OSINT

The OSINT MCP Server unifies multiple open source intelligence sources into a single, powerful toolkit you can query through an MCP client. It provides infrastructure, email and identity, person, and company intelligence capabilities to accelerate research and investigations.

How to use

You run the OSINT MCP Server as a local microservice that responds to your MCP client requests. Start the MCP server once you have configured your keys, then connect to it from your MCP client to perform searches, lookups, and enrichment across infrastructure data, email and identity signals, person profiles, and company information.

How to install

Prerequisites: you need Python and pip installed on your system.

pip install -e .

Configuration

Create a .env file at the project root and populate your API keys for the various data sources. The following keys are shown as required in the configuration example.

# Infrastructure
CENSYS_API_TOKEN=your_censys_token
SHODAN_API_KEY=your_shodan_key

# Email & Identity
HUNTER_API_KEY=your_hunter_key
HIBP_API_KEY=your_hibp_key

# Person/Company
APOLLO_API_KEY=your_apollo_key
RAPIDAPI_KEY=your_rapidapi_key  # For LinkedIn

# AI
PERPLEXITY_API_KEY=your_perplexity_key

Usage with Claude Desktop

To run the OSINT MCP Server with Claude Desktop, configure the MCP connection in your Claude settings to point to the local MCP runner. The example shows how to expose the server from your environment via a JSON config you place in Claude's application support directory.

{
  "mcpServers": {
    "osint": {
      "command": "osint-mcp",
      "env": {
        "CENSYS_API_TOKEN": "...",
        "SHODAN_API_KEY": "...",
        "HUNTER_API_KEY": "...",
        "APOLLO_API_KEY": "...",
        "RAPIDAPI_KEY": "...",
        "PERPLEXITY_API_KEY": "..."
      }
    }
  }
}

Security and best practices

Keep your API keys secret. Do not commit the .env file to version control. Use a secure secret management approach and restrict the keys to only the required scopes.

Notes

This MCP server integrates multiple open source intelligence sources and provides a consistent interface to query infrastructure, email, personnel, and company data through a single conduit.

Available tools

osint_censys_host

Censys host lookup to retrieve host data, certificates, services, and ASN information.

osint_censys_search

Censys query search to explore data across hosts and services.

osint_shodan_host

Shodan host lookup to retrieve port, service, and vulnerability data.

osint_shodan_domain

Shodan DNS and subdomains data for a domain.

osint_dns_lookup

DNS records lookup for domains.

osint_whois

WHOIS lookup for domain registration information.

osint_email_search

Find company emails associated with a domain or organization.

osint_email_finder

Find a person’s email address.

osint_email_verify

Verify the validity of an email address.

osint_breach_check

HIBP breach lookup to check compromised data.

osint_email_services

Holehe-based detection of email service providers.

osint_username_search

Sherlock-style username search across platforms.

osint_person_enrich

Apollo.io person enrichment including email, title, and social profiles.

osint_linkedin_find

Locate LinkedIn URL for a person.

osint_linkedin_profile

Fetch LinkedIn profile data.

osint_person_research

AI-powered research synthesis for a person.

osint_company_enrich

Apollo.io company enrichment including size, tech stack, and industry.

osint_company_people

Find people associated with a company.

osint_linkedin_company

LinkedIn company data lookup.

osint_company_research

AI-powered AI company research synthesis.

osint_api_status

Check API availability and status.

osint_query

General AI query endpoint for ad-hoc questions.