osint-mcp-server
Related Servers
Alternatives to osint-mcp-server
- AlicenseAqualityBmaintenanceRomanian public data with no API keys: ANAF company status by CUI (VAT, fiscally inactive, deregistered), filed financial statements, Portal Just court cases and BNR exchange rates. Includes shop_check, which flags whether an online shop looks like a scam.628 PyPIMIT
Related Servers
- AlicenseNot gradedqualityBmaintenancePassive external attack-surface mapping server that discovers subdomains, DNS records, TLS posture, HTTP headers, and registration data via public sources like CT logs, Shodan, and RDAP/WHOIS, enabling security reconnaissance without active scanning.195 npm2Apache 2.0
- FlicenseNot gradedqualityDmaintenanceEnables external reconnaissance activities including DNS enumeration, subdomain discovery, email security analysis, and SSL certificate inspection against a target domain.14-
- AlicenseNot gradedqualityBmaintenanceEnables agents to map a domain's public technology and identity footprint — email providers and controls, identity indicators, SaaS, and cloud infrastructure — as evidence-backed, machine-readable observations marked passive by default, where missing evidence reads as "not observed" rather than "not used". Runs locally with one-domain lookups, multi-domain comparisons, and explicit collection failures.728 PyPI5Apache 2.0
- AlicenseAqualityCmaintenanceEnables MCP-compatible AI clients to run passive OSINT investigation tools for domains, IPs, emails, usernames, breaches, DNS, WHOIS, and reputation checks through natural-language tool calls. It exposes 16 passive tools by default, plus graph and batch helpers, with additional active tools available when explicitly enabled.20MIT
- AlicenseAqualityBmaintenanceEnables passive subdomain enumeration from certificate transparency logs and DNS, with host resolution, certificate history, and attack-surface summaries for authorized security reconnaissance.4MIT
- AlicenseBqualityBmaintenanceEnables AI agents to investigate domains, emails, IPs, hashes, URLs, onion addresses, Bitcoin addresses and CVEs across 68 tools spanning 19 threat-intelligence and dark-web source categories, returning bounded evidence with provenance, coverage and explicit skipped, errored or inconclusive checks. It also ships a local investigation dashboard for running combined lookups, reviewing source readiness and downloading JSON reports.682MIT
TDQS
Scored across 15 tools
Most tools have clearly distinct purposes, but the aggregate recon_domain and investigate_site overlap in scope with several single-purpose tools. Descriptions explicitly guide the agent on when to use each, but the boundary between passive domain overview and active site investigation could still cause misselection.
Names mix noun_noun (domain_whois, dns_lookup), verb_noun (compare_domains, investigate_site), recon_ prefixes (recon_domain, recon_batch), and single words (subdomains, wayback). The set remains readable, but no single predictable convention governs all tools.
15 tools is well within a reasonable range for a domain OSINT server and each tool targets a distinct data source or operation (WHOIS, DNS, TLS, CT logs, Wayback, Shodan, ASN, etc.). No tool feels redundant or like padding.
The surface covers core domain OSINT needs: registration, DNS, email security, TLS, HTTP headers, certificate transparency, Wayback, IP ownership/routing, and Shodan ports. Minor gaps include no historical DNS lookup, no registrant-to-domain pivoting, and no active port scanning, but agents can largely work around these.