# OSINT MCP Server

Unified Open Source Intelligence MCP server for Claude. Combines multiple data sources into a single, powerful intelligence gathering toolkit.

## Features

### Infrastructure Intelligence
- **Censys** - Host data, certificates, services, ASN info
- **Shodan** - Ports, services, vulnerabilities, DNS
- **DNS/WHOIS** - Domain records and registration data

### Email & Identity
- **Hunter.io** - Email finder, verification, company emails
- **HIBP** - Data breach checking
- **Holehe** - Email service detection
- **Sherlock** - Username enumeration across platforms

### Person Intelligence
- **Apollo.io** - Person enrichment (email, title, social)
- **LinkedIn** - Profile data, experience, education
- **Perplexity** - AI-powered research synthesis

### Company Intelligence
- **Apollo.io** - Company enrichment (size, tech stack, industry)
- **LinkedIn** - Company profiles
- **Perplexity** - AI-powered company research

## Installation

```bash
pip install -e .
```

## Configuration

Create a `.env` file with your API keys:

```bash
# Infrastructure
CENSYS_API_TOKEN=your_censys_token
SHODAN_API_KEY=your_shodan_key

# Email & Identity
HUNTER_API_KEY=your_hunter_key
HIBP_API_KEY=your_hibp_key

# Person/Company
APOLLO_API_KEY=your_apollo_key
RAPIDAPI_KEY=your_rapidapi_key  # For LinkedIn

# AI
PERPLEXITY_API_KEY=your_perplexity_key
```

## Usage with Claude Desktop

Add to `~/Library/Application Support/Claude/claude_desktop_config.json`:

```json
{
  "mcpServers": {
    "osint": {
      "command": "osint-mcp",
      "env": {
        "CENSYS_API_TOKEN": "...",
        "SHODAN_API_KEY": "...",
        "HUNTER_API_KEY": "...",
        "APOLLO_API_KEY": "...",
        "RAPIDAPI_KEY": "...",
        "PERPLEXITY_API_KEY": "..."
      }
    }
  }
}
```

## Available Tools

| Tool | Description |
|------|-------------|
| `osint_censys_host` | Censys host lookup |
| `osint_censys_search` | Censys query search |
| `osint_shodan_host` | Shodan host lookup |
| `osint_shodan_domain` | Shodan DNS/subdomains |
| `osint_dns_lookup` | DNS records |
| `osint_whois` | WHOIS registration |
| `osint_email_search` | Find company emails |
| `osint_email_finder` | Find person's email |
| `osint_email_verify` | Verify email validity |
| `osint_breach_check` | HIBP breach lookup |
| `osint_email_services` | Holehe service detection |
| `osint_username_search` | Sherlock username search |
| `osint_person_enrich` | Apollo person lookup |
| `osint_linkedin_find` | Find LinkedIn URL |
| `osint_linkedin_profile` | Get LinkedIn profile |
| `osint_person_research` | AI person research |
| `osint_company_enrich` | Apollo company lookup |
| `osint_company_people` | Find people at company |
| `osint_linkedin_company` | LinkedIn company data |
| `osint_company_research` | AI company research |
| `osint_api_status` | Check API availability |
| `osint_query` | General AI query |

## Development

```bash
# Install with dev dependencies
pip install -e ".[dev]"

# Run in dev mode
fastmcp dev src/osint_mcp/server.py

# Run tests
pytest
```

## License

MIT