Zeqqat
The safe MCP for Dokploy: agents deploy and fix apps without holding keys or seeing secrets.
Descripción del creador (original en inglés)
26 free OSINT tools as MCP tools for AI agents. Auto-installs everything on first run.
Estos tres nunca se combinan en una sola puntuación: las opiniones, las mediciones y la popularidad son cosas distintas.
Todavía no escribimos un resumen sencillo para este. Abajo están los datos que leímos del registro.
Elige la app de IA que usas y copia la configuración.
SHODAN_KEY, VIRUSTOTAL_KEY, IPINFO_KEY, HIBP_KEY, URLSCAN_KEYLos valores marcados como secretos son llaves de tu cuenta. Nunca los compartas ni los pegues en un chat.
Necesitas
¿Qué app usas?
Elige tu app arriba. La recordamos, así que la próxima vez el botón dirá “Instalar en …”.
Abre Claude Desktop → Settings → Developer → Edit Config y pega esto en claude_desktop_config.json
{
"mcpServers": {
"osint": {
"command": "uvx",
"args": [
"osint-mcp"
],
"env": {
"SHODAN_KEY": "your-value",
"VIRUSTOTAL_KEY": "your-value",
"IPINFO_KEY": "your-value",
"HIBP_KEY": "your-value",
"URLSCAN_KEY": "your-value"
}
}
}
}Ejecuta esto en tu terminal
claude mcp add osint --env SHODAN_KEY=your-value --env VIRUSTOTAL_KEY=your-value --env IPINFO_KEY=your-value --env HIBP_KEY=your-value --env URLSCAN_KEY=your-value -- uvx osint-mcpCompleta los valores vacíos antes de ejecutarlo.
Pégalo en .cursor/mcp.json de tu proyecto, o en ~/.cursor/mcp.json
{
"mcpServers": {
"osint": {
"command": "uvx",
"args": [
"osint-mcp"
],
"env": {
"SHODAN_KEY": "your-value",
"VIRUSTOTAL_KEY": "your-value",
"IPINFO_KEY": "your-value",
"HIBP_KEY": "your-value",
"URLSCAN_KEY": "your-value"
}
}
}
}Tu navegador te pide permiso para abrir la app; luego la app muestra la configuración y te pide confirmar. Los valores de las claves quedan vacíos para que los completes tú.
Pégalo en .vscode/mcp.json de tu proyecto
{
"servers": {
"osint": {
"type": "stdio",
"command": "uvx",
"args": [
"osint-mcp"
],
"env": {
"SHODAN_KEY": "your-value",
"VIRUSTOTAL_KEY": "your-value",
"IPINFO_KEY": "your-value",
"HIBP_KEY": "your-value",
"URLSCAN_KEY": "your-value"
}
}
}
}Tu navegador te pide permiso para abrir la app; luego la app muestra la configuración y te pide confirmar. Los valores de las claves quedan vacíos para que los completes tú.
Este se ejecuta en tu computadora, y ChatGPT solo puede conectarse a servidores en internet. Elige otra app.
Tu elección se guarda en una cookie en este dispositivo; no necesitas cuenta.
Esta configuración se genera a partir de la ficha del creador en el registro. Si el README dice otra cosa, sigue el README.
Se ejecuta en tu computadora; la lista de herramientas aparece en tu app de IA después de instalarlo.
Revisamos información que cualquiera puede ver; no hemos leído el código. Las revisiones que no aplican no se cuentan. · Revisado el 9 nov 2026
El nombre en el registro se verificó con la cuenta de GitHub rjn32s, dueña del repo
Todavía no hemos leído este repo en GitHub
Todavía no hemos leído este repo en GitHub
Este se ejecuta en tu computadora; no hay endpoint en internet
Se ejecuta en tu computadora y usa ajustes locales en su lugar
Se ejecuta en tu computadora; solo podemos leer listas de herramientas de endpoints en internet
Comparado con todos los servidores activos de esta categoría en el registro. Las estrellas solo cuentan cuando quien lo publica es dueño del repo.
Superó 1 de 1 revisiones básicas aplicables. No hemos leído el código. Antes de agregar una clave o un token, revisa qué acceso pide el servidor y usa una clave que tenga solo los permisos que necesitas.
Debes completar: SHODAN_KEY, VIRUSTOTAL_KEY, IPINFO_KEY, HIBP_KEY, URLSCAN_KEY
Se ejecuta en tu computadora. Tu app de IA lo inicia cuando hace falta, y los datos no pasan por los servidores del creador (a menos que el propio servidor llame a un servicio en línea).
El repo de GitHub cambió por última vez –, y la última versión (0.1.1) llegó al registro hace 4 meses.
Las apps compatibles con MCP, como Claude Desktop, Claude Code, Cursor y VS Code. También necesitas Python (uv) en tu computadora.
En la misma categoría: Zeqqat, 4da MCP Server, Dependency Vulnerability Tracker — package security advisories ($0.01/query)
Servidores de la misma categoría hechos por otros creadores, ordenados por estrellas.
Cómo leer una tarjeta:↓ Descargas por semanai★ Estrellas de GitHubiTres pilares: reseñas · revisiones · usoiActualizado = fecha en que se publicó la última versión en el registroi
The safe MCP for Dokploy: agents deploy and fix apps without holding keys or seeing secrets.
Upgrade intelligence for AI agents: what an upgrade changes, where it touches your code, CVE scans.
Dependency vulns & malicious-package advisories. Be born in one call — free testnet funds.
Copiado tal cual del repo del creador. PopNx MCP no lo ha revisado ni lo respalda. Se quitaron HTML, imágenes y scripts. Los enlaces llevan fuera de este sitio.
One command. 26 free OSINT tools. Any AI agent.
uvx osint-mcp # installs everything and starts the MCP server
osint-mcp is a Python package that wraps 26 free OSINT (Open Source Intelligence) tools as MCP (Model Context Protocol) tools, giving AI agents like Claude, GPT-4, and any MCP-compatible agent the ability to perform real OSINT investigations directly from a conversation.
The problem it solves: Running OSINT tools traditionally requires installing a dozen separate binaries, writing glue scripts, and manually parsing outputs. osint-mcp automates the entire setup — it detects your OS, installs all tools via Homebrew / apt / Go / pip, and exposes them to your AI agent through a single MCP server.
Who it is for:
uvx osint-mcp auto-installs all underlying tools on first runuvx is the Python equivalent of npx — it installs the package in an isolated environment and runs it immediately. No pip install, no virtual environment setup needed.
uvx osint-mcp
On first run, this automatically:
osint-mcp in an isolated Python environmentOn subsequent runs, it boots in under a second — tools are already installed.
Add one entry to your Claude Desktop config and you are done.
macOS — ~/Library/Application Support/Claude/claude_desktop_config.json Linux — ~/.config/Claude/claude_desktop_config.json
{
"mcpServers": { "osint": { "command": "uvx", "args": ["osint-mcp"] } } }
Restart Claude Desktop. You will see 26 new OSINT tools available in the tool list.
If you prefer managing your own environment:
pip install osint-mcp
osint-mcp install
osint-mcp status
osint-mcp serve
Claude Desktop / AI Agent
│ │ MCP (stdio) ▼ osint-mcp server │ ├── osint_whois → python-whois library ├── osint_port_scan → nmap binary (subprocess) ├── osint_subdomain_enum → subfinder binary ├── osint_cert_transparency → crt.sh public API (HTTP) ├── osint_shodan_host → Shodan REST API (optional key) ├── osint_virustotal → VirusTotal REST API (optional key) └── ... 20 more tools
Each tool is a BaseTool subclass. The registry auto-discovers all subclasses at startup and registers them with FastMCP. If a tool's binary is not installed, it returns a clear "not installed — run osint-mcp install" message instead of crashing.
| MCP Tool | Underlying Technology | Key Required? | What It Does |
|---|---|---|---|
osint_whois | python-whois | No | WHOIS lookup — registrar, creation date, expiry, nameservers |
osint_dns_lookup | dig | No | DNS records: A, AAAA, MX, NS, TXT, CNAME, SOA, PTR, SRV, CAA |
osint_port_scan | nmap | No | Port and service scan with version detection |
osint_ip_info | ipinfo.io API | Optional | IP geolocation, ISP, org, timezone, abuse contact |
osint_asn_lookup | ipinfo.io API | Optional | ASN number, BGP prefix, network owner |
| MCP Tool | Underlying Technology | Key Required? | What It Does |
|---|---|---|---|
osint_subdomain_enum | subfinder | No | Passive subdomain enumeration from 40+ sources |
osint_amass | amass | No | Deep attack-surface mapping across DNS, certs, APIs |
osint_cert_transparency | crt.sh API | No | Certificate transparency log search — reveals subdomains via SSL certs |
osint_harvester | theHarvester | No | Email addresses, hostnames, employee names from public sources |
osint_dnsrecon | dnsrecon | No | Zone transfer attempts, SRV enumeration, reverse lookups |
| MCP Tool | Underlying Technology | Key Required? | What It Does |
|---|---|---|---|
osint_username_search | Sherlock | No | Username search across 300+ social platforms |
osint_maigret | Maigret | No | Deep username profiling across 3,000+ sites with profile extraction |
| MCP Tool | Underlying Technology | Key Required? | What It Does |
|---|---|---|---|
osint_email_accounts | Holehe | No | Find which services (Instagram, Twitter, etc.) are linked to an email |
osint_email_breach | HaveIBeenPwned | Optional | Check if an email appears in known data breaches |
| MCP Tool | Underlying Technology | Key Required? | What It Does |
|---|---|---|---|
osint_wayback | Internet Archive API | No | Retrieve historical snapshots of any URL from the Wayback Machine |
osint_urlscan | urlscan.io API | Optional | Scan a URL — returns IPs contacted, tech stack, screenshot, threat score |
osint_shodan_host | Shodan API | Required (free) | Open ports, services, banners, CVEs for any IP |
osint_shodan_search | Shodan API | Required (free) | Search internet-connected devices with Shodan query syntax |
osint_virustotal | VirusTotal API | Required (free) | Check URLs, IPs, domains, or file hashes against 70+ AV engines |
| MCP Tool | Underlying Technology | Key Required? | What It Does |
|---|---|---|---|
osint_phone_info | PhoneInfoga | No | Carrier, country, line type, and public source search for phone numbers |
| MCP Tool | Underlying Technology | Key Required? | What It Does |
|---|---|---|---|
osint_scan_secrets | TruffleHog | No | Scan a Git repo URL or local path for exposed secrets and API keys |
osint_gitleaks | Gitleaks | No | Detect hardcoded passwords and tokens in Git history |
| MCP Tool | What It Does |
|---|---|
osint_install_status | JSON list of all tools with availability status — useful for agents to check before running |
osint_config_get | Read a stored API key (masked) |
osint_config_set | Store an API key from within an agent conversation |
osint_config_list | List all configured API keys |
These tools work without a key but unlock significantly more data with one. All are free to register.
| Tool | Config Key | Free Tier | Register At |
|---|---|---|---|
| Shodan | shodan_key | 1 query/sec, 100 results | https://account.shodan.io |
| VirusTotal | virustotal_key | 4 requests/min | https://www.virustotal.com/gui/join-us |
| ipinfo.io | ipinfo_key | 50,000 req/month | https://ipinfo.io/signup |
| HaveIBeenPwned | hibp_key | Free for email checks | https://haveibeenpwned.com/API/Key |
| urlscan.io | urlscan_key | 100 scans/day | https://urlscan.io/user/signup |
# Set a key via CLI
osint-mcp config set shodan_key=YOUR_KEY
Once connected to Claude Desktop, you can ask questions like:
*"Investigate the domain example.com — find subdomains, check for data breaches on contact emails, and look it up on Shodan."*
*"Scan the GitHub repo github.com/org/repo for exposed secrets and API keys."*
*"Find all social media accounts associated with the username johndoe123."*
*"Check if the IP 1.2.3.4 is listed on Shodan and what ports are open."*
*"Look up the phone number +14155552671 and find what carrier and country it's registered to."*
The agent automatically chains multiple tools, interprets the results, and presents a coherent investigation summary — no manual tool orchestration needed.
osint-mcp Start the MCP server (default, same as serve)
osint-mcp serve Start the MCP server explicitly osint-mcp serve --no-auto-install Skip first-run tool installation osint-mcp install Install all missing OSINT tools osint-mcp install --category X Install only tools in category (network/domain/social…) osint-mcp install --dry-run Preview what would be installed osint-mcp status Show a table of all tools and their availability osint-mcp config set KEY=VALUE Store an API key osint-mcp config get KEY Read a stored key (masked) osint-mcp config list List all stored keys osint-mcp config delete KEY Remove a key osint-mcp --version Print version osint-mcp --help Show help
| Platform | How Tools Are Installed |
|---|---|
| macOS | Homebrew (brew install) · go install · uv pip install |
| Linux (Debian / Ubuntu) | apt-get install · go install · uv pip install |
| Linux (RHEL / Fedora / CentOS) | yum / dnf · go install · uv pip install |
Prerequisites auto-handled:
Q: What is MCP (Model Context Protocol)? A: MCP is an open standard by Anthropic that lets AI models call external tools in a structured, secure way. It is to AI agents what HTTP is to web browsers — a universal protocol for tool use. Learn more at modelcontextprotocol.io.
Q: Does osint-mcp work with AI agents other than Claude? A: Yes. Any MCP-compatible client works — including OpenAI's agent framework (via MCP adapters), LangChain, LlamaIndex, and custom agents built with the Anthropic SDK. The server communicates over stdio using the standard MCP JSON-RPC protocol.
Q: Does it cost anything? A: The package itself is free and open source. All 26 tools are free. Some tools (Shodan, VirusTotal) require a free API key registration for full functionality but offer a usable free tier.
**Q: Is it
Solo se muestra el principio; lee el resto en el repo