# OpenOSINT **Category:** ๐Ÿ’ฌ Communication **Repository:** https://github.com/OpenOSINT/OpenOSINT **Views:** 0 **Installs:** 0 **Upvotes:** 0 **Directory Page:** https://allmcps.com/mcp/openosint ## Description AI-powered OSINT agent & MCP server. 16 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more. ## Claude Desktop Quick Installation Heuristic fallback โ€” verify the package name and runner against the repository README before running it. Uses `npx` (confidence: low): ```json "mcpServers": { "openosint": { "command": "npx", "args": ["-y","openosint"] } } ``` ## Documentation & README mcp-name: io.github.OpenOSINT/openosint
OpenOSINT

OpenOSINT

OSINT agent for security researchers and analysts: 19 investigation tools behind a natural-language interface.

Use it as a REPL, CLI, MCP server, or browser Web UI.

The AI issues hard-stop tool calls; your code executes the real binary โ€” hallucinated findings are structurally impossible.

[![Release](https://img.shields.io/github/v/release/OpenOSINT/OpenOSINT?style=flat-square)](https://github.com/OpenOSINT/OpenOSINT/releases) [![PyPI](https://img.shields.io/pypi/v/openosint?style=flat-square)](https://pypi.org/project/openosint/) [![PyPI downloads](https://img.shields.io/pypi/dm/openosint?style=flat-square&label=PyPI%20downloads)](https://pypi.org/project/openosint/) [![License MIT](https://img.shields.io/badge/license-MIT-green?style=flat-square)](LICENSE) [![GitHub Stars](https://img.shields.io/github/stars/OpenOSINT/OpenOSINT?style=flat-square)](https://github.com/OpenOSINT/OpenOSINT/stargazers) [![MCP](https://img.shields.io/badge/protocol-MCP-blueviolet?style=flat-square)](https://modelcontextprotocol.io/) [![MCP Registry](https://img.shields.io/badge/MCP_Registry-published-blueviolet?style=flat-square)](https://registry.modelcontextprotocol.io/servers/io.github.OpenOSINT/openosint) [![Sponsored by IP2Location](https://img.shields.io/badge/sponsored%20by-IP2Location.io-FF6B35?style=flat-square)](https://www.ip2location.io/?utm_source=openosint&utm_medium=readme&utm_campaign=ip2location) [![Sponsored by RapidProxy](https://img.shields.io/badge/sponsored%20by-RapidProxy-F2622B?style=flat-square)](https://www.rapidproxy.io/?ref=openosint&utm_source=openosint&utm_medium=readme&utm_campaign=rapidproxy)
### Featured Integrations IP2Location.io logo **[IP2Location.io](https://www.ip2location.io/?utm_source=openosint&utm_medium=readme&utm_campaign=ip2location)** โ€” powers `search_ip2location` ยท [Integration guide](docs/integrations/ip2location.md) > Enhanced IP geolocation, ISP, VPN/Proxy/Tor, and datacenter detection RapidProxy logo **[RapidProxy](https://www.rapidproxy.io/?ref=openosint&utm_source=openosint&utm_medium=readme&utm_campaign=rapidproxy)** ยท [Integration guide](docs/integrations/rapidproxy.md) > Reliable Residential Proxies for Data Collection & Automation โ€” 90M+ IPs across 200+ countries. 10% off: RAPID10. _Open: Breach / Compromised-Credential Data ยท Email / Identity Lookup โ€” see [SPONSORSHIP.md](SPONSORSHIP.md)._
OpenOSINT running a DNS lookup and returning records in under two seconds
```bash pip install openosint ``` **Paid:** [Complete Kit โ€” $55](https://tommasodev.gumroad.com/l/ai-osint-complete-kit?utm_source=github&utm_medium=readme&utm_campaign=complete_kit) (prompts + playbook, bundled) ยท [Setup Sprint โ€” $350](https://tommasodev.gumroad.com/l/osint-mcp-setup-sprint?utm_source=github&utm_medium=readme&utm_campaign=setup_sprint) (done-for-you install) ยท [Commercial License โ€” from โ‚ฌ300/yr](./COMMERCIAL.md) (vendor contract, SLA, indemnification) ## Quick Start ```bash # Interactive AI REPL (default) openosint # Web interface openosint web # Direct tool (no AI) openosint email target@example.com ``` New to OSINT methodology? Grab the [free 5-prompt starter set](https://tommasodev.gumroad.com/l/free-osint-prompts?utm_source=github&utm_medium=readme_quickstart&utm_campaign=free_starter) or the [free Playbook edition](https://tommasodev.gumroad.com/l/ai-osint-operators-playbook-free?utm_source=github&utm_medium=readme_quickstart&utm_campaign=free_manual) before your first run. ### ๐Ÿ“ฌ Agents & OSINT โ€” the newsletter One AI-OSINT workflow you can run + a ruthless roundup of what's new, every week. **[Subscribe โ†’](https://agentsosint.substack.com)** ## Run in the cloud (no install) No Python, no `holehe` / `sherlock` / `sublist3r` / `phoneinfoga` binaries in `PATH`, no API keys โ€” run OpenOSINT Email Recon from your browser, or as an MCP tool in Claude, Cursor, and Windsurf via the [Apify MCP Server](https://apify.com/apify/actors-mcp-server). Try for free. **[Try OpenOSINT Email Recon on Apify โ†’](https://apify.com/complete_analogy/openosint-email-recon)** ## Usage Start the REPL and investigate any target โ€” the agent decides which tools to run and chains them on findings: ```text openosint > investigate target@example.com -> generate_dorks('target@example.com') -> search_email('target@example.com') Found: Spotify, WordPress, Gravatar, Office365 -> search_breach('target@example.com') Found in 2 breaches: LinkedIn (2016), Adobe (2013) -> search_username('johndoe99') <- pivoted from email findings Found: GitHub, Reddit, Twitter Report saved -> reports/2026-05-11_14-32-11_report.md ``` ## Features | Capability | Details | |---|---| | AI tool chaining | The agent selects and chains tools based on findings; describe the target in plain language | | 19 modular tools | Email, username, breach, WHOIS, IP, subdomain, dorks, paste, phone, Shodan, VirusTotal, Censys, IP2Location, AbuseIPDB, GitHub, DNS, live dork search, URL scraping, SERP footprint | | Three AI backends | Anthropic Claude (default), local Ollama, or any OpenAI-compatible endpoint (LiteLLM, vLLM, LM Studio, ...) | | Native MCP server | All 19 tools exposed to Claude Code, Claude Desktop, and any MCP-compatible client โ€” no extra config | | Parallel execution | `--parallel` runs complementary tools concurrently via `asyncio.gather()` | | Reports | PDF + Markdown auto-saved after every investigation (`reportlab` optional) | | Session history | All REPL sessions saved to `~/.openosint/history/`; browse with `openosint history` | | Web UI | Browser-based AI chat with streaming output, tool cards, light/dark theme | --- > **Legal Disclaimer**: OpenOSINT is intended for **legal and authorized use only**. > Users are solely responsible for ensuring their use complies with all applicable laws and regulations. > The authors accept no liability for misuse. See [DISCLAIMER.md](DISCLAIMER.md). ## Custom Integrations Need OpenOSINT wired into your SOC, fraud, threat-intel, or AI-agent stack? I build bespoke OSINT integrations for teams โ€” you bring the data sources and compliance requirements, I deliver a working integration. โ†’ **[Get in touch](mailto:commercial@openosint.tech?subject=OpenOSINT%20Custom%20Integration)** --- ## Tools | Tool | Powered by | What it investigates | |------|-----------|---------------------| | `search_email` | holehe | Social accounts linked to an email address | | `search_username` | sherlock | Username presence across 300+ platforms | | `search_breach` | HaveIBeenPwned v3 API | Data breach exposure | | `search_whois` | python-whois | Domain registrant and DNS info | | `search_ip` | ipinfo.io | Geolocation, ASN, hostname | | `search_domain` | sublist3r | Subdomain enumeration | | `generate_dorks` | built-in | 12 targeted Google dork URLs (no network calls) | | `search_paste` | psbdmp.ws | Pastebin dump mentions | | `search_phone` | phoneinfoga | Carrier, country, line type | | `search_shodan` | Shodan API | Open ports, banners, CVEs | | `search_virustotal` | VirusTotal API v3 | Verdict from 70+ antivirus engines | | `search_ip2location` | IP2Location.io API | Enhanced IP intel: VPN/Proxy/Tor/datacenter flags *(sponsored)* | | `search_censys` | Censys Search API | Internet-facing infrastructure, certificates | | `search_abuseipdb` | AbuseIPDB v2 API | IP abuse reputation: confidence score, reports, country, ISP | | `search_github` | GitHub REST API | Profile, repos, commit-discovered emails, username/keyword search | | `search_dns` | dnspython (built-in) | A/AAAA/MX/NS/TXT/CNAME/SOA records; SPF, DMARC, DKIM analysis | | `search_dorks_live` | Bright Data SERP API | Live Google search results for dork queries (title, URL, snippet) | | `scrape_url` | Bright Data Web Unlocker | Fetch any URL bypassing Cloudflare/CAPTCHA โ€” returns clean Markdown | | `search_footprint` | Bright Data SERP API | Entity-type-aware public search-engine footprint: detects email/username/domain/phone/name and returns structured results + Entity Correlation Graph nodes/edges | Full per-tool documentation, CLI flags, and output formats: [openosint.tech](https://openosint.tech/). ### search_email Enumerates online services linked to an email address using [holehe](https://github.com/megadose/holehe). ```bash openosint email target@example.com ``` ```text [+] Spotify https://open.spotify.com/user/target [+] WordPress https://wordpress.com/target [+] Gravatar https://gravatar.com/target [+] Office365 email used ``` ### search_username Searches for a username across 300+ platforms using [sherlock](https://github.com/sherlock-project/sherlock). ```bash openosint username johndoe99 ``` ```text [+] GitHub https://github.com/johndoe99 [+] Twitter https://twitter.com/johndoe99 [+] Reddit https://reddit.com/user/johndoe99 ``` ### search_breach Checks data breach exposure via [HaveIBeenPwned v3 API](https://haveibeenpwned.com/API/v3). Requires `HIBP_API_KEY`. ```text [+] LinkedIn (2016-05-05) โ€” leaked: Email addresses, Passwords [+] Adobe (2013-10-04) โ€” leaked: Email addresses, Password hints ``` ### search_whois Retrieves WHOIS data using [python-whois](https://github.com/richardpenman/whois). ```text [+] Registrar: ICANN [+] Created: 1995-08-14 [+] Expires: 2024-08-13 [+] Name Servers: A.IANA-SERVERS.NET ``` ### search_ip Retrieves geolocation and ASN data via [ipinfo.io](https://ipinfo.io). Free tier: 50k/month. ```text [+] Hostname: dns.google [+] Org: AS15169 Google LLC [+] City: Mountain View, CA, US ``` ### search_domain Enumerates subdomains using [sublist3r](https://github.com/aboul3la/Sublist3r). ```text [+] mail.example.com [+] dev.example.com [+] api.example.com ``` ### generate_dorks Generates 12 targeted Google dork URLs for any target. No network calls. ```text [+] "johndoe" site:linkedin.com https://www.google.com/search?q=%22johndoe%22+site%3Alinkedin.com [+] "johndoe" leaked OR breach OR dump https://www.google.com/search?q=%22johndoe%22+leaked+OR+breach+OR+dump ``` ### search_paste Searches Pastebin dumps via [psbdmp.ws](https://psbdmp.ws). ```text [+] https://pastebin.com/aB1cD2eF (2023-04-12) [+] https://pastebin.com/xY3zA4bC (2022-11-08) ``` ### search_phone Gathers phone intelligence using [phoneinfoga](https://github.com/sundowndev/phoneinfoga). Use E.164 format. ```text [+] Country: United States [+] Carrier: AT&T [+] Line type: Mobile ``` ### search_shodan IPv4 input โ†’ host lookup (open ports, org, CVEs). Any other query โ†’ banner/keyword search. Requires `SHODAN_API_KEY`. ```bash openosint shodan 8.8.8.8 openosint shodan "apache port:80 country:DE" ``` ```text [+] Org: Google LLC | Open ports: 53, 443 ``` ### search_virustotal Checks an IP, domain, URL, or file hash against [VirusTotal](https://www.virustotal.com)'s 70+ engines. Auto-detects input type. Requires `VIRUSTOTAL_API_KEY`. ```bash openosint virustotal 8.8.8.8 openosint virustotal example.com openosint virustotal 44d88612fea8a8f36de82e1278abb02f ``` ```text [VirusTotal] Malicious: 0 / Harmless: 72 ``` ### search_ip2location Queries [IP2Location.io](https://www.ip2location.io) for enhanced IP intelligence: geolocation, ISP, ASN, and โ€” on the Security Plan โ€” VPN/Proxy/Tor/datacenter detection. Sponsored integration. Requires `IP2LOCATION_API_KEY`. ```bash openosint ip2location 8.8.8.8 ``` ```text [IP2Location] City: Mountain View, CA, US | ISP: Google LLC [IP2Location] VPN: No | Proxy: No | TOR: No | Datacenter: Yes ``` ### search_censys IPv4 โ†’ host view (open ports, services, ASN). Domain โ†’ certificate search (SANs, issuer). Requires `CENSYS_API_ID` and `CENSYS_SECRET`. ```bash openosint censys 8.8.8.8 openosint censys example.com ``` ```text [Censys] Open Ports: 53, 443, 853 | ASN: AS15169 Google LLC ``` ### search_abuseipdb Checks an IP against [AbuseIPDB](https://www.abuseipdb.com) v2. Returns abuse confidence score, total reports, country, ISP, and last reported timestamp. Requires `ABUSEIPDB_API_KEY`. ```bash openosint abuseipdb 198.51.100.1 ``` ```text [AbuseIPDB] Abuse Confidence Score: 87% | Total Reports: 143 โš ๏ธ HIGH ABUSE CONFIDENCE โ€” flagged by AbuseIPDB ``` Warning appears when `abuseConfidenceScore` exceeds 50%. ### search_github Queries [GitHub REST API](https://docs.github.com/en/rest). Username โ†’ profile, repos, commit-discovered emails. Keyword โ†’ user/repo search. Optional `GITHUB_TOKEN` raises rate limit from 60 to 5000 req/h. ```bash openosint github johndoe99 ``` ```text [GitHub] Repos: 42 | Followers: 128 [GitHub] Commit email: johndoe@example.com ``` ### search_dns Queries A/AAAA/MX/NS/TXT/CNAME/SOA records and analyzes SPF, DMARC, and DKIM configuration using [dnspython](https://www.dnspython.org) (no external API). ```bash openosint dns example.com ``` ```text [DNS] A: 93.184.216.34 [DNS] MX: mail.example.com (priority 10) [DNS] SPF: v=spf1 include:_spf.google.com ~all ``` ### search_dorks_live Executes live Google dork queries through the [Bright Data SERP API](https://get.brightdata.com/984ni58s2oad?utm_source=github&utm_medium=readme)ยน, returning structured results (title, URL, snippet). Defaults to 5 dorks per run; each is a separate billable API call. Requires `BRIGHTDATA_API_KEY` and `BRIGHTDATA_SERP_ZONE`. ```bash openosint search-dorks-live "john doe" --max-dorks 3 ``` ```text [+] Dork: "john doe" site:linkedin.com Title: John Doe | LinkedIn URL: https://www.linkedin.com/in/john-doe-12345 ``` ### scrape_url Fetches any public URL through [Bright Data Web Unlocker](https://get.brightdata.com/984ni58s2oad?utm_source=github&utm_medium=readme)ยน, bypassing Cloudflare/CAPTCHA. Returns clean Markdown. Requires `BRIGHTDATA_API_KEY` and `BRIGHTDATA_UNLOCKER_ZONE`. ```bash openosint scrape https://example.com ``` ```text [Web Unlocker] Remote status: 200 # Example Domain This domain is for use in illustrative examples in documents. ``` ### search_footprint Collects a target's public search-engine footprint via [Bright Data SERP API](https://get.brightdata.com/984ni58s2oad?utm_source=github&utm_medium=readme)ยน. Detects entity type (email, username, domain, phone, or full name) and runs entity-type-aware Google queries, returning structured results plus Entity Correlation Graph nodes/edges for discovered domains and profiles. Requires `BRIGHTDATA_API_KEY` and `BRIGHTDATA_SERP_ZONE`. ```bash openosint footprint johndoe99 ``` --- ## Interfaces ### Web UI ```bash pip install "openosint[web]" openosint web # Opens http://localhost:8080 automatically ``` Browser-based AI chat with streaming tool output, inline result cards, light/dark theme toggle. Supports local inference via Ollama or any OpenAI-compatible endpoint โ€” no Anthropic API key required.
OpenOSINT Web UI โ€” live entity correlation graph demo: investigating openosint.tech

Try the live demo โ†’ โ€” bring your own Anthropic / OpenRouter / Ollama key, no signup.

```bash # Fully local (no API key) โ€” requires Ollama runtime: https://ollama.com ollama pull llama3.2 openosint web # Settings -> Ollama (local) -> model: llama3.2 # OpenAI-compatible endpoint (LiteLLM, vLLM, LM Studio, ...) export OPENAI_BASE_URL="http://localhost:4000/v1" openosint web # Settings -> OpenAI API ``` ### Interactive REPL Run `openosint` with no arguments to start the AI-powered REPL:
OpenOSINT terminal REPL demo
**REPL commands:** | Command | Description | |---------|-------------| | `` | Investigate any target โ€” email, username, domain, IP, name | | `clear` | Reset conversation memory | | `save` | Save last report to `reports/` | | `tools` | List available tools and their status | | `config` | Show current configuration | | `history` | Browse saved sessions | | `help` | Show all commands | | `exit` / Ctrl-D | Exit | All sessions are auto-saved to `~/.openosint/history/`. Browse with `openosint history`. For the REPL/CLI with an OpenAI-compatible backend: ```bash pip install "openosint[openai]" openosint --provider openai \ --openai-base-url http://localhost:4000/v1 \ --openai-model gpt-4o-mini ``` ### Live Documentation Full per-tool reference, CLI flags, and configuration options at [openosint.tech](https://openosint.tech/).
openosint.tech documentation tour
### MCP Server Expose all 19 OpenOSINT tools to any MCP-compatible AI client. Once connected, Claude can natively invoke all 19 tools during conversations. **Claude Code:** ```bash claude mcp add openosint python /absolute/path/to/OpenOSINT/openosint/mcp_server.py claude mcp list ``` **Claude Desktop** โ€” add to `~/Library/Application Support/Claude/claude_desktop_config.json`: ```json { "mcpServers": { "openosint": { "command": "python", "args": ["/absolute/path/to/OpenOSINT/openosint/mcp_server.py"] } } } ``` Prefer zero setup? The [OpenOSINT Email Recon Actor](https://apify.com/complete_analogy/openosint-email-recon) is also available as a hosted MCP tool via the [Apify MCP Server](https://apify.com/apify/actors-mcp-server) โ€” no server to run, no config file to edit. Try for free. **Agentic use via Claude Code:** ```text $ claude > Investigate target@example.com. Trace any username found across other platforms and compile a full report. ``` --- ## Installation ```bash # From PyPI (recommended) pip install openosint # From source git clone https://github.com/OpenOSINT/OpenOSINT.git cd OpenOSINT pip install -e . ``` **External binaries** (must be in `PATH`): | Binary | Purpose | Install | |--------|---------|---------| | `holehe` | Email account enumeration | `pip install holehe` | | `sherlock` | Username enumeration (300+ platforms) | `pip install sherlock-project` | | `sublist3r` | Subdomain enumeration | `pip install sublist3r` | | `phoneinfoga` | Phone number intelligence | [Download binary](https://github.com/sundowndev/phoneinfoga/releases) | If a binary is absent, the corresponding tool returns a descriptive error. All other tools remain operational. Don't want to install these locally? The [OpenOSINT Email Recon Actor](https://apify.com/complete_analogy/openosint-email-recon) runs email recon in Apify's cloud โ€” zero dependencies, zero local setup. **Optional Python packages:** | Package | Purpose | Install | |---------|---------|---------| | `ollama` | Local LLM backend (no API key) | `pip install ollama` *(also requires [Ollama runtime](https://ollama.com))* | | `openai` | OpenAI-compatible backend | `pip install "openosint[openai]"` | | `shodan` | Shodan API client | `pip install shodan` | | `reportlab` | PDF report export | `pip install reportlab` | | `censys` | Censys API client | `pip install censys` | ## Configuration Store keys in a `.env` file at the project root (copy `.env.example`). `python-dotenv` loads it automatically at startup. | Variable | Tool | Required | Purpose | |----------|------|----------|---------| | `ANTHROPIC_API_KEY` | AI agent | Yes (or Ollama / OpenAI) | Anthropic API key | | `OPENAI_BASE_URL` | AI agent | Optional | Base URL of an OpenAI-compatible endpoint (e.g. `http://localhost:4000/v1`) | | `OPENAI_API_KEY` | AI agent | Optional | API key for the endpoint (local servers may ignore it) | | `OPENAI_MODEL` | AI agent | Optional | Model name to request (default: `gpt-4o-mini`) | | `HIBP_API_KEY` | `search_breach` | Optional | HaveIBeenPwned v3 โ€” [get one](https://haveibeenpwned.com/API/Key) | | `IPINFO_TOKEN` | `search_ip` | Optional | ipinfo.io higher rate limits | | `SHODAN_API_KEY` | `search_shodan` | Optional | Shodan API โ€” [get one](https://account.shodan.io) | | `VIRUSTOTAL_API_KEY` | `search_virustotal` | Optional | VirusTotal API v3 โ€” [get one](https://www.virustotal.com/gui/my-apikey) | | `IP2LOCATION_API_KEY` | `search_ip2location` | Optional | IP2Location.io โ€” [get one](https://www.ip2location.io/pricing) *(sponsored)* | | `CENSYS_API_ID` + `CENSYS_SECRET` | `search_censys` | Optional | Censys โ€” [get one](https://censys.io/account) | | `ABUSEIPDB_API_KEY` | `search_abuseipdb` | Optional | AbuseIPDB v2 โ€” [get one](https://www.abuseipdb.com/account/api) | | `GITHUB_TOKEN` | `search_github` | Optional | GitHub API โ€” raises rate limit 60 โ†’ 5000 req/h โ€” [get one](https://github.com/settings/tokens) | | `BRIGHTDATA_API_KEY` | `search_dorks_live`, `scrape_url`, `search_footprint` | Optional | Bright Data โ€” [get one](https://get.brightdata.com/984ni58s2oad?utm_source=github&utm_medium=readme)ยน (free tier: 5,000 req/month) | | `BRIGHTDATA_SERP_ZONE` | `search_dorks_live`, `search_footprint` | Optional | Your Bright Data SERP zone name (e.g. `serp_api1`) | | `BRIGHTDATA_UNLOCKER_ZONE` | `scrape_url` | Optional | Your Bright Data Web Unlocker zone name (e.g. `web_unlocker1`) | ## CLI Reference | Flag / Subcommand | Description | |---|---| | `openosint` | Interactive AI REPL (default) | | `openosint web [--port N] [--no-browser]` | Launch browser UI | | `openosint email ADDRESS [-t N]` | Direct email scan | | `openosint username HANDLE [-t N]` | Direct username scan | | `openosint shodan QUERY [-t N]` | Shodan lookup | | `openosint virustotal TARGET [-t N]` | VirusTotal lookup | | `openosint censys TARGET [-t N]` | Censys lookup | | `openosint ip2location IP [-t N]` | IP2Location lookup | | `openosint abuseipdb IP [-t N]` | AbuseIPDB reputation check | | `openosint github QUERY [-t N]` | GitHub profile/repo/email discovery | | `openosint dns DOMAIN [-t N]` | DNS records + email security analysis | | `openosint multi TARGETS` | Parallel multi-target investigation (max 10) | | `openosint history [--all] [open N] [clear]` | View/manage REPL session history | | `-v, --verbose` | Enable debug logging to stderr | | `-t, --timeout N` | Override subprocess timeout (seconds) | | `--api-key KEY` | Anthropic API key (overrides env var) | | `--parallel` | Run complementary tools concurrently | | `--json` | Output results as structured JSON | | `--provider {anthropic,ollama,openai}` | AI provider (default: `anthropic`) | | `--ollama-model MODEL` | Ollama model name (default: `llama3.2`) | | `--ollama-host URL` | Ollama server URL (default: `http://localhost:11434`) | | `--openai-base-url URL` | OpenAI-compatible endpoint base URL (env: `OPENAI_BASE_URL`) | | `--openai-model MODEL` | Model to request from the endpoint (default: `gpt-4o-mini`; env: `OPENAI_MODEL`) | | `--openai-api-key KEY` | API key for the endpoint (env: `OPENAI_API_KEY`) | | `--no-pdf` | Disable automatic PDF generation | ## Docker ```bash # Build and run docker compose up --build # One-off command docker compose run --rm openosint email target@example.com --json ``` Set `ANTHROPIC_API_KEY` (and optionally `HIBP_API_KEY`, `IPINFO_TOKEN`) in a `.env` file or export them before running `docker compose`. Reports are persisted to `./reports/` via a volume mount. **DigitalOcean App Platform:** see [`.do/app.yaml`](.do/app.yaml) for App Platform configuration. ## Integrations | Service | URL | Tool | Tier | Auth | |---------|-----|------|------|------| | IP2Location.io | https://www.ip2location.io | `search_ip2location` | Featured (sponsored) | API key โ€” free tier | | RapidProxy | https://www.rapidproxy.io/?ref=openosint | โ€” | Featured (sponsored) | โ€” | | AbuseIPDB | https://www.abuseipdb.com | `search_abuseipdb` | Community | API key โ€” free tier | | Censys | https://censys.io | `search_censys` | Community | API key โ€” free tier | | GitHub | https://github.com | `search_github` | Community | Token optional | | HaveIBeenPwned | https://haveibeenpwned.com | `search_breach` | Community | API key โ€” paid | | holehe | https://github.com/megadose/holehe | `search_email` | Community | None โ€” local binary | | ipinfo.io | https://ipinfo.io | `search_ip` | Community | Token optional | | phoneinfoga | https://github.com/sundowndev/phoneinfoga | `search_phone` | Community | None โ€” local binary | | psbdmp.ws | https://psbdmp.ws | `search_paste` | Community | None | | sherlock | https://github.com/sherlock-project/sherlock | `search_username` | Community | None โ€” local binary | | Shodan | https://shodan.io | `search_shodan` | Community | API key โ€” free tier | | sublist3r | https://github.com/aboul3la/Sublist3r | `search_domain` | Community | None โ€” local binary | | VirusTotal | https://www.virustotal.com | `search_virustotal` | Community | API key โ€” free tier | | WHOIS (IANA) | https://www.iana.org/whois | `search_whois` | Community | None | | DNS (system resolver) | โ€” | `search_dns` | Community | None | | Google Search | https://www.google.com | `generate_dorks` | Community | None | ## Get the Method OpenOSINT is the tool. The **AI OSINT Complete Kit** ($55) is the method: the Prompt Pack and the Operator's Playbook, bundled. **โ†’ [Get the Complete Kit ($55)](https://tommasodev.gumroad.com/l/ai-osint-complete-kit?utm_source=github&utm_medium=readme&utm_campaign=complete_kit)** ### AI OSINT Prompt Pack OpenOSINT gives you the tooling. The **AI OSINT Prompt Pack** gives you the method: 30+ tested prompts across 8 target types, with one repeatable collect โ†’ pivot โ†’ verify โ†’ document flow for running OpenOSINT investigations. - Email, username, domain, IP, phone, company due-diligence, image & reporting prompts - One repeatable investigation flow + an ethics & legal primer - Instant download ยท pairs directly with OpenOSINT **โ†’ [Get the Prompt Pack ($29)](https://tommasodev.gumroad.com/l/ai-osint-prompt-pack?utm_source=github&utm_medium=readme&utm_campaign=prompt_pack)** ### AI OSINT Operator's Playbook Step-by-step workflows for running investigations with ChatGPT, Claude, and OpenOSINT. **โ†’ [Get the Playbook ($39)](https://tommasodev.gumroad.com/l/ai-osint-playbook?utm_source=github&utm_medium=readme&utm_campaign=operator_playbook)** _Buying directly funds OpenOSINT's development._ ### AI OSINT Prompts โ€” Free Starter Set New to AI-assisted OSINT? The **free starter set** gives you 5 structured prompts โ€” one per stage of a real investigation โ€” that make ChatGPT and Claude collect real public data instead of hallucinating it. - Scope โ†’ Collect โ†’ Pivot โ†’ Verify โ†’ Document - Works with any AI assistant (Claude, ChatGPT, Gemini) - Instant PDF, no card required **โ†’ [Get the free starter set](https://tommasodev.gumroad.com/l/free-osint-prompts?utm_source=github&utm_medium=readme&utm_campaign=free_starter)** ### AI OSINT Operator's Playbook โ€” Free Edition The free edition walks the 5-phase method once, end to end, on a single worked case: scope โ†’ collect โ†’ pivot โ†’ verify โ†’ document. Includes one sample prompt and the confidence rubric used to grade findings. - Free edition: the method + one worked investigation - Full edition ($39): 12 complete workflows, per-tool playbooks, reporting templates, and the legal/ethics primer **โ†’ [Get the free edition](https://tommasodev.gumroad.com/l/ai-osint-operators-playbook-free?utm_source=github&utm_medium=readme&utm_campaign=free_manual)** ยท [Full Playbook ($39) โ†’](https://tommasodev.gumroad.com/l/ai-osint-playbook?utm_source=github&utm_medium=readme&utm_campaign=operator_playbook) ## Sponsor this project OpenOSINT is used by OSINT practitioners, security researchers, and developers actively evaluating intelligence APIs. Every time a user configures an integration, the docs route them to that provider's sign-up page โ€” high-intent exposure at the moment of adoption. **Featured Integration** ($2,000/year or $220/month): recommended/default provider for one tool category, exclusive. Logo + badge across README, docs, CLI banner, and Web UI. One vendor per category. Current sponsors and open categories are listed in the sponsor block at the top of this README. Full media kit, pricing, and the referral funnel: [SPONSORSHIP.md](SPONSORSHIP.md). [Open Collective](https://opencollective.com/openosint_oss) ยท [commercial@openosint.tech](mailto:commercial@openosint.tech?subject=OpenOSINT%20Sponsorship%20Inquiry) ยท [SPONSORSHIP.md](SPONSORSHIP.md) ## SERVICES The framework is free and MIT-licensed. This is an optional paid setup service offered by the maintainer. **OSINT-MCP Setup Sprint** โ€” done-for-you installation and configuration of an autonomous OSINT-MCP pipeline on your environment. Fully async, no calls required. **Includes:** - Pre-configured OpenOSINT setup tailored to your stack (Claude Code, Claude Desktop, or any MCP client) - API keys wired in (Shodan, VirusTotal, IP2Location, HaveIBeenPwned, and others as needed) - One investigation workflow built around your use case - Written step-by-step setup guide + screen-recorded walkthrough **Delivery:** 3โ€“5 days, fully async. **For:** SOC analysts ยท threat-intel teams ยท fraud/AML ยท pentesters ยท OSINT investigators ### Need it set up for you? Get OpenOSINT wired into your stack in 3โ€“5 days โ€” done-for-you, fully async, no calls. **[Book the Setup Sprint โ†’ $350 (founding price, first 5 teams)](https://tommasodev.gumroad.com/l/osint-mcp-setup-sprint?utm_source=github&utm_medium=readme&utm_campaign=setup_sprint)** โ†’ Or email [commercial@openosint.tech](mailto:commercial@openosint.tech) ยท [LinkedIn](https://www.linkedin.com/company/openosintoss) *For authorized use only. See [DISCLAIMER.md](DISCLAIMER.md).* ## Commercial License & Support OpenOSINT is free and MIT-licensed for everyone โ€” personal projects, commercial products, SaaS, and closed-source are all covered with no purchase required. Organizations that additionally need a vendor contract, written warranty, indemnification, SLA, or priority support for procurement and compliance can purchase a commercial plan. Three tiers available from โ‚ฌ300/year โ€” see [COMMERCIAL.md](./COMMERCIAL.md) for full details and pricing. Contact: [commercial@openosint.tech](mailto:commercial@openosint.tech?subject=OpenOSINT%20Commercial%20Plan%20Inquiry). ## Contributing Issues and pull requests are welcome. See [CONTRIBUTING.md](CONTRIBUTING.md) for the development workflow, integration registration checklist, and coding conventions. Please read [DISCLAIMER.md](DISCLAIMER.md) before contributing. ### Regenerating the demo GIF/MP4 ```bash export OPENOSINT_DEMO_KEY=sk-ant-... # your Anthropic key โ€” never committed openosint --web & # start the web server on :8080 make demo # record -> encode -> write docs/assets/demo-web-graph.* git add docs/assets/demo-web-graph.* ``` See [`scripts/record-demo/README.md`](scripts/record-demo/README.md) for full prerequisites and pipeline details. ## Maintainer **Tommaso Bertocchi** - X (personal): https://x.com/SonoTommy_ - X (OpenOSINT): https://x.com/openosint_oss - LinkedIn: https://www.linkedin.com/company/openosintoss - Email: commercial@openosint.tech ## Contributors | Contributor | Contribution | |---|---| | [@consocio](https://github.com/consocio) | venv/uv-tool binary resolution fix โ€” co-installed tools are now found without a separate activation step ([#6](https://github.com/OpenOSINT/OpenOSINT/pull/6)) | ## License OpenOSINT is open source under the [MIT License](./LICENSE) โ€” free for any use, including personal, commercial, academic, and closed-source. --- ยน Bright Data links in this README are affiliate/referral links โ€” OpenOSINT earns a commission if you sign up through them, at no extra cost to you. *For authorized security research only. See [DISCLAIMER.md](DISCLAIMER.md).* *OpenOSINT v2.25.0 โ€” July 2026* ## Star History [![Star History Chart](https://api.star-history.com/svg?repos=OpenOSINT/OpenOSINT&type=Date)](https://star-history.com/#OpenOSINT/OpenOSINT&Date)