downloads a remote script and pipes it to the shell.README.md

Automated scan of the repo files. Always review code you run.

From the README

mcp-name: io.github.OpenOSINT/openosint

OpenOSINT An OSINT (Open Source Intelligence) agent for security researchers and analysts: 21 investigation tools behind a natural-language interface, plus an MCP (Model Context Protocol) server so any MCP-compatible AI client can drive them directly. Use it as a REPL, CLI, MCP server, or browser Web UI. The AI issues hard-stop tool calls; your code executes the real binary — hallucinated findings are structurally impossible.

Self-host (free, MIT)

pip install openosint

# Interactive AI REPL (default)
openosint

# Web interface
openosint web

# Direct tool (no AI)
openosint email target@example.com

Try the live demo → — bring your own Anthropic / OpenRouter / Ollama key, no signup.

☁️ OpenOSINT Cloud — no install, pay per use

Run OpenOSINT tools with zero install as pay-per-use Apify Actors, in your browser or as MCP tools in Claude, Cursor, and Windsurf.

Actor	Input	Output	Price
OpenOSINT Email Recon	an email address	linked accounts across 100+ services	from $0.015/run	▶ Run on Apify
OpenOSINT Username Recon	one or more usernames	every platform where each is registered	$0.04/username	▶ Run on Apify
OpenOSINT Domain Recon	one or more domains	A-F email-security grade, RDAP data, dork URLs	$0.02/domain	▶ Run on Apify

All three are also available as MCP tools with no server to run: https://mcp.apify.com?tools=complete_analogy/openosint-email-recon,complete_analogy/openosint-username-recon,complete_analogy/openosint-domain-recon

Cloud or self-host? Cloud: zero setup, pay per call, hosted by us — cloud usage funds ongoing development of the self-hosted project. Self-host: free forever, your own API keys, full control.

📬 Agents & OSINT — the newsletter

One AI-OSINT workflow you can run + a ruthless roundup of what's new, every week. Subscribe →

Investigation results land live on the globe — click a point to pivot. Watch the sharper MP4.

Deterministic, synthetic-data demo — every entity shown is fictional; regenerate with demo/web_demo.py. The entities are seeded at the statement layer, not produced by today's mappers — see demo/README.md.

Featured Integrations

IP2Location.io — powers search_ip2location · Integration guide

Enhanced IP geolocation, ISP, VPN/Proxy/Tor, and datacenter detection

RapidProxy · Integration guide

Reliable Residential Proxies for Data Collection & Automation — 90M+ IPs across 200+ countries. 10% off: RAPID10.

TestMu AI

TestMu AI (formerly LambdaTest) is an AI-native testing cloud platform built for modern engineering teams. It covers everything from autonomous test creation and fast execution to testing AI agents, chatbots and voice assistants.

Open: Breach / Compromised-Credential Data · Email / Identity Lookup — see SPONSORSHIP.md.

Usage

Start the REPL and investigate any target — the agent decides which tools to run and chains them on findings:

openosint > investigate target@example.com

  -> generate_dorks('target@example.com')
  -> search_email('target@example.com')
  Found: Spotify, WordPress, Gravatar, Office365

  -> search_breach('target@example.com')
  Found in 2 breaches: LinkedIn (2016), Adobe (2013)

  -> search_username('johndoe99')   <- pivoted from email findings
  Found: GitHub, Reddit, Twitter

  Report saved -> reports/2026-05-11_14-32-11_report.md

Want the full investigation workflow behind this? → AI OSINT Complete Kit ($55)

Features

Capability	Details
AI tool chaining	The agent selects and chains tools based on findings; describe the target in plain language
21 modular tools	Email, username, breach, WHOIS, IP, subdomain, dorks, paste, phone, Shodan, VirusTotal, Censys, IP2Location, AbuseIPDB, GitHub, DNS, live dork search, URL scraping, SERP footprint
Three AI backends	Anthropic Claude (default), local Ollama, or any OpenAI-compatible endpoint (LiteLLM, vLLM, LM Studio, ...)
Native MCP server	All 21 tools exposed to Claude Code, Claude Desktop, and any MCP-compatible client — no extra config
Parallel execution	`--parallel` runs complementary tools concurrently via `asyncio.gather()`
Reports	PDF + Markdown auto-saved after every investigation (`reportlab` optional)
Session history	All REPL sessions saved to `~/.openosint/history/`; browse with `openosint history`
Web UI	Browser-based AI chat with streaming output, tool cards, light/dark theme

Legal Disclaimer: OpenOSINT is intended for legal and authorized use only. Users are solely responsible for ensuring their use complies with all applicable laws and regulations. The authors accept no liability for misuse. See DISCLAIMER.md.

Tools

Tool	Powered by	What it investigates
`search_email`	holehe	Soci

View source on GitHub