Skip to main content
Glama
GetSomeKelso

OhSINT MCP Server

by GetSomeKelso
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

OhSINT — OSINT Reconnaissance Orchestrator

73 tools. 5 pipelines. One interface. CLI + MCP server.

Unified OSINT reconnaissance for authorized engagements. Wraps 73 tools behind smart target detection, parallel execution, deduplication, and multi-format reporting (JSON / Markdown / HTML). Runs on Kali Linux; connects to Claude Desktop/Code via an MCP server.

Pipelines

Five multi-stage pipelines chain tools with data flowing between stages:

Pipeline

Command

What it does

Subdomain Takeover

ohsint takeover

subfinder + crt.sh → dnsx CNAME → provider filter → subzy + nuclei → cross-validate

Historical URL Harvest

ohsint url-harvest

gau + waybackurls + waymore → dedupe → gf pattern match → robots.txt history

Secret Surface

ohsint secret-surface

GitHub / Docker Hub / Postman search → TruffleHog + Gitleaks → cross-validate

JS Analysis

ohsint js-analysis

subjs + katana → download → beautify → LinkFinder + SecretFinder → source maps → Swagger

Full Passive

ohsint passive-full

chains all 4 above with cross-pipeline data flow

Related MCP server: osint-mcp-server

Quick Start

# Install the CLI + MCP entry points
pip install -e . --break-system-packages

# Install all tool binaries (Kali VM — handles every install gotcha)
bash scripts/setup-kali.sh

# Verify tools, API keys, OPSEC config
ohsint install-check
ohsint opsec-check

# Run a pipeline
ohsint takeover -t example.com
ohsint passive-full -t example.com

# Multi-target / scope file
ohsint takeover --scope-file hackerone_scope.txt
ohsint takeover -t a.com -t b.com -t c.com

# Start the MCP server (see docs/mcp-setup.md for binding/IP)
ohsint-mcp --host <vm-ip>

OPSEC / Analyst Protection

Optional protection layer, configured in configs/opsec.yaml:

  • Request hygiene — User-Agent rotation, per-host rate limiting, cookie suppression on all direct HTTP calls

  • Proxy egress — optional SOCKS5/HTTP/Tor routing for tool subprocesses

  • Session isolation — random-suffixed output dirs so concurrent scans don't collide

Verify with ohsint opsec-check. For container-based isolation, see docs/kasm-deployment.md.

Authorization

Passive tools run freely. Active tools (httpx, naabu, shuffledns, interactsh, spiderfoot, recon-ng, xray, linkedin2username, linkedint) require --authorization. FCRA-gated commercial identity tools require --fcra-permissible-purpose.

Docs

API Keys

Configure in configs/api_keys.yaml (copy from configs/api_keys.yaml.example). Check status: ohsint api-keys.

License

MIT

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityInactive
ResponsivenessNo issues

Resources

Related MCP Connectors

Related MCP Servers

  • BugBounty MCP Server

    gokulapap
    A
    license
    Not graded
    quality
    D
    maintenance
    Enables comprehensive security testing and penetration testing through natural language conversations with 92+ tools for reconnaissance, vulnerability assessment, web application testing, OSINT, and reporting. Designed for authorized bug bounty hunting and security assessments.
    43
    MIT

  • osint-mcp-server

    badchars
    A
    license
    A
    quality
    C
    maintenance
    Provides AI agents with 37 OSINT tools and 12 data sources to perform unified reconnaissance, domain analysis, and attack surface mapping. It enables agents to query, correlate, and reason across platforms like Shodan, VirusTotal, and Censys in parallel.
    37
    174 npm
    55
    MIT

  • OSINT MCP Server

    Krisparenthetic284
    A
    license
    A
    quality
    C
    maintenance
    A comprehensive reconnaissance toolset that provides AI agents with 37 tools across 12 data sources like Shodan and VirusTotal for automated intelligence gathering. It enables agents to perform domain reconnaissance, attack surface mapping, and cross-platform data correlation within a single conversational interface.
    37
    174 npm
    2
    MIT