Robin: AI-Powered Dark Web OSINT
Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.
作者提供的说明(英文原文)
OSINT sweep of a digital footprint: breaches, accounts, data brokers, domains and IPs
我们还没有为它写通俗的介绍。下面是我们从注册中心读取到的事实。
选择你使用的 AI 应用,然后复制设置。
通过 3/3 项检查 · 在你的电脑上运行
第一步:你用哪个 AI?
选择你用的应用,步骤会显示在下方。
可连接 Claude,但需要先准备
需要 Clearfront 的密钥(在开发者网站注册,可能收费) · 需要先在电脑上安装 Python (uv)(只需一次) · 仅限电脑上的 Claude 应用(Windows 或 Mac),网页和手机不可用
SettingsDeveloperEdit Config
{
"mcpServers": {
"clearfront": {
"command": "uvx",
"args": [
"clearfront",
"clearfront-mcp"
],
"env": {
"HIBP_API_KEY": "your-value",
"IPINFO_TOKEN": "your-value",
"SHODAN_API_KEY": "your-value",
"VIRUSTOTAL_API_KEY": "your-value",
"ANTHROPIC_API_KEY": "your-value"
}
}
}
}只把密钥粘贴到应用的输入框里,不要粘贴到聊天中或发给任何人
用 Clearfront 告诉我你能帮我做什么,然后做一件给我看✓ 如果 Claude 说正在使用 Clearfront,或回答中出现 Clearfront 的工具名称,就表示连接成功
菜单名称已于 2026年11月11日 对照 Anthropic 帮助页面核实 · 你的界面可能因版本略有不同
ChatGPT 暂时无法连接 Clearfront
Clearfront 需要安装在你的电脑上,而 ChatGPT 只能连接在网上运行的服务器
A · 使用能连接 Clearfront 的应用
B · 网络安全 类中能连接 ChatGPT 的其他服务器
从同类中使用较多的里挑选,仅限用地址即可连接、无需密钥的
可连接 Claude Code,但需要先准备
需要 Clearfront 的密钥(在开发者网站注册,可能收费) · 需要先在电脑上安装 Python (uv)(只需一次)
打开开发者网站,注册账户并创建 API 密钥,下一步要用。可能收费。
获取密钥的方法见下方开发者的 README
Mac:按 Command+空格,输入 Terminal · Windows:打开 PowerShell
claude mcp add clearfront --env HIBP_API_KEY=your-value --env IPINFO_TOKEN=your-value --env SHODAN_API_KEY=your-value --env VIRUSTOTAL_API_KEY=your-value --env ANTHROPIC_API_KEY=your-value -- uvx clearfront clearfront-mcp按 Enter 前,把“your-value”改成你的密钥
只把密钥粘贴到应用的输入框里,不要粘贴到聊天中或发给任何人
应能看到 Clearfront 在列表中并显示已连接
用 Clearfront 告诉我你能帮我做什么,然后做一件给我看✓ 如果 Claude Code 说正在使用 Clearfront,或回答中出现 Clearfront 的工具名称,就表示连接成功
菜单名称已于 2026年11月11日 对照 Anthropic 帮助页面核实 · 你的界面可能因版本略有不同
可连接 Cursor,但需要先准备
需要 Clearfront 的密钥(在开发者网站注册,可能收费) · 需要先在电脑上安装 Python (uv)(只需一次)
打开开发者网站,注册账户并创建 API 密钥,下一步要用。可能收费。
获取密钥的方法见下方开发者的 README
在 Clearfront 的设置中,HIBP_API_KEY, IPINFO_TOKEN, SHODAN_API_KEY, VIRUSTOTAL_API_KEY, ANTHROPIC_API_KEY 还是空的,填入你的密钥并保存
只把密钥粘贴到应用的输入框里,不要粘贴到聊天中或发给任何人
用 Clearfront 告诉我你能帮我做什么,然后做一件给我看✓ 如果 Cursor 说正在使用 Clearfront,或回答中出现 Clearfront 的工具名称,就表示连接成功
菜单名称已于 2026年11月11日 对照 Cursor 帮助页面核实 · 你的界面可能因版本略有不同
可连接 VS Code,但需要先准备
需要 Clearfront 的密钥(在开发者网站注册,可能收费) · 需要先在电脑上安装 Python (uv)(只需一次)
打开开发者网站,注册账户并创建 API 密钥,下一步要用。可能收费。
获取密钥的方法见下方开发者的 README
在 Clearfront 的设置中,HIBP_API_KEY, IPINFO_TOKEN, SHODAN_API_KEY, VIRUSTOTAL_API_KEY, ANTHROPIC_API_KEY 还是空的,填入你的密钥并保存
只把密钥粘贴到应用的输入框里,不要粘贴到聊天中或发给任何人
用 Clearfront 告诉我你能帮我做什么,然后做一件给我看✓ 如果 VS Code 说正在使用 Clearfront,或回答中出现 Clearfront 的工具名称,就表示连接成功
菜单名称已于 2026年11月11日 对照 VS Code 帮助页面核实 · 你的界面可能因版本略有不同
Claude Code
claude mcp add clearfront --env HIBP_API_KEY=your-value --env IPINFO_TOKEN=your-value --env SHODAN_API_KEY=your-value --env VIRUSTOTAL_API_KEY=your-value --env ANTHROPIC_API_KEY=your-value -- uvx clearfront clearfront-mcpClaude Desktop (claude_desktop_config.json)
{
"mcpServers": {
"clearfront": {
"command": "uvx",
"args": [
"clearfront",
"clearfront-mcp"
],
"env": {
"HIBP_API_KEY": "your-value",
"IPINFO_TOKEN": "your-value",
"SHODAN_API_KEY": "your-value",
"VIRUSTOTAL_API_KEY": "your-value",
"ANTHROPIC_API_KEY": "your-value"
}
}
}
}Cursor (~/.cursor/mcp.json)
{
"mcpServers": {
"clearfront": {
"command": "uvx",
"args": [
"clearfront",
"clearfront-mcp"
],
"env": {
"HIBP_API_KEY": "your-value",
"IPINFO_TOKEN": "your-value",
"SHODAN_API_KEY": "your-value",
"VIRUSTOTAL_API_KEY": "your-value",
"ANTHROPIC_API_KEY": "your-value"
}
}
}
}VS Code (mcp.json)
{
"servers": {
"clearfront": {
"type": "stdio",
"command": "uvx",
"args": [
"clearfront",
"clearfront-mcp"
],
"env": {
"HIBP_API_KEY": "your-value",
"IPINFO_TOKEN": "your-value",
"SHODAN_API_KEY": "your-value",
"VIRUSTOTAL_API_KEY": "your-value",
"ANTHROPIC_API_KEY": "your-value"
}
}
}
}HIBP_API_KEY 机密 envIPINFO_TOKEN 机密 envSHODAN_API_KEY 机密 envVIRUSTOTAL_API_KEY 机密 envANTHROPIC_API_KEY 机密 env这些设置是根据作者在注册中心的条目生成的。如果 README 的写法不同,请以 README 为准。
依据这个服务器的连接方式和各应用自己的文档,检查于 2026年11月10日。
在你的电脑上运行,适用于
ClaudeGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatRaycast
它在你的电脑上运行;安装后,工具列表会显示在你的 AI 应用中。
我们检查的是任何人都能看到的信息;我们没有阅读代码。不适用的检查项不计入总数。 · 检查于 2026年11月12日
注册名称已通过域名 clearfront.sh 验证(注册中心会核实域名所有权)
代码最后更新于3个月前
使用 MIT
它在你的电脑上运行,没有互联网端点
在你的电脑上运行,改用本地设置
它在你的电脑上运行;我们只能读取互联网端点的工具列表
提问、分享技巧或报告无法使用。按“有帮助”数量排序。
还没有评价
与注册中心里这个分类中所有活跃的服务器比较。只有当发布者拥有该仓库时,星标数才计入。
它在 3 项适用的基础检查中通过了 3 项。我们没有阅读代码。在添加密钥或令牌之前,请先看看这个服务器要求哪些权限,并使用只具备所需权限的密钥。
你需要填写:HIBP_API_KEY, IPINFO_TOKEN, SHODAN_API_KEY, VIRUSTOTAL_API_KEY, ANTHROPIC_API_KEY
它在你的电脑上运行。你的 AI 应用会在需要时启动它,数据不会经过作者的服务器(除非它自己调用在线服务)。
GitHub 仓库最后更新于3个月前,最新版本(2.7.3)于3个月前进入注册中心。
支持 MCP 的应用,例如 Claude Desktop、Claude Code、Cursor 和 VS Code。你的电脑上还需要有 Python (uv)。
同一分类中有:Robin: AI-Powered Dark Web OSINT, HOL Guard, UniFi Network MCP
同一分类中其他作者的服务器,按星标数排序。
如何看卡片:↓ 每周下载量i★ GitHub 星标i三大支柱:评价 · 检查 · 使用情况i更新 = 最新版本发布到注册中心的时间i
Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.
Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.
Manage UniFi Network devices, clients, firewall, VLANs, VPNs, and more via MCP.
按原文从作者的仓库复制。PopNx MCP 没有审查或背书其内容。HTML、图片和脚本已被移除。链接会离开本站。
Clearfront Open-source AI intelligence on your digital footprint. Clearfront, also known as Clearfront OSINT, is a free and open-source OSINT agent. Give it an email, username, domain, IP, or name, and its AI security analyst scans 3,400+ public data sources in one sweep, then returns a calibrated report and an interactive evidence graph. Check your own exposure, or investigate an authorized target. It runs locally with your own API keys and sends nothing to us. Interactive REPL · CLI · local web console · MCP server · agent skill. Powered by Anthropic Claude, a local Ollama model, or any OpenAI-compatible endpoint.
[clearfront.sh](https://clearfront.sh) · Disclaimer
asyncio.gather() with hard subprocess timeoutsLegal Disclaimer: Clearfront is intended for legal and authorized use only.
Users are solely responsible for ensuring their use complies with all applicable laws and regulations.
The authors accept no liability for misuse. See DISCLAIMER.md.
Clearfront is an AI agent for Open Source Intelligence with five interfaces: an interactive terminal REPL, a direct CLI, a browser-based web console, an MCP server exposable to Claude Code, Claude Desktop or any MCP-compatible client, and an agent skill for any client following the Agent Skills standard. The AI layer uses Anthropic's native tool use API (or a local Ollama model, or any OpenAI-compatible endpoint): the model issues hard stops when it needs a tool, your code executes the real binary, the actual output goes back, hallucination in tool results is structurally impossible.
pip install clearfront
Or from source, if you want to modify it:
git clone https://github.com/scottmartinanderson/clearfront
cd clearfront pip install -e .
External binaries (must be in PATH):
| Binary | Purpose | Install |
|---|---|---|
holehe | Email account enumeration | pip install holehe |
sherlock | Username enumeration (300+ platforms) | pip install sherlock-project |
sublist3r | Subdomain enumeration | pip install sublist3r |
phoneinfoga | Phone number intelligence | Download binary |
theHarvester | Passive domain recon (emails/subdomains) | pip install git+https://github.com/laramies/theHarvester.git |
If a binary is absent, the corresponding tool returns a descriptive error string. All other tools remain operational.
# Interactive AI REPL (default)
clearfront
clearfront web
clearfront email target@example.com
Store all keys in a .env file at the project root (copy .env.example). python-dotenv loads it automatically at startup.
| Variable | Tool | Required | Purpose |
|---|---|---|---|
ANTHROPIC_API_KEY | AI agent | Yes (or use Ollama / OpenAI) | Anthropic API key |
OPENAI_BASE_URL | AI agent | Optional | Base URL of an OpenAI-compatible endpoint (e.g. http://localhost:4000/v1). When set and ANTHROPIC_API_KEY is absent, it is used as the AI backend (takes precedence over Ollama). The model must support tool/function calling. |
OPENAI_API_KEY | AI agent | Optional | API key for the OpenAI-compatible endpoint (local servers may ignore it) |
OPENAI_MODEL | AI agent | Optional | Model name to request from the endpoint (default: gpt-4o-mini) |
HIBP_API_KEY | search_breach | Optional | HaveIBeenPwned v3, get one |
IPINFO_TOKEN | search_ip | Optional | ipinfo.io higher rate limits |
SHODAN_API_KEY | search_shodan | Optional | Shodan API, get one |
VIRUSTOTAL_API_KEY | search_virustotal | Optional | VirusTotal API v3, get one |
IP2LOCATION_API_KEY | search_ip2location | Optional | IP2Location.io enhanced IP intelligence, get one |
CENSYS_PAT + CENSYS_ORG_ID | search_censys | Optional | Censys Platform API: Personal Access Token + Organization ID, get one |
ABUSEIPDB_API_KEY | search_abuseipdb | Optional | AbuseIPDB v2, get one |
GITHUB_TOKEN | search_github | Optional | GitHub API, raises rate limit from 60 to 5000 req/h, get one |
SERPER_API_KEY | search_dorks_live, search_footprint | Optional | Serper.dev Google SERP API, the preferred SERP backend (~$1/1k, 2,500 free), get one. |
BRIGHTDATA_API_KEY | search_dorks_live, scrape_url | Optional | Bright Data API key, get one (free tier: 5,000 req/month). |
BRIGHTDATA_SERP_ZONE | search_dorks_live | Optional | Your Bright Data SERP API zone name (e.g. serp_api1). |
BRIGHTDATA_UNLOCKER_ZONE | scrape_url | Optional | Your Bright Data Web Unlocker zone name (e.g. web_unlocker1). |
The Bright Data link above is a referral link; signing up through it supports Clearfront at no extra cost to you.
Optional Python packages:
| Package | Purpose | Install |
|---|---|---|
ollama | Local LLM backend (no API key) | pip install ollama *(also install the Ollama runtime)* |
openai | OpenAI-compatible backend for the REPL/CLI (--provider openai) | pip install "clearfront[openai]" |
shodan | Shodan API client | pip install shodan |
reportlab | PDF report export | pip install reportlab |
censys | Censys API client | pip install censys |
| Tool | Powered by | What it investigates |
|---|---|---|
search_email | holehe | Social accounts linked to an email address |
search_username | sherlock | Username presence across 300+ platforms |
search_breach | HaveIBeenPwned v3 API | Data breach exposure |
search_whois | python-whois | Domain registrant and DNS info |
search_ip | ipinfo.io | Geolocation, ASN, hostname |
search_domain | sublist3r | Subdomain enumeration |
search_crt | crt.sh | Subdomains from certificate transparency (keyless, passive) |
search_wayback | Internet Archive | Historical/deleted URLs archived under a domain (keyless, passive) |
search_greynoise | GreyNoise Community | Mass-scanner noise vs. targeted actor for an IP (free, 50/week) |
generate_dorks | built-in | 12 targeted Google dork URLs (no network calls) |
search_paste | psbdmp.ws | Pastebin dump mentions |
search_phone | phoneinfoga | Carrier, country, line type |
search_shodan | Shodan API | Open ports, banners, CVEs |
search_virustotal | VirusTotal API v3 | Verdict from 70+ antivirus engines |
search_ip2location | IP2Location.io API | Enhanced IP intel: VPN/Proxy/Tor/datacenter flags |
search_censys | Censys Search API | Internet-facing infrastructure, certificates |
search_abuseipdb | AbuseIPDB v2 API | IP abuse reputation: confidence score, reports, country, ISP |
search_github | GitHub REST API | Profile, repos, commit-discovered emails, username/keyword search |
search_dns | dnspython (built-in) | A/AAAA/MX/NS/TXT/CNAME/SOA records; SPF, DMARC, DKIM analysis |
search_dorks_live | Bright Data SERP API | Live Google search results for dork queries (title, URL, snippet) |
scrape_url | Bright Data Web Unlocker | Fetch any URL bypassing Cloudflare/CAPTCHA, returns clean Markdown |
search_maigret | maigret | Username presence across 3,400+ sites |
search_footprint | SERP (Serper / Bright Data / DuckDuckGo) | Search-based footprint discovery for a name or handle |
search_gravatar | Gravatar API | Public Gravatar profile for an email: avatar, display name, linked accounts |
search_emailrep | EmailRep.io | Email reputation and footprint summary |
search_hudsonrock | Hudson Rock Cavalier (free) | Infostealer-exposure check for an email or username (no plaintext credentials) |
search_exif | exiftool | EXIF / IPTC / XMP metadata and embedded GPS from a local file |
search_crypto | public chain APIs | Bitcoin / Ethereum address summary: balance, transaction count |
search_harvester | theHarvester | Passive domain recon: emails, subdomains, hosts |
search_exposure | built-in (composite) | Self-exposure report for an IP across the infrastructure tools |
Run clearfront with no arguments to start the AI-powered REPL. Type a target (email, username, domain, IP, name) or a question; the agent decides which tools to run, chains them on findings, and compiles a report.
REPL commands: , clear, save, tools, config, history, help, exit / Ctrl-D.
All sessions are auto-saved to ~/.clearfront/history/. Browse with clearfront history.
pip install "clearfront[web]"
clearfront web
Browser-based AI chat with streaming tool output, inline result cards, and a light/dark theme toggle. Supports fully local inference via Ollama or any OpenAI-compatible endpoint (no Anthropic API key required when using a local backend).
The console runs entirely locally and binds to 127.0.0.1 by default. Choose your backend and paste your own key in Settings; your keys and the targets you investigate never touch our servers. Screenshots are in media/.
Expose all 30 tools to any MCP-compatible AI client.
Claude Code:
claude mcp add clearfront python /absolute/path/to/clearfront/mcp_server.py
claude mcp list
Claude Desktop, add to ~/Library/Application Support/Claude/claude_desktop_config.json:
{
"mcpServers": { "clearfront": { "command": "python", "args": ["/absolute/path/to/clearfront/mcp_server.py"] } } }
skills/clearfront-osint teaches an agent how to drive Clearfront: which approach fits a given request, the direct subcommands, how to read the confidence ratings, and the authorized-use rules. I