OSINT Toolbox MCP
A community-driven Model Context Protocol server that enables AI agents to execute 12 classic open-source intelligence (OSINT) tools locally. It supports username searches, email lookups, domain reconnaissance, and metadata extraction without requiring API keys or cloud intermediaries, allowing agents to query public sources directly for security research and investigation tasks.
Package and access
Local package with source-attributed installation metadata. Koskamo does not execute packages during review.
What you can do with it
- Search for username accounts across hundreds of sites using Sherlock or Maigret
- Find email account registrations using Holehe
- Perform domain and IP reconnaissance with theHarvester or SpiderFoot
- Extract metadata from local files using ExifTool
Source and maintenance
- Maintenance checked
Packages and installation
Source-provided package data. Koskamo has not executed or live-probed this package.
ghcr.io/renkagod/osint-toolbox-mcp:1.1.0
{
"transport": "stdio",
"identifier": "ghcr.io/renkagod/osint-toolbox-mcp:1.1.0",
"registryType": "oci"
}Tools
Reported by the attributed source; not independently observed by Koskamo.
Connect from your client
Each snippet configures the same source-provided package; replace placeholders before use.
Cursor
{
"mcpServers": {
"osint-toolbox-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/renkagod/osint-toolbox-mcp:1.1.0"
]
}
}
}Cline
{
"mcpServers": {
"osint-toolbox-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/renkagod/osint-toolbox-mcp:1.1.0"
]
}
}
}VS Code
{
"servers": {
"osint-toolbox-mcp": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/renkagod/osint-toolbox-mcp:1.1.0"
]
}
}
}Claude Desktop
{
"mcpServers": {
"osint-toolbox-mcp": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"ghcr.io/renkagod/osint-toolbox-mcp:1.1.0"
]
}
}
}Let your agent find its tools
Find servers like OSINT Toolbox MCP from your agent. Add Koskamo once to search the index for endpoints, access requirements, and client setup. Public discovery needs no key.