osint terminal MCP Tools

• dns

  dns

• whois

  whois

• subdomains

  subdomains

• tls

  tls

• headers

  headers

• wayback

  wayback

• ipgeo

  ipgeo

• reversedns

  reversedns

• username

  username

• github

  github

• email

  email

• internetdb

  internetdb

• portscan

  portscan

• camera

  camera

• ipwhois

  ipwhois

• asn

  asn

• reverseip

  reverseip

• dnsbl

  dnsbl

• tor

  tor

• cloud

  cloud

• emailsec

  emailsec

• robots

  robots

• tech

  tech

• favicon

  favicon

• redirects

  redirects

• certhistory

  certhistory

• social

  social

• mac

  mac

• crypto

  crypto

• dorks

  dorks

• urlscan

  urlscan

• greynoise

  greynoise

• typosquat

  typosquat

• securitytxt

  securitytxt

• keybase

  keybase

• phone

  phone

• decode

  decode

• jwt

  jwt

• hashid

  hashid

• cidr

  cidr

• gitexposed

  gitexposed

• cors

  cors

• cookies

  cookies

• dnssec

  dnssec

• pgp

  pgp

• hackernews

  hackernews

• gitlab

  gitlab

• dnsprop

  dnsprop

• takeover

  takeover

• sitemap

  sitemap

• waf

  waf

• cve

  cve

• npm

  npm

• peers

  peers

• urlparse

  urlparse

• epoch

  epoch

• tlsscan

  tlsscan

• revgeo

  revgeo

• suntimes

  suntimes

• iban

  iban

• bin

  bin

• uuid

  uuid

• isbn

  isbn

• txhash

  txhash

• bluesky

  bluesky

• chesscom

  chesscom

• wikipedia

  wikipedia

• httping

  httping

• links

  links

• pwstrength

  pwstrength

• entropy

  entropy

• lobsters

  lobsters

• caa

  caa

• mtasts

  mtasts

• bimi

  bimi

• domainage

  domainage

• luhn

  luhn

• pypi

  pypi

• crates

  crates

• rubygems

  rubygems

• packagist

  packagist

• npmpkg

  npmpkg

• btcaddr

  btcaddr

• ethaddr

  ethaddr

• ghrepo

  ghrepo

• ghgists

  ghgists

• ghorg

  ghorg

• mastodon

  mastodon

• geohash

  geohash

• ipv6

  ipv6

• transform

  transform

• cpfcnpj

  cpfcnpj

• color

  color

• doh

  doh

• tlsa

  tlsa

• dnsverify

  dnsverify

• subbrute

  subbrute

• hstspreload

  hstspreload

• wpscan

  wpscan

• wellknown

  wellknown

• graphql

  graphql

• swagger

  swagger

• s3buckets

  s3buckets

• httpmethods

  httpmethods

• dirlisting

  dirlisting

• adstxt

  adstxt

• feeds

  feeds

• manifest

  manifest

• wpplugin

  wpplugin

• abusecontact

  abusecontact

• asrank

  asrank

• peeringdb

  peeringdb

• rpki

  rpki

• ens

  ens

• ethcontract

  ethcontract

• osv

  osv

• depsdev

  depsdev

• gomod

  gomod

• nuget

  nuget

• maven

  maven

• hexpm

  hexpm

• cdnjs

  cdnjs

• npmdl

  npmdl

• brew

  brew

• pypistats

  pypistats

• devto

  devto

• medium

  medium

• orcid

  orcid

• codeberg

  codeberg

• wikidata

  wikidata

• musicbrainz

  musicbrainz

• stackoverflow

  stackoverflow

• hashnode

  hashnode

• gravatarfull

  gravatarfull

• osmuser

  osmuser

• feodo

  feodo

• openphish

  openphish

• kev

  kev

• epss

  epss

• circlhash

  circlhash

• weather

  weather

• elevation

  elevation

• vin

  vin

• lei

  lei

• orgname

  orgname

• cpe

  cpe

• cvedetail

  cvedetail

• port

  port

• ssh

  ssh

• hostsearch

  hostsearch

• peeringnet

  peeringnet

• nearbywiki

  nearbywiki

• doi

  doi

• crossrefauthor

  crossrefauthor

• orcidworks

  orcidworks

• isbnmeta

  isbnmeta

• sopostuser

  sopostuser

• breachsearch

  breachsearch

• feodoips

  feodoips

• urlscansearch

  urlscansearch

• commoncrawl

  commoncrawl

• ipfull

  ipfull

• geocode

  geocode

• revgeocode

  revgeocode

• macvendorlookup

  macvendorlookup

• dnsmx

  dnsmx

• fxrate

  fxrate

• country

  country

• wikidatasearch

  wikidatasearch

• spdxlicense

  spdxlicense

• gitignore

  gitignore

• ghcommits

  ghcommits

• ghpubkeys

  ghpubkeys

• ghkeysgpg

  ghkeysgpg

• npmdownloads

  npmdownloads

• pypiproject

  pypiproject

• dockerhub

  dockerhub

• httpstatus

  httpstatus

• useragent

  useragent

• asnprefixes

  asnprefixes

• ripewhois

  ripewhois

• rdapip

  rdapip

• isotime

  isotime

• nvdcve

  nvdcve

• ghadvisory

  ghadvisory

• otxdomain

  otxdomain

• otxip

  otxip

• hosthunt

  hosthunt

• ghlanguages

  ghlanguages

• githubsearch

  githubsearch

• githubgists

  githubgists

• golangpkg

  golangpkg

• rubygemrev

  rubygemrev

• cratedownloads

  cratedownloads

• openalexwork

  openalexwork

• openalexauthor

  openalexauthor

• semanticscholar

  semanticscholar

• datacite

  datacite

• restcountry

  restcountry

• wikisummary

  wikisummary

• archiveorg

  archiveorg

• hnsearch

  hnsearch

• hnuser

  hnuser

• wikipv

  wikipv

• musicbrainzartist

  musicbrainzartist

• openfoodfacts

  openfoodfacts

• cidrinfo

  cidrinfo

• passwordcheck

  passwordcheck

• base64

  base64

• hashtext

  hashtext

• qrcode

  qrcode

• dnsptrrange

  dnsptrrange

• jwtdecode

  jwtdecode

• reddit_user

  reddit user

• reddit_sub

  reddit sub

• huggingface

  huggingface

• steam_user

  steam user

• codeforces

  codeforces

• leetcode_user

  leetcode user

• npmorg

  npmorg

• emailrep

  emailrep

• arxiv

  arxiv

• pubmed

  pubmed

• zenodo

  zenodo

• dblp

  dblp

• unpaywall

  unpaywall

• ltcaddr

  ltcaddr

• dogeaddr

  dogeaddr

• xrpaddr

  xrpaddr

• soladdr

  soladdr

• opencorp

  opencorp

• gleif_name

  gleif name

• fccid

  fccid

• smtpbanner

  smtpbanner

• disposable

  disposable

• zonetransfer

  zonetransfer

• ctlogsearch

  ctlogsearch

• webfinger

  webfinger

• srvlookup

  srvlookup

• nstrace

  nstrace

• rdap_domain

  rdap domain

• csp_parse

  csp parse

• sri_check

  sri check

• clickjacking

  clickjacking

• referrer_pol

  referrer pol

• permissions_pol

  permissions pol

• ipv4classify

  ipv4classify

• dnsrecon

  dnsrecon

• portlookup

  portlookup

• mimetype

  mimetype

• httpcode

  httpcode

• unixperm

  unixperm

• unicode_lookup

  unicode lookup

• timezone_info

  timezone info

• base_convert

  base convert

• ip_math

  ip math

• latlonformat

  latlonformat

• regdomain

  regdomain

• tldinfo

  tldinfo

• emailformat

  emailformat

• teamcymru

  teamcymru

• whoisserver

  whoisserver

• robotsmeta

  robotsmeta

• numlookup

  numlookup

• phonefmt

  phonefmt

• phonenanp

  phonenanp

• phonecc

  phonecc

• phonepivot

  phonepivot

• phoneapps

  phoneapps

• phonespam

  phonespam

• phonevcard

  phonevcard

• imageexif

  imageexif

• imagegps

  imagegps

• imagemeta

  imagemeta

• imagehash

  imagehash

• imagecolors

  imagecolors

• imagerev

  imagerev

• imagephash

  imagephash

• imagethumb

  imagethumb

• imageicc

  imageicc

• imagechunks

  imagechunks

• imagexmp

  imagexmp

• imagelsb

  imagelsb

• quakes

  quakes

• iss

  iss

• spacepeople

  spacepeople

• airquality

  airquality

• marineweather

  marineweather

• flightsnear

  flightsnear

• whatsnearby

  whatsnearby

• maidenhead

  maidenhead

• pluscode

  pluscode

• antipode

  antipode

• geodist

  geodist

• moonphase

  moonphase

• morse

  morse

• nato

  nato

• roman

  roman

• caesar

  caesar

• snowflake

  snowflake

• ulid

  ulid

• cron

  cron

• hexdump

  hexdump

• numwords

  numwords

• jsonfmt

  jsonfmt

• passentropy

  passentropy

• cryptoprice

  cryptoprice

• agify

  agify

• genderize

  genderize

• nationalize

  nationalize

• randomuser

  randomuser

• holidays

  holidays

• binarytext

  binarytext

• rot47

  rot47

• ascii85

  ascii85

• emoji

  emoji

• slug

  slug

• wordcount

  wordcount

• ipint

  ipint

• tempconv

  tempconv

• disasters

  disasters

• spaceweather

  spaceweather

• weatheralerts

  weatheralerts

• onthisday

  onthisday

• trendingwiki

  trendingwiki

• btcfees

  btcfees

• blockheight

  blockheight

• cryptomarket

  cryptomarket

• coininfo

  coininfo

• jslibs

  jslibs

• htmlcomments

  htmlcomments

• formaudit

  formaudit

• metatags

  metatags

• telegram_channel

  telegram channel

• linktree

  linktree

• imei

  imei

• creditcard

  creditcard

• ean

  ean

• punycode

  punycode

• homoglyph

  homoglyph

• base58

  base58

• vatid

  vatid

• swiftbic

  swiftbic

• utm

  utm

• mgrs

  mgrs

• bearing

  bearing

• passgen

  passgen

• casify

  casify

• leet

  leet

• atbash

  atbash

• railfence

  railfence

• rdap

  rdap

• ghevents

  ghevents

• cratestats

  cratestats

• isin

  isin

• barcode

  barcode

• macvendor

  macvendor

• vigenere

  vigenere

• base36

  base36

• goproxy

  goproxy

• checksum

  checksum

• sha256lookup

  sha256lookup

• crc32

  crc32

• rot13

  rot13

• spamhauslookup

  spamhauslookup

• isexitnode

  isexitnode

• asnlookup

  asnlookup

• hostname

  hostname

• portquick

  portquick

• dnsquery

  dnsquery

• creditcardtest

  creditcardtest

• htmlencode

  htmlencode

• disposablecheck

  disposablecheck

• quoted_printable

  quoted printable

• base32

  base32

• uuencode

  uuencode

• semver

  semver

• macvalid

  macvalid

• uuid_validate

  uuid validate

• datauri

  datauri

• stringmetrics

  stringmetrics

• whois_check

  whois check

• hibp

  hibp

• hibp_email

  hibp email

• leakcheck

  leakcheck

• hudsonrock

  hudsonrock

• paste_email

  paste email

• paste_domain

  paste domain

• gh_dorking

  gh dorking

• gh_secret_scan

  gh secret scan

• intelx_email

  intelx email

• dehashed_domain

  dehashed domain

• breachdirectory

  breachdirectory

• snusbase_hash

  snusbase hash

• wayback_leaks

  wayback leaks

• trufflehog_url

  trufflehog url

• comb_search

  comb search

• leaklookup

  leaklookup

• cdxwayback

  cdxwayback

• cfradar

  cfradar

• bgphistory

  bgphistory

• dnsgraph

  dnsgraph

• github_code

  github code

• pageinfo

  pageinfo

• jarm

  jarm

• threatcrowd

  threatcrowd

• apileak

  apileak

• hibp_breaches

  hibp breaches

• breachdb

  breachdb

• password_dumps

  password dumps

• ssn_check

  ssn check

• phone_leak

  phone leak

• api_key_scan

  api key scan

• robotstxt_history

  robotstxt history

• exploit_cve

  exploit cve

• cve_timeline

  cve timeline

• cve_poc_checker

  cve poc checker

• mitre_technique

  mitre technique

• cisa_alerts

  cisa alerts

• ransomware_tracker

  ransomware tracker

• threat_actor

  threat actor

• malware_family

  malware family

• ioc_reputation

  ioc reputation

• zerodday_timeline

  zerodday timeline

• apt_track

  apt track

• botnet_tracker

  botnet tracker

• c2_infrastructure

  c2 infrastructure

• breach_aggregator

  breach aggregator

• darkweb_monitor

  darkweb monitor

• credential_stuffing

  credential stuffing

• supply_chain_risk

  supply chain risk

• vuln_feed

  vuln feed

• cve_severity

  cve severity

• threat_pattern

  threat pattern

• emerging_threats

  emerging threats

• phishing_intel

  phishing intel

• infra_fingerprint

  infra fingerprint

• attack_surface

  attack surface

• youtube

  youtube

• soundcloud

  soundcloud

• vimeo

  vimeo

• deviantart

  deviantart

• sec_edgar

  sec edgar

• binlookup

  binlookup

• github_trending

  github trending

• hackernews_front

  hackernews front

• apod

  apod

• random_fact

  random fact

• tempmail

  tempmail

• urban

  urban

• ddg_instant

  ddg instant

• gdelt

  gdelt

• tiktok

  tiktok

• revimg

  revimg

• correlate_sweep

  correlate sweep

• person_sweep

  person sweep

• agent_manifest

  agent manifest

This list was read from the server itself, by connecting to it and calling tools/list on 24 September 2026. It is what the server actually exposes, not what its listing claims.

Mutating and Read-only are read off each tool's name, not its schema — a hint, not a guarantee. The registry stores tool names only; connect the server for its live schemas.