Gluo
Free agent tools, no sign-in: browser flows, test inboxes, web extract, site and security scans.
제작자가 쓴 설명(영어 원문)
26 free OSINT tools as MCP tools for AI agents. Auto-installs everything on first run.
이 세 가지는 절대 하나의 점수로 합치지 않아요. 의견, 측정, 인기는 서로 다른 것이니까요.
이 서버는 아직 쉬운 말로 된 요약을 쓰지 못했어요. 아래는 레지스트리에서 읽어 온 사실이에요.
쓰고 있는 AI 앱을 고른 다음 설정을 복사하세요.
SHODAN_KEY, VIRUSTOTAL_KEY, IPINFO_KEY, HIBP_KEY, URLSCAN_KEY비밀로 표시된 값은 내 계정의 열쇠예요. 절대 다른 사람과 공유하거나 채팅에 붙여 넣지 마세요.
필요한 것
어떤 앱을 쓰세요?
위에서 앱을 고르세요. 기억해 두었다가 다음부터는 버튼에 “…에 설치”라고 표시해요.
Claude Desktop → Settings → Developer → Edit Config를 열고 claude_desktop_config.json에 이 내용을 붙여 넣으세요
{
"mcpServers": {
"osint": {
"command": "uvx",
"args": [
"osint-mcp"
],
"env": {
"SHODAN_KEY": "your-value",
"VIRUSTOTAL_KEY": "your-value",
"IPINFO_KEY": "your-value",
"HIBP_KEY": "your-value",
"URLSCAN_KEY": "your-value"
}
}
}
}터미널에서 이 명령어를 실행하세요
claude mcp add osint --env SHODAN_KEY=your-value --env VIRUSTOTAL_KEY=your-value --env IPINFO_KEY=your-value --env HIBP_KEY=your-value --env URLSCAN_KEY=your-value -- uvx osint-mcp실행하기 전에 빈 값을 채워 주세요.
프로젝트의 .cursor/mcp.json 또는 ~/.cursor/mcp.json에 붙여 넣으세요
{
"mcpServers": {
"osint": {
"command": "uvx",
"args": [
"osint-mcp"
],
"env": {
"SHODAN_KEY": "your-value",
"VIRUSTOTAL_KEY": "your-value",
"IPINFO_KEY": "your-value",
"HIBP_KEY": "your-value",
"URLSCAN_KEY": "your-value"
}
}
}
}브라우저가 앱을 열지 물어본 다음, 앱이 설정을 보여 주고 확인을 요청해요. 키 값은 비워 두니 직접 입력하세요.
프로젝트의 .vscode/mcp.json에 붙여 넣으세요
{
"servers": {
"osint": {
"type": "stdio",
"command": "uvx",
"args": [
"osint-mcp"
],
"env": {
"SHODAN_KEY": "your-value",
"VIRUSTOTAL_KEY": "your-value",
"IPINFO_KEY": "your-value",
"HIBP_KEY": "your-value",
"URLSCAN_KEY": "your-value"
}
}
}
}브라우저가 앱을 열지 물어본 다음, 앱이 설정을 보여 주고 확인을 요청해요. 키 값은 비워 두니 직접 입력하세요.
이 서버는 내 컴퓨터에서 실행되는데, ChatGPT는 인터넷에 있는 서버에만 연결할 수 있어요. 다른 앱을 고르세요.
선택한 앱은 이 기기의 쿠키에만 저장돼요. 계정은 필요 없어요.
이 설정은 제작자의 레지스트리 정보로 만들었어요. README와 다르면 README를 따르세요.
내 컴퓨터에서 실행돼요. 설치하면 AI 앱에 도구 목록이 나타나요.
누구나 볼 수 있는 정보를 점검했고, 코드는 읽지 않았어요. 해당하지 않는 항목은 개수에서 뺐어요. · 2026년 11월 8일 점검
레지스트리 이름이 GitHub 계정 rjn32s 기준으로 확인되었고, 이 계정이 저장소를 소유하고 있어요
아직 GitHub에서 이 저장소를 읽어 오지 않았어요
아직 GitHub에서 이 저장소를 읽어 오지 않았어요
내 컴퓨터에서 실행되는 서버라 인터넷 엔드포인트가 없어요
내 컴퓨터에서 실행되며, 대신 로컬 설정을 사용해요
내 컴퓨터에서 실행돼요. 도구 목록은 인터넷 엔드포인트가 있는 서버에서만 읽을 수 있어요
레지스트리에서 이 카테고리의 활성 서버 전체와 비교했어요. 스타는 게시자가 저장소를 소유한 경우에만 세요.
해당하는 기본 점검 1개 중 1개를 통과했어요. 코드는 읽지 않았어요. 키나 토큰을 넣기 전에 서버가 어떤 권한을 요구하는지 확인하고, 꼭 필요한 권한만 있는 키를 쓰세요.
입력해야 할 값: SHODAN_KEY, VIRUSTOTAL_KEY, IPINFO_KEY, HIBP_KEY, URLSCAN_KEY
내 컴퓨터에서 실행돼요. AI 앱이 필요할 때 실행하고, 데이터는 제작자의 서버를 거치지 않아요(서버 자체가 온라인 서비스를 호출하는 경우는 제외).
GitHub 저장소는 마지막으로 – 변경됐고, 최신 버전(0.1.1)은 4개월 전 레지스트리에 올라왔어요.
Claude Desktop, Claude Code, Cursor, VS Code처럼 MCP를 지원하는 앱에서 쓸 수 있어요. 내 컴퓨터에 Python (uv)도 있어야 해요.
같은 카테고리에는: Gluo, Seal Security, Zeqqat
같은 카테고리에서 다른 제작자가 만든 서버예요. 스타 순으로 정렬했어요.
카드 보는 법:↓ 주간 다운로드i★ GitHub 스타i세 기둥: 리뷰 · 점검 · 사용 정도i업데이트 = 최신 버전을 레지스트리에 공개한 날i
Free agent tools, no sign-in: browser flows, test inboxes, web extract, site and security scans.
Vulnerability management: scan projects, search sealed packages, manage sealing rules and reports.
Open source MCP gateway: agents call your APIs without holding keys or seeing secrets.
제작자의 저장소에서 쓰인 그대로 가져왔어요. PopNx MCP가 검토하거나 보증한 내용이 아니에요. HTML, 이미지, 스크립트는 제거했어요. 링크를 누르면 이 사이트를 벗어나요.
One command. 26 free OSINT tools. Any AI agent.
uvx osint-mcp # installs everything and starts the MCP server
osint-mcp is a Python package that wraps 26 free OSINT (Open Source Intelligence) tools as MCP (Model Context Protocol) tools, giving AI agents like Claude, GPT-4, and any MCP-compatible agent the ability to perform real OSINT investigations directly from a conversation.
The problem it solves: Running OSINT tools traditionally requires installing a dozen separate binaries, writing glue scripts, and manually parsing outputs. osint-mcp automates the entire setup — it detects your OS, installs all tools via Homebrew / apt / Go / pip, and exposes them to your AI agent through a single MCP server.
Who it is for:
uvx osint-mcp auto-installs all underlying tools on first runuvx is the Python equivalent of npx — it installs the package in an isolated environment and runs it immediately. No pip install, no virtual environment setup needed.
uvx osint-mcp
On first run, this automatically:
osint-mcp in an isolated Python environmentOn subsequent runs, it boots in under a second — tools are already installed.
Add one entry to your Claude Desktop config and you are done.
macOS — ~/Library/Application Support/Claude/claude_desktop_config.json Linux — ~/.config/Claude/claude_desktop_config.json
{
"mcpServers": { "osint": { "command": "uvx", "args": ["osint-mcp"] } } }
Restart Claude Desktop. You will see 26 new OSINT tools available in the tool list.
If you prefer managing your own environment:
pip install osint-mcp
osint-mcp install
osint-mcp status
osint-mcp serve
Claude Desktop / AI Agent
│ │ MCP (stdio) ▼ osint-mcp server │ ├── osint_whois → python-whois library ├── osint_port_scan → nmap binary (subprocess) ├── osint_subdomain_enum → subfinder binary ├── osint_cert_transparency → crt.sh public API (HTTP) ├── osint_shodan_host → Shodan REST API (optional key) ├── osint_virustotal → VirusTotal REST API (optional key) └── ... 20 more tools
Each tool is a BaseTool subclass. The registry auto-discovers all subclasses at startup and registers them with FastMCP. If a tool's binary is not installed, it returns a clear "not installed — run osint-mcp install" message instead of crashing.
| MCP Tool | Underlying Technology | Key Required? | What It Does |
|---|---|---|---|
osint_whois | python-whois | No | WHOIS lookup — registrar, creation date, expiry, nameservers |
osint_dns_lookup | dig | No | DNS records: A, AAAA, MX, NS, TXT, CNAME, SOA, PTR, SRV, CAA |
osint_port_scan | nmap | No | Port and service scan with version detection |
osint_ip_info | ipinfo.io API | Optional | IP geolocation, ISP, org, timezone, abuse contact |
osint_asn_lookup | ipinfo.io API | Optional | ASN number, BGP prefix, network owner |
| MCP Tool | Underlying Technology | Key Required? | What It Does |
|---|---|---|---|
osint_subdomain_enum | subfinder | No | Passive subdomain enumeration from 40+ sources |
osint_amass | amass | No | Deep attack-surface mapping across DNS, certs, APIs |
osint_cert_transparency | crt.sh API | No | Certificate transparency log search — reveals subdomains via SSL certs |
osint_harvester | theHarvester | No | Email addresses, hostnames, employee names from public sources |
osint_dnsrecon | dnsrecon | No | Zone transfer attempts, SRV enumeration, reverse lookups |
| MCP Tool | Underlying Technology | Key Required? | What It Does |
|---|---|---|---|
osint_username_search | Sherlock | No | Username search across 300+ social platforms |
osint_maigret | Maigret | No | Deep username profiling across 3,000+ sites with profile extraction |
| MCP Tool | Underlying Technology | Key Required? | What It Does |
|---|---|---|---|
osint_email_accounts | Holehe | No | Find which services (Instagram, Twitter, etc.) are linked to an email |
osint_email_breach | HaveIBeenPwned | Optional | Check if an email appears in known data breaches |
| MCP Tool | Underlying Technology | Key Required? | What It Does |
|---|---|---|---|
osint_wayback | Internet Archive API | No | Retrieve historical snapshots of any URL from the Wayback Machine |
osint_urlscan | urlscan.io API | Optional | Scan a URL — returns IPs contacted, tech stack, screenshot, threat score |
osint_shodan_host | Shodan API | Required (free) | Open ports, services, banners, CVEs for any IP |
osint_shodan_search | Shodan API | Required (free) | Search internet-connected devices with Shodan query syntax |
osint_virustotal | VirusTotal API | Required (free) | Check URLs, IPs, domains, or file hashes against 70+ AV engines |
| MCP Tool | Underlying Technology | Key Required? | What It Does |
|---|---|---|---|
osint_phone_info | PhoneInfoga | No | Carrier, country, line type, and public source search for phone numbers |
| MCP Tool | Underlying Technology | Key Required? | What It Does |
|---|---|---|---|
osint_scan_secrets | TruffleHog | No | Scan a Git repo URL or local path for exposed secrets and API keys |
osint_gitleaks | Gitleaks | No | Detect hardcoded passwords and tokens in Git history |
| MCP Tool | What It Does |
|---|---|
osint_install_status | JSON list of all tools with availability status — useful for agents to check before running |
osint_config_get | Read a stored API key (masked) |
osint_config_set | Store an API key from within an agent conversation |
osint_config_list | List all configured API keys |
These tools work without a key but unlock significantly more data with one. All are free to register.
| Tool | Config Key | Free Tier | Register At |
|---|---|---|---|
| Shodan | shodan_key | 1 query/sec, 100 results | https://account.shodan.io |
| VirusTotal | virustotal_key | 4 requests/min | https://www.virustotal.com/gui/join-us |
| ipinfo.io | ipinfo_key | 50,000 req/month | https://ipinfo.io/signup |
| HaveIBeenPwned | hibp_key | Free for email checks | https://haveibeenpwned.com/API/Key |
| urlscan.io | urlscan_key | 100 scans/day | https://urlscan.io/user/signup |
# Set a key via CLI
osint-mcp config set shodan_key=YOUR_KEY
Once connected to Claude Desktop, you can ask questions like:
*"Investigate the domain example.com — find subdomains, check for data breaches on contact emails, and look it up on Shodan."*
*"Scan the GitHub repo github.com/org/repo for exposed secrets and API keys."*
*"Find all social media accounts associated with the username johndoe123."*
*"Check if the IP 1.2.3.4 is listed on Shodan and what ports are open."*
*"Look up the phone number +14155552671 and find what carrier and country it's registered to."*
The agent automatically chains multiple tools, interprets the results, and presents a coherent investigation summary — no manual tool orchestration needed.
osint-mcp Start the MCP server (default, same as serve)
osint-mcp serve Start the MCP server explicitly osint-mcp serve --no-auto-install Skip first-run tool installation osint-mcp install Install all missing OSINT tools osint-mcp install --category X Install only tools in category (network/domain/social…) osint-mcp install --dry-run Preview what would be installed osint-mcp status Show a table of all tools and their availability osint-mcp config set KEY=VALUE Store an API key osint-mcp config get KEY Read a stored key (masked) osint-mcp config list List all stored keys osint-mcp config delete KEY Remove a key osint-mcp --version Print version osint-mcp --help Show help
| Platform | How Tools Are Installed |
|---|---|
| macOS | Homebrew (brew install) · go install · uv pip install |
| Linux (Debian / Ubuntu) | apt-get install · go install · uv pip install |
| Linux (RHEL / Fedora / CentOS) | yum / dnf · go install · uv pip install |
Prerequisites auto-handled:
Q: What is MCP (Model Context Protocol)? A: MCP is an open standard by Anthropic that lets AI models call external tools in a structured, secure way. It is to AI agents what HTTP is to web browsers — a universal protocol for tool use. Learn more at modelcontextprotocol.io.
Q: Does osint-mcp work with AI agents other than Claude? A: Yes. Any MCP-compatible client works — including OpenAI's agent framework (via MCP adapters), LangChain, LlamaIndex, and custom agents built with the Anthropic SDK. The server communicates over stdio using the standard MCP JSON-RPC protocol.
Q: Does it cost anything? A: The package itself is free and open source. All 26 tools are free. Some tools (Shodan, VirusTotal) require a free API key registration for full functionality but offer a usable free tier.
**Q: Is it
앞부분만 보여 드려요. 나머지는 저장소에서 읽어 보세요