Osint MCP Server

by badchars• 62•• Scanned•Claim this listing•Request removal
Research & Analysisai agentattack surfacebgpbug bountycensys

OSINT intelligence MCP server for AI agents — 37 tools, 12 sources. Shodan, VirusTotal, Censys, SecurityTrails, DNS reconnaissance, WHOIS, certificate transparency, BGP routing, Wayback Machine, GeoIP. Automated open source intelligence and attack surface mapping via Model Context Protocol.

Osint MCP Server is an open-source mcp server by badchars, written mainly in TypeScript, with 62 GitHub stars and the MIT license. Its code was last updated Mar 17, 2026. The latest npm release is osint-mcp-server 0.2.0, published Mar 17, 2026, with 268 downloads last week.

Scan summary: scanned Nov 5, 2026 at commit 7611f70. No capabilities flagged by our checks. Scan policy

aboutREADMEsecurityreviews

How to install Osint MCP Server

Built from the start command in the project's README: npx -y osint-mcp-server. Check the README for required keys or settings.

Claude Code · Terminal
claude mcp add osint-mcp-server -- npx -y osint-mcp-server
Claude Desktop · claude_desktop_config.json
{
  "mcpServers": {
    "osint-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "osint-mcp-server"
      ]
    }
  }
}
Cursor · .cursor/mcp.json
{
  "mcpServers": {
    "osint-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "osint-mcp-server"
      ]
    }
  }
}
VS Code · Terminal
code --add-mcp '{"name":"osint-mcp-server","command":"npx","args":["-y","osint-mcp-server"]}'

What Osint MCP Server can touch

  • Run shell commandsNot seen in this scan
  • Run dynamic codeNot seen in this scan
  • Read or write filesNot seen in this scan
  • Read environment and secretsNot seen in this scan
  • Control a web browserNot seen in this scan
  • Connect to databasesNot seen in this scan
  • Read or send messagesNot seen in this scan
  • Touch money or tradingNot seen in this scan
  • Connect to the internetNo connections seen while running

"Not seen" means our checks did not find it, and the tool may still do it. Covers commit 7611f70, Nov 5, 2026. See the scan policy.

Before you install Osint MCP Server

AgenticMart scanned Osint MCP Server on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.

What it can access

  • An MCP server is a program your AI app starts and talks to. A local one runs with your user's permissions: it can see the files, environment variables and network your account can.

Before you install

  1. Pin the version you reviewed instead of always installing the latest release.
  2. Read the tool list or scripts before the first run, and keep approval prompts on for actions that write, send or delete.
  • Maintained by badchars on GitHub, 62 stars and 8 forks. Popularity is not proof of safety.
  • Last code change: Mar 17, 2026.
  • Open-source license: MIT.
Read the scan reportWhat our scan checks

Tools Osint MCP Server exposes (37)

Listed by the server itself during our scan of commit 7611f70.

  • dns_lookup

    Resolve DNS records for a domain. Supports A, AAAA, MX, TXT, NS, SOA, CNAME, SRV record types.

  • dns_reverse

    Perform reverse DNS (PTR) lookup for an IP address. Returns associated hostnames.

  • dns_email_security

    Analyze email security posture: SPF, DMARC, DKIM records with risk assessment and recommendations. Checks common DKIM selectors (google, selector1, selector2, k1, etc.).

  • dns_spf_chain

    Recursively resolve SPF include chain. Shows all included domains, IP ranges, detected services (Google Workspace, Microsoft 365, SendGrid, etc.), and RFC 7208 lookup limit compliance.

  • dns_srv_discover

    Discover SRV records and common service CNAMEs for a domain. Probes for SIP, XMPP, Autodiscover, LDAP, Kerberos, CalDAV, CardDAV, and checks CNAMEs for autodiscover, lyncdiscover, OWA, ADFS, etc.

  • dns_wildcard_check

    Check if a domain has wildcard DNS configured by resolving a random subdomain.

  • whois_domain

    RDAP/WHOIS lookup for a domain. Returns registrar, registration/expiration dates, nameservers, and contact entities.

  • whois_ip

    RDAP/WHOIS lookup for an IP address. Returns network name, CIDR range, country, and responsible entities.

  • crtsh_search

    Search Certificate Transparency logs via crt.sh. Returns unique subdomains and certificate details (issuer, validity, SANs).

  • shodan_host

    Get Shodan host details for an IP: open ports, services, banners, vulns, OS, ASN, geolocation. Requires SHODAN_API_KEY.

  • shodan_search

    Search Shodan for hosts matching a query (e.g. 'apache port:443 country:US'). Requires SHODAN_API_KEY.

  • shodan_dns_resolve

    Resolve hostnames to IPs using Shodan's DNS resolver. Requires SHODAN_API_KEY.

  • shodan_exploits

    Search Shodan's exploit database for public exploits matching a query. Requires SHODAN_API_KEY.

  • vt_domain

    VirusTotal domain analysis: reputation score, detection stats, categories, registrar, DNS records. Requires VT_API_KEY.

  • vt_ip

    VirusTotal IP analysis: reputation, detection stats, country, ASN, network. Requires VT_API_KEY.

  • vt_subdomains

    Enumerate subdomains for a domain via VirusTotal. Requires VT_API_KEY.

  • vt_url

    Submit a URL to VirusTotal for scanning and get analysis results (malicious/suspicious/harmless). Requires VT_API_KEY.

  • st_subdomains

    Enumerate subdomains for a domain via SecurityTrails. Returns FQDNs. Requires ST_API_KEY.

  • st_dns_history

    Get historical DNS records for a domain via SecurityTrails. Shows first/last seen dates, values, and organizations. Requires ST_API_KEY.

  • st_whois

    Enhanced WHOIS lookup via SecurityTrails with registrant/admin/technical contacts. Requires ST_API_KEY.

  • censys_hosts

    Search Censys for hosts matching a query. Returns IPs, services, ports, location, ASN. Requires CENSYS_API_ID + CENSYS_API_SECRET.

  • censys_host_details

    Get detailed Censys host information for a single IP: all services, certificates, OS, location, ASN. Requires CENSYS_API_ID + CENSYS_API_SECRET.

  • censys_certificates

    Search Censys certificate database. Returns certificate fingerprints, subjects, issuers, validity, and SANs. Requires CENSYS_API_ID + CENSYS_API_SECRET.

  • geoip_lookup

    Geolocate an IP address: country, city, ISP, ASN, proxy/hosting/mobile detection. Uses ip-api.com (free, no API key).

  • geoip_batch

    Batch geolocate up to 100 IP addresses at once. Uses ip-api.com (free, no API key).

  • bgp_asn

    Look up ASN details and announced IPv4/IPv6 prefixes via BGPView. Returns ASN name, description, contacts, and all announced prefixes.

  • bgp_ip

    Look up BGP routing information for an IP address. Returns matching prefixes, ASNs, and RIR allocation.

  • bgp_prefix

    Look up details for a specific IP prefix/CIDR. Returns announcing ASNs, name, country, and RIR.

  • wayback_urls

    Search Wayback Machine for archived URLs of a domain. Returns unique URLs with timestamps, status codes, and MIME types. Useful for finding old endpoints, hidden paths, and removed content.

  • wayback_snapshots

    Get Wayback Machine snapshot history for a specific URL. Returns timestamps, status codes, and direct archive links. Shows first/last seen dates.

  • hackertarget_hostsearch

    Find subdomains and their IPs for a domain via HackerTarget. Free tier: 50 queries/day.

  • hackertarget_reverseip

    Reverse IP lookup via HackerTarget — find all domains hosted on an IP. Free tier: 50 queries/day.

  • hackertarget_aslookup

    Look up ASN information for an IP or ASN via HackerTarget. Free tier: 50 queries/day.

  • m365_tenant

    Discover Microsoft 365 tenant information for a domain. Returns tenant ID, region, and OpenID configuration endpoints.

  • m365_userrealm

    Detect authentication type for a domain's Microsoft 365 tenant. Returns namespace type (Managed/Federated), federation brand name, and auth endpoints.

  • osint_list_sources

    List all OSINT data sources, their availability, API key requirements, and tool counts. Use this to check which sources are configured.

  • osint_domain_recon

    Quick domain reconnaissance combining free sources: DNS (A/MX/NS/TXT), WHOIS, crt.sh subdomains, HackerTarget hosts, and email security analysis. No API keys required.

Osint MCP Server is an open-source mcp server by badchars, written mainly in TypeScript. OSINT intelligence MCP server for AI agents — 37 tools, 12 sources. Shodan, VirusTotal, Censys, SecurityTrails, DNS reconnaissance, WHOIS, certificate transparency, BGP routing, Wayback Machine, GeoIP. Automated open source intelligence and attack surface mapping via Model Context Protocol.

At a glance

Stars
62
Forks
8
Language
TypeScript
License
MIT
Created
Mar 2026
Last update
Mar 17, 2026
Type
MCP Server
Price
Free

Topics

ai-agentattack-surfacebgpbug-bountycensyscertificate-transparencydnsmcpmodel-context-protocolosintpenetration-testingreconnaissancesecuritysecuritytrailsshodansubdomain-enumerationthreat-intelligencevirustotalwayback-machinewhois

Questions about Osint MCP Server

What is Osint MCP Server?

OSINT intelligence MCP server for AI agents — 37 tools, 12 sources. Shodan, VirusTotal, Censys, SecurityTrails, DNS reconnaissance, WHOIS, certificate transparency, BGP routing, Wayback Machine, GeoIP. Automated open source intelligence and attack surface mapping via Model Context Protocol.

Who maintains Osint MCP Server?

Osint MCP Server is maintained by badchars on GitHub (badchars/osint-mcp-server). AgenticMart lists it from public repository data.

Is Osint MCP Server safe to use?

AgenticMart scanned Osint MCP Server on Nov 5, 2026 with automated checks for hidden code, known-malicious packages, leaked secrets and vulnerable dependencies. The result covers one commit under our scan policy, so review what access you give it and check any advisories shown here.

What license does Osint MCP Server use?

It is published under the MIT license.

Osint MCP Server alternatives

View more →

Similar mcp servers in Research & Analysis, ranked by GitHub stars. Compare licence, recent activity and scan status before you choose.

NameStarsLicenceLast updatedScan
Osint MCP Server (this page)
badchars
62MITMar 17, 2026Scanned, no flagged issues
Worldmonitor
koala73
90kAGPL-3.0Nov 1, 2026Scanned, no flagged issues
GPT Researcher
assafelovic
30kApache-2.0Oct 10, 2026Scanned, no flagged issues
Auto Claude Code Research In Sleep
wanshuiyin
18kMITNov 1, 2026Scanned, no flagged issues
Deep Research
u14app
4.7kMITJun 18, 2026Scanned, no flagged issues
MCP Server Chart
antvis
4.4kMITAug 27, 2026Scanned, no flagged issues