AI-powered OSINT agent & MCP server. 16 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
OpenOSINT MCP server exists for a simple reason — assistants are far more useful when they can act on OpenOSINT directly instead of describing what you should do. AI-powered OSINT agent & MCP server. 16 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
Once OpenOSINT is connected, these are the calls the assistant has available:
search_email — holehesearch_username — sherlocksearch_breach — HaveIBeenPwned v3 APIsearch_whois — python-whoissearch_ip — ipinfo.iosearch_domain — sublist3rgenerate_dorks — built-insearch_paste — psbdmp.wssearch_phone — phoneinfogasearch_shodan — Shodan APIsearch_virustotal — VirusTotal API v3search_ip2location — IP2Location.io APIBeing a remote server, there is no local install. You register the endpoint with your client, authorise it once, and the tools appear.
You will need 8 environment variables: OPENAI_BASE_URL, HIBP_API_KEY, SHODAN_API_KEY, VIRUSTOTAL_API_KEY, IP2LOCATION_API_KEY, CENSYS_API_ID, CENSYS_SECRET, ABUSEIPDB_API_KEY. The server will not start without them, which is usually why the tools fail to appear on a first run. Keep credentials in your client's env block or a secrets manager rather than in a file you might commit.
This sits in the team communication group, where several servers overlap in what they claim to do but differ sharply once you actually set them up. OpenOSINT's toolset — search_email, search_username, search_breach and 11 more — is a fair guide to whether it matches your workflow. It is maintained by OpenOSINT; worth a glance at recent repository activity before you build anything load-bearing on it.
This entry was verified against OpenOSINT's own documentation before publication; SyncDev keeps the directory reviewed rather than auto-generated.
| Tool | What it does |
|---|---|
| search_email | holehe |
| search_username | sherlock |
| search_breach | HaveIBeenPwned v3 API |
| search_whois | python-whois |
| search_ip | ipinfo.io |
| search_domain | sublist3r |
| generate_dorks | built-in |
| search_paste | psbdmp.ws |
| search_phone | phoneinfoga |
| search_shodan | Shodan API |
| search_virustotal | VirusTotal API v3 |
| search_ip2location | IP2Location.io API |
| search_censys | Censys Search API |
| search_abuseipdb | AbuseIPDB v2 API |
{
"mcpServers": {
"openosint": {
"command": "uvx",
"args": ["openosint"],
"env": {
"OPENAI_BASE_URL": "your-value",
"HIBP_API_KEY": "your-value",
"SHODAN_API_KEY": "your-value",
"VIRUSTOTAL_API_KEY": "your-value",
"IP2LOCATION_API_KEY": "your-value",
"CENSYS_API_ID": "your-value",
"CENSYS_SECRET": "your-value",
"ABUSEIPDB_API_KEY": "your-value"
}
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
| Variable | Description | Required |
|---|---|---|
| OPENAI_BASE_URL | Endpoint or connection string the server talks to. | Yes |
| HIBP_API_KEY | Credential the server authenticates with. | Yes |
| SHODAN_API_KEY | Credential the server authenticates with. | Yes |
| VIRUSTOTAL_API_KEY | Credential the server authenticates with. | Yes |
| IP2LOCATION_API_KEY | Credential the server authenticates with. | Yes |
| CENSYS_API_ID | Configuration value read at startup. | Optional |
| CENSYS_SECRET | Credential the server authenticates with. | Yes |
| ABUSEIPDB_API_KEY | Credential the server authenticates with. | Yes |
Your assistant inside the workspace — read channels, search history, post messages and tame the noise.
Inbox intelligence — search, read, draft and send Gmail through your assistant with OAuth auto-setup.
Read and write Jira, Confluence, Bitbucket, JSM and Compass from your AI client — with your own permissions.
Read and send Telegram messages through your assistant — chats, channels and history via the client API.
Enables Discord bot integration with Model Context Protocol (MCP) compatible applications like Claude Desktop.
Exposes REST APIs defined by OpenAPI specifications as Model Context Protocol (MCP) tools, facilitating seamless integration into MCP-based workflows.