MCP tools for investigating domains, IPs and websites. Look up public records, compare infrastructure, check several domains at once, or collect the details behind a suspicious site. No API keys needed.
OSINT source profile. From the maintainer documentation: “MCP tools for investigating domains, IPs and websites. Look up public records, compare infrastructure, check several domains at once, or collect the details behind a suspicious site. No API keys needed.”
The documented pypi package is osint-mcp-server. The configuration below comes from the maintainer’s example; adapt its paths and account values to your environment.
Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.
Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.
| Tool | What it does |
|---|---|
| recon_domain | domain overview, highlights and coverage for each check |
| recon_batch | up to ten domain reports, with three running at a time and source failures kept in each report |
| compare_domains | shared IPs, nameservers, mail servers and registrars, with the records behind each match |
| investigate_site | page details, displayed company IDs, legal/contact pages, registration, archive captures, HTTP and TLS, with concrete signals and missing checks |
| certificate_history | certificate issuers, validity dates, related names and links to the CT entries |
| domain_whois | registrar, created/expires, nameservers, abuse contact |
| ip_whois | network owner, CIDR, country, abuse contact, PTR |
| dns_lookup | A, AAAA, CNAME, MX, NS, TXT, SOA, CAA (or pick your own) |
| subdomains | subdomains found in certificate transparency logs |
| wayback | archived snapshots of a URL, supports example.com/ |
| http_headers | status, redirect chain, headers, missing security headers |
| shodan_internetdb | open ports, hostnames, CPEs, known CVEs |
| email_security | SPF, DMARC, MTA-STS, TLS-RPT, DKIM, graded A-F |
| tls_certificate | issuer, expiry, SANs, TLS version, why a cert is invalid |
| asn_lookup | which AS announces an IP, who owns it, all its prefixes |
{
"mcpServers": {
"osint": {
"command": "uvx",
"args": [
"osint-mcp-server"
]
}
}
}From the project documentation. Replace placeholders and example paths before connecting.
Stop letting your assistant hallucinate n8n node parameters — this server hands it the real schemas, templates and validation.
AWS Labs' official server suite — current AWS docs, CDK guidance, cost analysis and service tools.
Cloud browsers for AI agents — automation sessions that run in Browserbase's fleet, not on your machine.
Workers, KV, R2 and D1 by conversation — Cloudflare's official remote servers for building and observability.
Dashboards, Prometheus and Loki queries, incidents and alerts — observability by conversation.
kubectl with a conversational interface — inspect pods, read logs, diagnose clusters and manage workloads.