OpenOSINT
OpenOSINT is an MCP server. It reaches hibp, openosint and shodan. It needs HIBP_API_KEY, OPENOSINT_DEMO_KEY and SHODAN_API_KEY to authenticate. Its repository has 1,795 GitHub stars and is licensed under MIT; we last read it on 2026-10-22.
OpenOSINT is an AI-powered open-source OSINT tool that connects to Claude, GPT-4, or local models via an MCP server or CLI. It includes an interactive REPL and 20 tools for authorized security research.
Install
Read from OpenOSINT’s own README, close to verbatim -- not written by us, and not guessed.
pip install openosint
What it reaches, and what it needs
Maintenance
Open-source engine for passive OSINT checks: 21 tools as CLI, MCP server and web UI. Hosted Monitor & Diligence at app.openosint.tech.
What OpenOSINT can do
21 tools documented in its README. An AI client calls these by name.
search_email- Social accounts linked to an email address *(noisy, off by default)*
search_username- Username presence across 400+ platforms *(noisy, off by default)*
search_breach- Data breach exposure
search_whois- Domain registrant and DNS info
search_ip- Geolocation, ASN, hostname
search_domain- Subdomain enumeration *(noisy, off by default)*
generate_dorks- 12 targeted Google dork URLs (no network calls)
search_paste- Pastebin dump mentions
search_phone- Carrier, country, line type *(unverified network behavior, off by default)*
search_shodan- Open ports, banners, CVEs
search_virustotal- Verdict from 70+ antivirus engines
search_ip2location- Enhanced IP intel: VPN/Proxy/Tor/datacenter flags *(sponsored)*
search_censys- Internet-facing infrastructure, certificates
search_abuseipdb- IP abuse reputation: confidence score, reports, country, ISP
search_github- Profile, repos, commit-discovered emails, username/keyword search
search_dns- A/AAAA/MX/NS/TXT/CNAME/SOA records; SPF, DMARC, DKIM analysis
search_rdap- Registrar, registration/expiry dates, name servers, status; registrant contacts redacted by policy
search_gdelt_geo- Recent worldwide news placed on a map: headline, link, place; GeoJSON output
search_dorks_live- Live Google search results for dork queries (title, URL, snippet)
scrape_url- Fetch any URL bypassing Cloudflare/CAPTCHA — returns clean Markdown *(touches the target, off by default)*
search_footprint- Entity-type-aware public search-engine footprint: detects email/username/domain/phone/name and returns structured results + Entity Correlation Graph nodes/edges
Read from the README; names are kept only if the README contains them.
Common questions about OpenOSINT
- What does OpenOSINT do?
- OpenOSINT is an AI-powered open-source OSINT tool that connects to Claude, GPT-4, or local models via an MCP server or CLI. It includes an interactive REPL and 20 tools for authorized security research.
- How do I install OpenOSINT?
- Its own README gives this command: pip install openosint. Run it where your MCP client can launch the server, and check the README for any settings it asks for.
- What does OpenOSINT connect to, and what does it need?
- It reaches hibp, openosint and shodan. The credentials we found in its source are HIBP_API_KEY, OPENOSINT_DEMO_KEY and SHODAN_API_KEY.
- Is OpenOSINT official and is it maintained?
- We found nothing naming it as a vendor’s official server. Its repository has 1,795 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-10-22.
- What licence does OpenOSINT use?
- The repository declares the MIT licence.