osint-mcp-server
Related Servers
Alternatives to osint-mcp-server
No user-submitted related servers found.
Related Servers
- AlicenseNot gradedqualityAmaintenancePassive external attack-surface mapping server that discovers subdomains, DNS records, TLS posture, HTTP headers, and registration data via public sources like CT logs, Shodan, and RDAP/WHOIS, enabling security reconnaissance without active scanning.267 npm1Apache 2.0
- FlicenseNot gradedqualityDmaintenanceEnables external reconnaissance activities including DNS enumeration, subdomain discovery, email security analysis, and SSL certificate inspection against a target domain.13-
- AlicenseAqualityFmaintenanceProvides comprehensive domain research tools including RDAP, WHOIS, and DNS lookup capabilities, with automatic fallback and support for 50+ TLDs.14 npm1MIT
- AlicenseAqualityBmaintenanceEnables AI agents to perform passive security scans on domains, checking email spoofing (DMARC/SPF/DKIM), TLS weaknesses, security headers, exposed files, and subdomain-takeover risk without needing an API key.747 npmMIT
- AlicenseAqualityCmaintenanceProvides AI agents with 37 OSINT tools and 12 data sources to perform unified reconnaissance, domain analysis, and attack surface mapping. It enables agents to query, correlate, and reason across platforms like Shodan, VirusTotal, and Censys in parallel.37174 npm55MIT
- AlicenseNot gradedqualityDmaintenanceEnables AI assistants to orchestrate OSINT reconnaissance pipelines, including subdomain takeover detection, URL harvesting, secret scanning, and JS analysis, by chaining 73 tools with smart target detection and deduplication.MIT
TDQS
Scored across 11 tools
Each tool targets a distinct data source or type: recon_domain is an aggregated overview, while domain_whois, ip_whois, dns_lookup, subdomains, wayback, http_headers, shodan_internetdb, email_security, tls_certificate, and asn_lookup each focus on a unique aspect (e.g., registration, DNS, certificates, email). There is minimal overlap; for example, subdomains and asn_lookup are clearly separate.
All tool names follow a consistent noun-based pattern (e.g., domain_whois, ip_whois, dns_lookup, tls_certificate). There is no mixing of styles or ambiguous verbs; the naming clearly indicates the data type being queried.
With 11 tools, the collection is well-scoped for a recon/information-gathering server. Each tool serves a distinct purpose in the security recon workflow, and the number is within the ideal range, avoiding both redundancy and insufficiency.
The toolset covers the major security recon surfaces: domain info, IP info, DNS, subdomains, HTTP headers, TLS, email security, and ASN. Minor gaps include missing passive DNS history, port scanning beyond InternetDB, or vulnerability scanning APIs, but agents can achieve common recon goals with the provided tools.