Server data from the Official MCP Registry
AI-powered OSINT agent & MCP server. 16 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
AI-powered OSINT agent & MCP server. 16 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
OpenOSINT is a legitimate OSINT tool with appropriate permissions for its stated purpose, but has several security concerns that users should be aware of. The codebase appropriately uses environment variables for API keys and includes authorization disclaimers, but lacks input validation on tool parameters, has broad exception handling that could mask errors, and streams results to external APIs without explicit user consent warnings. The web server's CORS policy is overly permissive (allow_origins=["*"]), and there are no rate limiting or abuse prevention mechanisms despite tool outputs being accessible via HTTP. The architecture itself is sound, but defensive programming practices are insufficient for a tool intended for security research. Supply chain analysis found 13 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
3 files analyzed · 22 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Set these up before or after installing:
Environment variable: ANTHROPIC_API_KEY
Environment variable: HIBP_API_KEY
Environment variable: IPINFO_TOKEN
Environment variable: IP2LOCATION_API_KEY
Environment variable: ABUSEIPDB_API_KEY
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-sonotommy-openosint": {
"env": {
"HIBP_API_KEY": "your-hibp-api-key-here",
"IPINFO_TOKEN": "your-ipinfo-token-here",
"ABUSEIPDB_API_KEY": "your-abuseipdb-api-key-here",
"ANTHROPIC_API_KEY": "your-anthropic-api-key-here",
"IP2LOCATION_API_KEY": "your-ip2location-api-key-here"
},
"args": [
"openosint"
],
"command": "uvx"
}
}
}Be the first to review this server!
by Modelcontextprotocol · Developer Tools
Read, search, and manipulate Git repositories programmatically
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.