OSINT Tools MCP Server
OSINT Tools MCP server enabling AI security agents to perform open-source intelligence gathering — querying Shodan for exposed services, VirusTotal for threat indicators, WHOIS lookups, DNS reconnaissance, and integrating multiple OSINT data sources into agent-driven threat research and security assessment workflows.
Score Breakdown
⚙ Agent Friendliness
🔒 Security
HTTPS. Multiple API keys. Authorized use only. Security community tool.
⚡ Reliability
Best When
A security researcher or analyst needs to aggregate OSINT from multiple sources — Shodan, VirusTotal, DNS, WHOIS — in a single agent workflow for threat intelligence or authorized security testing.
Avoid When
You're conducting unauthorized reconnaissance — always obtain proper authorization before using OSINT tools against targets.
Use Cases
- • Querying Shodan for exposed services and devices from recon agents
- • Checking file and URL reputation via VirusTotal from malware analysis agents
- • Performing WHOIS and DNS lookups from threat intelligence agents
- • Aggregating OSINT data for security assessments from pentest agents
- • Investigating threat indicators from SOC analyst agents
- • Building automated OSINT pipelines from cyber threat intelligence agents
Not For
- • Unauthorized reconnaissance or scanning (authorization required for pentest use)
- • High-volume automated scanning (API rate limits apply)
- • Source code or binary analysis (use IDA/Ghidra MCPs for that)
Interface
Authentication
Shodan API key and VirusTotal API key required for respective functions. Free tier API keys have limited daily queries. Some OSINT functions (WHOIS, DNS) may work without keys.
Pricing
Community MCP is free. API keys from Shodan and VirusTotal have free tiers. For serious security work, paid tiers recommended.
Agent Metadata
Known Gotchas
- ⚠ REQUIRES explicit authorization before scanning any target — never unauthorized
- ⚠ Multiple API keys required (Shodan, VirusTotal) — setup complexity
- ⚠ Free API tiers have strict rate limits — budget queries carefully
- ⚠ Community MCP — feature set and reliability vary
- ⚠ OSINT data is not real-time — Shodan scans are periodic
- ⚠ fr0gger is a known security researcher — reasonable quality for community tool
Alternatives
Full Evaluation Report
Detailed scoring breakdown, competitive positioning, security analysis, and improvement recommendations for OSINT Tools MCP Server.
Scores are editorial opinions as of 2026-03-06.