Releases: badchars/osint-mcp-server
Releases · badchars/osint-mcp-server
Release list
v0.2.0 — CLI Mode + GitHub Action
What's New
CLI Mode
Run any of the 37 OSINT tools directly from the command line — no MCP client required:
# List all tools
npx osint-mcp-server --list
# Run a tool
npx osint-mcp-server --tool dns_lookup '{"domain":"example.com","type":"A"}'
npx osint-mcp-server --tool osint_domain_recon '{"domain":"example.com"}'
npx osint-mcp-server --tool dns_email_security '{"domain":"example.com"}' --format textGitHub Action
Use any tool in your CI/CD pipeline:
- uses: badchars/osint-mcp-server@v0.2.0
with:
tool: osint_domain_recon
args: '{"domain": "example.com"}'
- uses: badchars/osint-mcp-server@v0.2.0
with:
tool: dns_email_security
args: '{"domain": "example.com"}'
- uses: badchars/osint-mcp-server@v0.2.0
with:
tool: shodan_host
args: '{"ip": "1.2.3.4"}'
env:
SHODAN_API_KEY: ${{ secrets.SHODAN_API_KEY }}New Flags
| Flag | Description |
|---|---|
--tool <name> |
Run a specific tool by name |
--list |
List all 37 tools with descriptions and API key requirements |
--format json|text |
Output format (default: json) |
--help |
Show usage information |
CI Workflow
Added GitHub Actions CI workflow for build verification on push/PR.
Backward Compatible
Default behavior (no flags) still starts the MCP stdio server for AI agents. The CLI mode is additive.
Full Changelog: v0.1.0...v0.2.0
v0.1.0 — Initial Release
osint-mcp-server v0.1.0
OSINT & reconnaissance intelligence for AI agents — 37 tools across 12 data sources via the Model Context Protocol.
Quick Start
npx osint-mcp-serverHighlights
- 37 tools across 12 OSINT providers
- 21 free tools — DNS, WHOIS, crt.sh, GeoIP, BGP, Wayback Machine, HackerTarget, M365 — no API keys required
- 4 premium providers — Shodan (4 tools), VirusTotal (4), SecurityTrails (3), Censys (3) — optional API keys
- 2 dependencies —
@modelcontextprotocol/sdk+zod, everything else is nativefetch+dns/promises - Per-provider rate limiters — calibrated to each API's limits
- TTL caching — avoid redundant calls during multi-tool workflows
- Graceful degradation — missing API keys return descriptive messages, never crash
Tools by Category
| Category | Tools | Auth |
|---|---|---|
| DNS | dns_lookup, dns_reverse, dns_email_security, dns_spf_chain, dns_srv_discover, dns_wildcard_check |
Free |
| WHOIS/RDAP | whois_domain, whois_ip |
Free |
| crt.sh | crtsh_search |
Free |
| GeoIP | geoip_lookup, geoip_batch |
Free |
| BGP/ASN | bgp_asn, bgp_ip, bgp_prefix |
Free |
| Wayback | wayback_urls, wayback_snapshots |
Free |
| HackerTarget | hackertarget_hostsearch, hackertarget_reverseip, hackertarget_aslookup |
Free |
| M365 | m365_tenant, m365_userrealm |
Free |
| Meta | osint_list_sources, osint_domain_recon |
Free |
| Shodan | shodan_host, shodan_search, shodan_dns_resolve, shodan_exploits |
API Key |
| VirusTotal | vt_domain, vt_ip, vt_subdomains, vt_url |
API Key |
| SecurityTrails | st_subdomains, st_dns_history, st_whois |
API Key |
| Censys | censys_hosts, censys_host_details, censys_certificates |
API Key |
Connect to Your AI Agent
# Claude Code
claude mcp add osint-mcp-server -- npx osint-mcp-server
# Or add to Claude Desktop configDocumentation
README available in 23 languages: English, 简体中文, 繁體中文, 한국어, Deutsch, Español, Français, Italiano, Dansk, 日本語, Polski, Русский, Bosanski, العربية, Norsk, Português (Brasil), ไทย, Türkçe, Українська, বাংলা, Ελληνικά, Tiếng Việt, हिन्दी
Part of the MCP Security Suite
| Project | Domain |
|---|---|
| hackbrowser-mcp | Browser-based security testing |
| cloud-audit-mcp | Cloud security (AWS/Azure/GCP) |
| github-security-mcp | GitHub security posture |
| cve-mcp | Vulnerability intelligence |
| osint-mcp-server | OSINT & reconnaissance |