One command. 26 free OSINT tools. Any AI agent.
Osint Mcp is an MCP project maintained in the rjn32s/osint-mcp repository. The maintainer describes its purpose as “One command. 26 free OSINT tools. Any AI agent”. Read the project documentation for the complete scope.
The documented pypi package is osint-mcp. The configuration below comes from the maintainer’s example; adapt its paths and account values to your environment.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| osint_whois | python-whois |
| osint_dns_lookup | dig |
| osint_port_scan | nmap |
| osint_ip_info | ipinfo.io API |
| osint_asn_lookup | ipinfo.io API |
| osint_subdomain_enum | subfinder |
| osint_amass | amass |
| osint_cert_transparency | crt.sh API |
| osint_harvester | theHarvester |
| osint_dnsrecon | dnsrecon |
| osint_username_search | Sherlock |
| osint_maigret | Maigret |
| osint_email_accounts | Holehe |
| osint_email_breach | HaveIBeenPwned |
| osint_wayback | Internet Archive API |
| osint_urlscan | urlscan.io API |
| osint_shodan_host | Shodan API |
| osint_shodan_search | Shodan API |
| osint_virustotal | VirusTotal API |
| osint_phone_info | PhoneInfoga |
| osint_scan_secrets | TruffleHog |
| osint_gitleaks | Gitleaks |
| osint_install_status | JSON list of all tools with availability status — useful for agents to check before running |
| osint_config_get | Read a stored API key (masked) |
| osint_config_set | Store an API key from within an agent conversation |
| osint_config_list | List all configured API keys |
{
"mcpServers": {
"osint": {
"command": "uvx",
"args": [
"osint-mcp"
]
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
Provides IP address geolocation data via IP-API.com without requiring an API key.
Free web lookups; PDF to Markdown, audio transcripts, screenshots, WHOIS/DNS paid per call via x402.
"It's like gmail for your coding agents!"
Pay-per-call web extract, DNS/WHOIS/IP lookup, PDF/RSS/sitemap tools. x402 USDC on Base/Algorand.
Pay-per-call DNS, WHOIS/RDAP, IP and domain reports for agents. x402 USDC on Base or Algorand.
Security intelligence via x402 on Base. CVE lookup, IP reputation, secret scanning.