Skip to main content
Glama
Sign In
Darknet MCP

Darknet MCP

by Vinaysati
OverviewSchemaSourceRelated ServersDiscussionsAdmin
TypeScript
Local

Related Servers

Alternatives to Darknet MCP

No user-submitted related servers found.

    Related Servers

    • osint-mcp-server

      badchars
      A
      license
      A
      quality
      C
      maintenance
      Provides AI agents with 37 OSINT tools and 12 data sources to perform unified reconnaissance, domain analysis, and attack surface mapping. It enables agents to query, correlate, and reason across platforms like Shodan, VirusTotal, and Censys in parallel.
      37
      364 npm
      60
      MIT

    • Clearfront MCP Server

      scottmartinanderson
      A
      license
      A
      quality
      B
      maintenance
      Enables AI-driven open-source intelligence investigations by exposing 30 tools for scanning emails, usernames, domains, IPs, and more, with real subprocess execution.
      31
      43 PyPI
      11
      MIT

    • Security Intelligence MCP

      df4u1t
      F
      license
      Not graded
      quality
      D
      maintenance
      Provides a unified interface for security analysts to gather threat intelligence from multiple sources including VirusTotal, Shodan, NVD, AnyRun, AlienVault OTX, and GitHub.
      4 npm
      -

    • OSINT MCP Server

      Krisparenthetic284
      A
      license
      A
      quality
      C
      maintenance
      A comprehensive reconnaissance toolset that provides AI agents with 37 tools across 12 data sources like Shodan and VirusTotal for automated intelligence gathering. It enables agents to perform domain reconnaissance, attack surface mapping, and cross-platform data correlation within a single conversational interface.
      37
      364 npm
      2
      MIT

    • io.github.OpenOSINT/openosint

      kush-coder
      A
      license
      A
      quality
      C
      maintenance
      Exposes an OSINT investigation toolkit to any MCP-compatible AI client, which can drive passive checks such as DNS, WHOIS/RDAP, breach, IP reputation, GitHub and news-geo lookups and chain findings across them. The server lists 20 tools by default (16 passive plus 4 graph and batch helpers) and 25 when active checks are explicitly allowed, running via uvx with no separate install.
      8
      20
      MIT

    • OpenOSINT

      kush-coder
      A
      license
      A
      quality
      C
      maintenance
      Enables MCP-compatible AI clients to run passive OSINT investigation tools for domains, IPs, emails, usernames, breaches, DNS, WHOIS, and reputation checks through natural-language tool calls. It exposes 16 passive tools by default, plus graph and batch helpers, with additional active tools available when explicitly enabled.
      20
      MIT
    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    B3.2/5.0

    Scored across 68 tools

    Disambiguation3/5

    Many tools are clearly scoped by provider+artifact, but there is significant overlap within families: abuseipdb_check vs abuseipdb_reports vs abuseipdb_check_block, greynoise_ip vs greynoise_check, ransomwareGroups vs ransomwareGroup vs ransomlookGroups, and ransomwareRecent vs ransomlookRecent are easy to confuse. Descriptions help, but an agent must carefully pick between near-duplicate providers offering the same lookup.

    Naming Consistency2/5

    Naming mixes snake_case (vulners_search, btc_address, otx_ip, tor_fetch_onion) with camelCase (threatfoxSearch, breachPassword, ransomwareGroup, urlhausLookup, bazaarHash) and provider prefixes are inconsistent (threatfox_ vs threatfox, breach_ vs breach, abuseipdb_ vs abuseipdb). This is a fairly chaotic surface with no single predictable pattern.

    Tool Count1/5

    68 tools is far beyond a well-scoped set and reflects the sheer breadth of aggregated providers rather than a curated surface. The volume drives heavy redundancy (multiple tools per provider for essentially the same lookup), making the set unwieldy.

    Completeness4/5

    Coverage is broad and genuinely deep across the threat-intel domain: CVE/vuln, IP, domain, hash, URL, onion, Bitcoin, breaches, stealer logs, and ransomware are all represented, with a cross-source darknet_investigate aggregator and a readiness check. Minor gaps like no generic domain/WHOIS lookup or grouped risk scoring, but agents can work around them.

    Maintenance

    ActivityMaintained
    ResponsivenessSyncing

    Resources