Server data from the Official MCP Registry
AI-powered OSINT agent & MCP server. 16 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
AI-powered OSINT agent & MCP server. 16 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
OpenOSINT is a legitimate OSINT tool with reasonable architecture, but has notable security concerns that users should be aware of. The server makes extensive network calls to third-party APIs, requires storage of multiple API keys (some optional), and has limited input validation on user-supplied search parameters. Insufficient access control on the web API, overly permissive CORS, and potential data logging in debug mode pose risks in shared or multi-user environments. The codebase is well-structured and not malicious, but permission scope and API design need hardening. Supply chain analysis found 13 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
3 files analyzed · 23 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: ANTHROPIC_API_KEY
Environment variable: HIBP_API_KEY
Environment variable: IPINFO_TOKEN
Environment variable: IP2LOCATION_API_KEY
Environment variable: ABUSEIPDB_API_KEY
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-openosint-openosint": {
"env": {
"HIBP_API_KEY": "your-hibp-api-key-here",
"IPINFO_TOKEN": "your-ipinfo-token-here",
"ABUSEIPDB_API_KEY": "your-abuseipdb-api-key-here",
"ANTHROPIC_API_KEY": "your-anthropic-api-key-here",
"IP2LOCATION_API_KEY": "your-ip2location-api-key-here"
},
"args": [
"openosint"
],
"command": "uvx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.