Skip to content

Releases: badchars/osint-mcp-server

v0.2.0 — CLI Mode + GitHub Action

Choose a tag to compare

@badchars badchars released this 17 Mar 01:27

What's New

CLI Mode

Run any of the 37 OSINT tools directly from the command line — no MCP client required:

# List all tools
npx osint-mcp-server --list

# Run a tool
npx osint-mcp-server --tool dns_lookup '{"domain":"example.com","type":"A"}'
npx osint-mcp-server --tool osint_domain_recon '{"domain":"example.com"}'
npx osint-mcp-server --tool dns_email_security '{"domain":"example.com"}' --format text

GitHub Action

Use any tool in your CI/CD pipeline:

- uses: badchars/osint-mcp-server@v0.2.0
  with:
    tool: osint_domain_recon
    args: '{"domain": "example.com"}'

- uses: badchars/osint-mcp-server@v0.2.0
  with:
    tool: dns_email_security
    args: '{"domain": "example.com"}'

- uses: badchars/osint-mcp-server@v0.2.0
  with:
    tool: shodan_host
    args: '{"ip": "1.2.3.4"}'
  env:
    SHODAN_API_KEY: ${{ secrets.SHODAN_API_KEY }}

New Flags

Flag Description
--tool <name> Run a specific tool by name
--list List all 37 tools with descriptions and API key requirements
--format json|text Output format (default: json)
--help Show usage information

CI Workflow

Added GitHub Actions CI workflow for build verification on push/PR.

Backward Compatible

Default behavior (no flags) still starts the MCP stdio server for AI agents. The CLI mode is additive.

Full Changelog: v0.1.0...v0.2.0

v0.1.0 — Initial Release

Choose a tag to compare

@badchars badchars released this 17 Mar 01:15

osint-mcp-server v0.1.0

OSINT & reconnaissance intelligence for AI agents — 37 tools across 12 data sources via the Model Context Protocol.

Quick Start

npx osint-mcp-server

Highlights

  • 37 tools across 12 OSINT providers
  • 21 free tools — DNS, WHOIS, crt.sh, GeoIP, BGP, Wayback Machine, HackerTarget, M365 — no API keys required
  • 4 premium providers — Shodan (4 tools), VirusTotal (4), SecurityTrails (3), Censys (3) — optional API keys
  • 2 dependencies@modelcontextprotocol/sdk + zod, everything else is native fetch + dns/promises
  • Per-provider rate limiters — calibrated to each API's limits
  • TTL caching — avoid redundant calls during multi-tool workflows
  • Graceful degradation — missing API keys return descriptive messages, never crash

Tools by Category

Category Tools Auth
DNS dns_lookup, dns_reverse, dns_email_security, dns_spf_chain, dns_srv_discover, dns_wildcard_check Free
WHOIS/RDAP whois_domain, whois_ip Free
crt.sh crtsh_search Free
GeoIP geoip_lookup, geoip_batch Free
BGP/ASN bgp_asn, bgp_ip, bgp_prefix Free
Wayback wayback_urls, wayback_snapshots Free
HackerTarget hackertarget_hostsearch, hackertarget_reverseip, hackertarget_aslookup Free
M365 m365_tenant, m365_userrealm Free
Meta osint_list_sources, osint_domain_recon Free
Shodan shodan_host, shodan_search, shodan_dns_resolve, shodan_exploits API Key
VirusTotal vt_domain, vt_ip, vt_subdomains, vt_url API Key
SecurityTrails st_subdomains, st_dns_history, st_whois API Key
Censys censys_hosts, censys_host_details, censys_certificates API Key

Connect to Your AI Agent

# Claude Code
claude mcp add osint-mcp-server -- npx osint-mcp-server

# Or add to Claude Desktop config

Documentation

README available in 23 languages: English, 简体中文, 繁體中文, 한국어, Deutsch, Español, Français, Italiano, Dansk, 日本語, Polski, Русский, Bosanski, العربية, Norsk, Português (Brasil), ไทย, Türkçe, Українська, বাংলা, Ελληνικά, Tiếng Việt, हिन्दी

Part of the MCP Security Suite

Project Domain
hackbrowser-mcp Browser-based security testing
cloud-audit-mcp Cloud security (AWS/Azure/GCP)
github-security-mcp GitHub security posture
cve-mcp Vulnerability intelligence
osint-mcp-server OSINT & reconnaissance