Openosint
AI-powered OSINT agent with interactive REPL, MCP server, and CLI. 9 tools. Works with Claude, GPT-4, or local models. For authorized security research only.
Last verified:
What is Openosint?
OpenOSINT is an AI-powered OSINT (Open Source Intelligence) agent, MCP server, and CLI tool designed for conducting open source intelligence investigations. It provides three interfaces: an interactive AI-powered REPL where users type targets in natural language and the AI agent autonomously decides which tools to run, a direct CLI for running individual OSINT tools without AI for scripting or quick lookups, and an MCP server that exposes all 14 tools to any MCP-compatible AI client like Claude Code or Claude Desktop .
The framework includes 14 specialized OSINT tools covering email enumeration (holehe), username enumeration across 300+ platforms (sherlock), subdomain enumeration (sublist3r), data breach checks via HaveIBeenPwned API, WHOIS lookups, IP intelligence via ipinfo.io and IP2Location, phone intelligence (phoneinfoga), Google dork generation, Pastebin search, Censys API integration, AbuseIPDB reputation checks, and IP2Location's VPN/Proxy/Tor/datacenter detection. The AI layer uses Anthropic's native tool use API, ensuring hallucination in tool results is structurally impossible since the model stops generation when it needs a tool and receives real output .
OpenOSINT is designed for authorized security researchers, penetration testers, security professionals, investigative journalists, and developers who need to investigate emails, usernames, domains, IP addresses, and phone numbers. The tool is open source under MIT License for personal, academic, and open source use, with commercial licensing available for closed-source commercial products. It requires Python 3.10+ and integrates with external binaries like holehe, sherlock, sublist3r, and phoneinfoga .
Openosint pricing
Pricing model: Freemium
OpenOSINT is released under MIT License - free for personal, academic, and open source use with no attribution requirement. For closed-source commercial products, a commercial license is required with three tiers: Starter at $9/month for up to 3 developers and 1 commercial product with email support (72h response); Pro at $29/month for up to 10 developers and unlimited commercial products with priority support (48h response); Business at $79/month for unlimited developers and unlimited products with 24h support plus invoice. All tiers include access to all updates while subscribed and can be cancelled anytime. To subscribe, email [email protected] with subject 'OpenOSINT Commercial License — [Starter/Pro/Business]' and receive a payment link and license document within 48 hours .
Openosint pros
- AI-powered agent autonomously decides which tools to run and chains them based on findings
- 14 specialized OSINT tools in a single unified framework
- Interactive REPL with natural language input for targets and questions
- MCP server support for Claude Code, Claude Desktop, and other MCP-compatible AI clients
- Hallucination structurally impossible - AI receives real tool output, not fabricated data
- Anthropic native tool use API integration with hard stops when tools are needed
- Direct CLI mode for scripting and quick lookups without AI overhead
- Web interface with real-time streaming output and tool result cards
- Supports Ollama for local inference without API key requirement
- Auto-saves structured reports to reports/ directory after every investigation
- Username enumeration covers 300+ platforms via sherlock
- IP2Location integration sponsored - free Security Plan API key provided
- AbuseIPDB integration shows prominent warning when abuse score exceeds 50%
- Light/dark theme toggle in web interface with preference saved in browser
- MIT License - free for personal, academic, and open source use
- Conversation history maintained per session in REPL
- External dependencies clearly documented with的安装 instructions
Openosint cons
- Requires Python 3.10 or later - incompatible with older Python versions
- External binaries (holehe, sherlock, sublist3r, phoneinfoga) must be manually installed in PATH
- Missing external binary returns descriptive error - tool won't work without it
- Requires ANTHROPIC_API_KEY environment variable for AI features
- Some tools require separate API keys (HIBP_API_KEY, IPINFO_TOKEN, IP2LOCATION_API_KEY, ABUSEIPDB_API_KEY)
- Web interface runs locally only - hosted version at openosint.tech/app is coming soon
- Commercial license required for closed-source commercial products
- Only for authorized security research - prohibited for stalking, harassment, doxxing
- Timeout defaults may need adjustment for slower network connections
- No built-in GUI - terminal and web-based chat interface only
Frequently asked questions about Openosint
What is OpenOSINT?
OpenOSINT is an AI-powered OSINT agent, MCP server, and CLI for Open Source Intelligence. It is a modular framework with three interfaces: an interactive AI-powered REPL where you type targets in natural language, a direct CLI for running individual OSINT tools without AI, and an MCP server that exposes all 14 tools to any MCP-compatible AI client like Claude Code or Claude Desktop. The AI uses Anthropic's native tool use API to autonomously decide which tools to run, chains them based on findings, and compiles structured reports .
How many OSINT tools does OpenOSINT include?
OpenOSINT includes 14 specialized OSINT tools: search_email (holehe), search_username (sherlock), search_breach (HaveIBeenPwned API), search_whois (python-whois), search_ip (ipinfo.io), search_domain (sublist3r), generate_dorks (built-in), search_paste (psbdmp.ws), search_phone (phoneinfoga), search_censys (Censys API), search_ip2location (IP2Location API), and search_abuseipdb (AbuseIPDB v2 API) .
What targets can I investigate with OpenOSINT?
You can investigate emails, usernames, domains, IP addresses (IPv4 and IPv6), and phone numbers. The REPL accepts natural language queries like 'investigate [email protected]', 'find all accounts for johndoe99', 'what subdomains does example.com have?', and 'check if +14155552671 is mobile' .
Does OpenOSINT hallucinate tool results?
No, hallucination in tool results is structurally impossible. The AI layer uses Anthropic's native tool use API where the model issues hard stops when it needs a tool, the real tool executes, and real output goes back to the AI. The AI never fabricates or guesses what a tool would have returned - it only interprets actual tool output .
What external dependencies are required?
External dependencies that must be present in PATH include: holehe (email account enumeration, install via pip install holehe), sherlock (username enumeration across 300+ platforms, install via pip install sherlock-project), sublist3r (subdomain enumeration, install via pip install sublist3r), and phoneinfoga (phone number intelligence, download binary). If a binary is absent, the corresponding tool returns a descriptive error but all other tools remain operational .
What API keys do I need?
You must set ANTHROPIC_API_KEY for AI features. Optional environment variables include: HIBP_API_KEY for search_breach (HaveIBeenPwned API), IPINFO_TOKEN for search_ip (ipinfo.io higher rate limits), IP2LOCATION_API_KEY for search_ip2location (IP2Location API - sponsored free Security Plan key provided), and ABUSEIPDB_API_KEY for search_abuseipdb (AbuseIPDB v2 API) .
How do I install OpenOSINT?
Clone the repository with git clone https://github.com/OpenOSINT/OpenOSINT.git, navigate to the directory with cd OpenOSINT, install with pip install -e ., and set your Anthropic API key with export ANTHROPIC_API_KEY=sk-ant-.... Requires Python 3.10 or later. Then run openosint with no arguments to start the interactive AI REPL .
What is the MCP server and how do I configure it?
The MCP server exposes all 14 OSINT tools to any MCP-compatible AI client. For Claude Code, run: claude mcp add openosint python /absolute/path/to/OpenOSINT/openosint/mcp_server.py. For Claude Desktop, add to ~/Library/Application Support/Claude/claude_desktop_config.json with command 'python' and args pointing to mcp_server.py. This allows Claude to use OpenOSINT tools directly .
Is OpenOSINT legal to use?
OpenOSINT is for authorized security research, penetration testing, and investigative journalism only. Permitted uses include: authorized penetration testing, investigating your own accounts, journalistic investigation, and law enforcement with legal basis. Prohibited uses include: stalking or harassment, doxxing or targeted exposure, unauthorized surveillance, and identity theft or fraud. Users are solely responsible for compliance with GDPR, CCPA, Computer Fraud and Abuse Act, and applicable laws .
How do I get a commercial license?
For closed-source commercial products, email [email protected] with subject 'OpenOSINT Commercial License — [Starter/Pro/Business]'. You will receive a payment link and license document within 48 hours. Starter is $9/month (up to 3 developers, 1 product), Pro is $29/month (up to 10 developers, unlimited products), Business is $79/month (unlimited developers, unlimited products). All tiers include no attribution requirement, access to all updates while subscribed, and cancel anytime [page:0.