osint_investigate_infrastructure_start
Start an async deep-infrastructure OSINT investigation for a query (domain, IP, or org). Operator-deploy only; targets must be operator-authorized on the recon watchlist; degrades to info when unprovisioned. Returns an investigationId immediately — poll with osint_investigation_status.
Tool call template
Replace each placeholder with a value matching the input schema. Only required parameters are included; add optional parameters as needed.
{
"id": 1,
"jsonrpc": "2.0",
"method": "tools/call",
"params": {
"arguments": {
"query": "<query>"
},
"name": "osint_investigate_infrastructure_start"
}
}Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | Investigation subject, per tool: a domain, public IP, organisation name, email address or username. |