/ 100

10 days ago

github_topic

OpenOSINT

AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 16 tools. Works with Claude, GPT-4, or local models. For authorized security research only.

→ OpenOSINT/OpenOSINT · listed on github_topic

Is this your MCP?

Claim it to get a verified publisher badge, a free copy of our full audit findings, and direct contact for any high-priority issues we find.

Install from

github_topic Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

✅

No credential exfiltration, no sensitive file access, no obfuscation

Static analysis found nothing flowing your secrets to unexpected places.

✅

Open source with a license and README

Anyone can audit the code, the license is declared, and the publisher documents what it does.

🔐

You'll be asked for 14 credentials: POLAR_TOKEN, POLAR_WEBHOOK_SECRET, CONFIG_ENCRYPTION_KEY, ANTHROPIC_API_KEY, OPENAI_API_KEY, BRIGHTDATA_API_KEY, ABUSEIPDB_API_KEY, HIBP_API_KEY, CENSYS_SECRET, GITHUB_TOKEN, IPINFO_TOKEN, IP2LOCATION_API_KEY, SHODAN_API_KEY, VIRUSTOTAL_API_KEY

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

configFFMPEG_BIN

configGIFSICLE_BIN

🔐 secretPOLAR_TOKEN

🔐 secretPOLAR_WEBHOOK_SECRET

configPOLAR_API_BASE

configDATABASE_URL

configPOLAR_CHECKOUT_PAYG

configPOLAR_CHECKOUT_STARTER

configPOLAR_CHECKOUT_PRO

🔐 secretCONFIG_ENCRYPTION_KEY

configPORT

🔐 secretANTHROPIC_API_KEY— AI agent Yes (or use Ollama / OpenAI) Anthropic API key

🔐 secretOPENAI_API_KEY— AI agent Optional API key for the OpenAI-compatible endpoint (local servers may ignore it)

configOPENAI_BASE_URL— export ="http://localhost:4000/v1"

configOPENAI_MODEL— AI agent Optional Model name to request from the endpoint (default: gpt-4o-mini)

🔐 secretBRIGHTDATA_API_KEY— search_dorks_live, scrape_url Optional Bright Data API key — [get one](https://get.brightdata.com/984ni58s2oad?utm_source=github&utm_medium=readme)¹ (free tier: 5,000 req/month).

configBRIGHTDATA_UNLOCKER_ZONE

🔐 secretABUSEIPDB_API_KEY— search_abuseipdb Optional AbuseIPDB v2 — [get one](https://www.abuseipdb.com/account/api)

🔐 secretHIBP_API_KEY— search_breach Optional HaveIBeenPwned v3 — [get one](https://haveibeenpwned.com/API/Key)

configCENSYS_API_ID— + CENSYS_SECRET search_censys Optional Censys Search API — [get one](https://censys.io/account)

🔐 secretCENSYS_SECRET— CENSYS_API_ID + search_censys Optional Censys Search API — [get one](https://censys.io/account)

configBRIGHTDATA_SERP_ZONE

🔐 secretGITHUB_TOKEN— search_github Optional GitHub API — raises rate limit from 60 to 5000 req/h — [get one](https://github.com/settings/tokens)

🔐 secretIPINFO_TOKEN— search_ip Optional ipinfo.io higher rate limits

🔐 secretIP2LOCATION_API_KEY— search_ip2location Optional IP2Location.io enhanced IP intelligence — [get one](https://www.ip2location.io/pricing) (sponsored)

🔐 secretSHODAN_API_KEY— search_shodan Optional Shodan API — [get one](https://account.shodan.io)

🔐 secretVIRUSTOTAL_API_KEY— search_virustotal Optional VirusTotal API v3 — [get one](https://www.virustotal.com/gui/my-apikey)

configOLLAMA_HOST

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 4 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/openosint-openosint-l4b1vy)](https://m8ven.ai/mcp/openosint-openosint-l4b1vy)

commit: 64f0ff42fcdccd4f4d6c6b40763464b7ed5862bf

code hash: 13a409542d45ec0ef0a4cde17fe969c05375bccf59e0b0b41dd979637327cc5e

verified: 6/20/2026, 9:10:03 AM

view raw JSON →