Osint Terminal is listed as active in the registry but did not answer our last check. It exposes 474 tools.
454 OSINT recon tools + server-side entity correlation & person sweeps. Keyless.
Uptime history
40 days of history · worst day 0%
40 days agonow
0.0%
Uptime 24h
0 of 92 checks
474
Tools
read from the server
93 ms
Response time
average over 24h
open, no key
Access
streamable-http
What changed 21
Every tool that appeared, vanished or quietly changed what it asks for. Recorded since 24 September 2026. No other catalogue keeps this.
9 Oct
3 tools appeared
fbsearch, social_deep, workup
8 Oct
4 tools appeared
hunter_count, hunter_domain, hunter_find and 1 more
7 Oct
10 tools appeared
bssid_geo, email_crosssite, email_domain_cross and 7 more
7 Oct
a tool description was rewritten
phone_leak
24 Sep
3 tools appeared
agent_manifest, correlate_sweep, person_sweep
Osint Terminal does not always answer
Over the last week it answered 0.0% of our checks. We check every 15 minutes, so you hear about the next outage within the hour — not from your users.
Connect this server
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 2 min ago.
run in your terminal
claude mcp add osint-terminal --transport http https://osint-mcp.thetempleofdoom.com/mcpSettings → Connectors → Add custom connector, then paste this address
https://osint-mcp.thetempleofdoom.com/mcp~/.codex/config.toml
[mcp_servers.osint-terminal]
url = "https://osint-mcp.thetempleofdoom.com/mcp".cursor/mcp.json
{
"mcpServers": {
"osint-terminal": {
"url": "https://osint-mcp.thetempleofdoom.com/mcp"
}
}
}.vscode/mcp.json
{
"servers": {
"osint-terminal": {
"type": "http",
"url": "https://osint-mcp.thetempleofdoom.com/mcp"
}
}
}Available tools 474
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
cve
cve
CVE Lookup: CVE detail + CVSS (CIRCL, no key)
cve_poc_checker
CVE POC Check: Check if a CVE has public POC/exploit code
cve_severity
CVE Severity: CVSS + EPSS + KEV for a CVE
cve_timeline
CVE Timeline: When a CVE was discussed (Twitter/Reddit/News)
email
email
Email Intel: Gravatar, MX, disposable detection
email_crosssite
Email Identity: Gravatar graph, disposable check, breach/paste surfaces (mosint)
email_domain_cross
Domain Emails: Subdomain surface + org email-pattern dorks for a domain
email_registration
Email Cross-Site: Which 120+ sites have an account on this email (holehe)
hunter
hunter_count
Hunter: Email Count: How many emails findable for a domain (free)
hunter_domain
Hunter: Domain Emails: All findable emails for a domain + names/positions/confidence
hunter_find
Hunter: Find Email: name + domain -> most likely email (usage: first last domain)
hunter_verify
Hunter: Verify Email: Deliverability verdict: valid/invalid/accept_all + score
github
github
GitHub Recon: Profile, repos, languages
github_code
GitHub Code Search: GitHub unauthenticated code search (10 results)
github_trending
GitHub Trending: Trending repos (optional language filter)
hibp
hibp
HIBP Password Check: Check if a password appeared in breaches via HIBP k-anonymity (no key)
hibp_breaches
HIBP Breaches: Check breach database for email/username exposure
hibp_email
HIBP Email Breaches: Email breach exposure via XposedOrNot (HIBP-compatible, no key)
phone
phone
Phone Number: E.164 country/region (offline)
phone_deep
Phone Deep-Dive: Validity, carrier, region + WhatsApp/Telegram/Signal pivots, caller-ID surfaces
phone_leak
Phone Leak Check: Phone in breaches/pastes via LeakCheck + dork pack
hackernews
hackernews
Hacker News: Profile: karma, age, activity
hackernews_front
HN Front Page: Current Hacker News front-page stories
paste
paste_domain
Paste Domain Search: Find domain in public pastes via psbdmp.ws (no key)
paste_email
Paste Email Search: Find email in public pastes via Wayback CDX + search links (no key)
person
person_identity
Person Identity: Name -> gender/age/nationality probs + Wikipedia/Wikidata + dorks
person_sweep
Person-focused sweep: checks ~30 username/email/social presence tools for
one name/handle and returns where it exists plus extracted entities.
rdap
rdap
RDAP Registration: Structured domain registration record (RDAP/IANA bootstrap, no key)
rdap_domain
RDAP Domain: RDAP structured domain registration data
reddit
reddit_sub
Reddit Subreddit: Subreddit: subscribers, active users, description
reddit_user
Reddit User: Reddit user: karma, age, verified status
social
social
Social Links: Direct profile URLs across 20 platforms
social_deep
SOCIAL DEEP: All-Platform Link Set: 'name | username | phone | email' (pipe-separated, use what you have) -> ready URL sets for FB/IG/TikTok/X/LinkedIn/Reddit/Discord/Snap/Bluesky/WhatsApp/biolinks
threat
threat_actor
Threat Actor: Known campaigns, techniques, tools
threat_pattern
Threat Pattern: Find threat patterns across incidents
username
username
Username Hunter: Presence across 16 public sites
username_dossier
Username Dossier: 250-site profile dossier via Maigret with extracted names/emails/phones
uuid
uuid
UUID Parser: Version/variant + v1 timestamp/MAC (offline)
uuid_validate
UUID Validator: UUID v1-v5 version and variant detector
wayback
wayback
Wayback Machine: Archive.org snapshot history
wayback_leaks
Wayback Leak Scan: Search Wayback Machine for historically exposed .env/config/secrets
whois
whois
WHOIS / RDAP: Registration, status, nameservers, DNSSEC
whois_check
WHOIS Check: Domain WHOIS record existence via who.is
abusecontact
abusecontact
Abuse Contact: Authoritative abuse email (RIPEstat finder)
adstxt
adstxt
ads.txt: Ad-tech sellers declared in ads.txt
agent
agent_manifest
Self-describing manifest of all OSINT Terminal agent endpoints.
agify
agify
Age Predictor: Predict age from a first name (agify.io)
airquality
airquality
Air Quality: PM2.5/PM10/European AQI at coords (Open-Meteo, no key)
antipode
antipode
Antipode: Opposite point on Earth for coords (offline)
api
api_key_scan
API Key Exposure: Scan GitHub/Pastebin/Google for exposed API keys/secrets
apileak
apileak
API Leak Search: GitHub dork links for API key/secret exposure
apod
apod
NASA APOD: Astronomy Picture of the Day (optional date)
apt
apt_track
APT Track: Track APT campaigns via MITRE + researchers
archiveorg
archiveorg
Archive.org Item: Internet Archive item metadata
arxiv
arxiv
arXiv Search: arXiv paper search by title/author/keyword
ascii85
ascii85
Ascii85: Ascii85 encode/decode (offline)
asn
asn
ASN / BGP: ASN details or prefixes for an IP
asnlookup
asnlookup
ASN Lookup: ASN org/country/prefixes via RIPEstat
asnprefixes
asnprefixes
ASN Prefixes: All announced prefixes for an ASN (RIPEstat)
asrank
asrank
AS Rank (CAIDA): Global ASN ranking + customer cone size
atbash
atbash
Atbash Cipher: Atbash A↔Z mirror cipher (offline, self-inverse)
attack
attack_surface
Attack Surface: Map attack surface: services + endpoints + API
barcode
barcode
Barcode Validate: EAN-13 / UPC-A check digit validation (offline)
base
base_convert
Base Convert: Binary/octal/decimal/hex number conversion (offline)
base32
base32
Base32 Encode/Decode: RFC 4648 Base32 encode or decode
base36
base36
Base36 Codec: Encode int <-> base36, autodetecting direction (offline)
base58
base58
Base58 Codec: Bitcoin base58 encode/decode: 'hex:..' / 'b58:..' (offline)
base64
base64
Base64: Auto decode/encode base64 (offline)
bearing
bearing
Bearing: Initial compass bearing between two coord pairs (offline)
bgphistory
bgphistory
BGP History: Routing origin history (RIPE Stat)
bimi
bimi
BIMI: Brand-indicator (logo) DNS record
bin
bin
Card BIN: Issuer/scheme/country from card BIN (binlist)
binarytext
binarytext
Binary Text: Text ↔ 8-bit binary (offline)
binlookup
binlookup
BIN Lookup: Card BIN → bank, brand, country, type
blockheight
blockheight
Block Height: Current Bitcoin + Ethereum block height
bluesky
bluesky
Bluesky: AT Protocol public profile
botnet
botnet_tracker
Botnet Tracker: Botnet C2 + IoT malware tracking
breach
breach_aggregator
Breach Aggregator: Aggregate breach databases (XposedOrNot, LeakCheck, etc)
breachdb
breachdb
BreachDB Search: Aggregated breach collection search
breachdirectory
breachdirectory
Breach Directory: ProxyNova COMB dataset search for credential exposure
breachsearch
breachsearch
Breach Catalog: Public HIBP breach metadata search
brew
brew
Homebrew: Formula/cask version, deps, installs
bssid
bssid_geo
WiFi BSSID Geo: BSSID/cell -> approximate location (Mylnikov free DB)
btcaddr
btcaddr
BTC Address: Bitcoin balance/tx via mempool.space
btcfees
btcfees
BTC Fees: Recommended Bitcoin fees sat/vB (mempool.space)
caa
caa
CAA Records: Which CAs may issue certs for the domain
caesar
caesar
Caesar Cipher: ROT-N / Caesar brute force, all 25 shifts (offline)
camera
camera
Camera Exposure: RTSP/ONVIF + camera-port exposure (per-target)
casify
casify
Case Convert: snake/camel/Pascal/kebab/CONSTANT case (offline)
cdnjs
cdnjs
cdnjs: Hosted JS library version + assets
cdxwayback
cdxwayback
Wayback CDX: Snapshot count + first/latest capture in Wayback Machine
certhistory
certhistory
Cert History: crt.sh issuer timeline & counts
cfradar
cfradar
Cloudflare Radar: Domain rank + categories from Cloudflare Radar
checksum
checksum
CRC32/Adler32: CRC32 + Adler32 checksum of input text (offline)
chesscom
chesscom
Chess.com: Public player profile + ratings
cidr
cidr
CIDR Calculator: Subnet calc: network, mask, host range, count (offline)
cidrinfo
cidrinfo
CIDR Calculator: Network/broadcast/host-count (offline)
circlhash
circlhash
Hash Lookup: Known-file lookup (CIRCL hashlookup)
cisa
cisa_alerts
CISA Alerts: CISA alerts + advisories (recent threats)
clickjacking
clickjacking
Clickjacking: X-Frame-Options + CSP frame-ancestors check
cloud
cloud
Cloud Provider: AWS/GCP/Azure/etc. detection + hosting flag
codeberg
codeberg
Codeberg: Codeberg/Gitea public user
codeforces
codeforces
Codeforces: Codeforces competitive programmer rating & rank
coininfo
coininfo
Coin Info: Coin metadata: categories, algorithm, genesis (CoinGecko)
color
color
Color Parser: hex/rgb -> rgb/hsl + nearest name (offline)
comb
comb_search
COMB Credential Search: Search COMB breach compilation via ProxyNova free API
commoncrawl
commoncrawl
Common Crawl: Captures of a domain in Common Crawl index
cookies
cookies
Cookie Audit: Secure/HttpOnly/SameSite flag review
correlate
correlate_sweep
Run a 40-tool broad sweep on the query and return the cross-tool entity
graph: emails/domains/IPs/handles/phones appearing in >=2 tools, strongest
first. This is the connected-pattern signal.
cors
cors
CORS Check: Origin-reflection / wildcard misconfig
country
country
Country Profile: World Bank country profile by ISO code
cpe
cpe
CPE → CVEs: NVD: recent CVEs affecting a CPE 2.3 string
cpfcnpj
cpfcnpj
CPF / CNPJ: Brazilian doc checksum (offline)
cratedownloads
cratedownloads
Crate Downloads: Download totals for a Rust crate
crates
crates
crates.io: Rust crate stats + downloads
cratestats
cratestats
crates.io Stats: Rust crate downloads, version, repo (no key)
crc32
crc32
CRC-32 Checksum: Compute CRC-32 of input
credential
credential_stuffing
Credential Stuffing Risk: Check breach + stuffing risk
creditcard
creditcard
Card Brand: Identify card brand + Luhn validity (offline)
creditcardtest
creditcardtest
Credit Card Validator: Luhn check + brand guess (test only)
cron
cron
Cron Explain: Explain a 5-field cron expression (offline)
crossrefauthor
crossrefauthor
Crossref Author: Works by author/keyword (Crossref)
crypto
crypto
Crypto Address: BTC/ETH balance & tx history
cryptomarket
cryptomarket
Crypto Market: Global market cap, BTC dominance, 24h volume (CoinGecko)
cryptoprice
cryptoprice
Crypto Price: Live coin price + 24h change (CoinGecko)
csp
csp_parse
CSP Analyzer: Content-Security-Policy header analysis & grade
ctlogsearch
ctlogsearch
CT Logs (Org): crt.sh cert search by organization name
cvedetail
cvedetail
CVE Detail: Full CVE record (CVSS, refs) via CIRCL
darkweb
darkweb_monitor
Darkweb Monitor: Darkweb monitoring: marketplaces, paste sites
datacite
datacite
DataCite Search: Research datasets/DOIs by keyword
datauri
datauri
Data URI Parse: Parse or create data: URIs
dblp
dblp
DBLP: DBLP CS publication search
ddg
ddg_instant
DDG Instant: DuckDuckGo instant answer + related topics
decode
decode
Decoder: Auto base64/hex/URL-decode + refang
deep
ip_deep
IP Deep Intel: Geo + ASN + VPN/proxy/Tor risk + open ports/vulns + reverse DNS
dehashed
dehashed_domain
DeHashed Domain: DeHashed public page scrape for domain breach exposure
depsdev
depsdev
deps.dev: Open-source insights: versions, default
deviantart
deviantart
DeviantArt Meta: Deviation title + author (oEmbed)
devto
devto
dev.to: Forem/dev.to public profile
dirlisting
dirlisting
Directory Listing: Open directory-index exposure (per-target)
disasters
disasters
Disasters (GDACS): Active worldwide disasters: quakes/cyclones/floods (feeds globe)
disposable
disposable
Disposable Email: Is the email domain a disposable provider?
disposablecheck
disposablecheck
Disposable Email: Check if email is temporary/disposable
dns
dns
DNS Records: A/AAAA/MX/NS/TXT/CNAME/SOA/CAA records
dnsbl
dnsbl
DNS Blocklist: Spamhaus/Barracuda/SORBS/SpamCop check
dnsgraph
dnsgraph
DNS Graph (HE): Hurricane Electric DNS delegation info
dnsmx
dnsmx
MX (DoH): MX records via Google DNS-over-HTTPS
dnsprop
dnsprop
DNS Propagation: Compare A records across Google/Cloudflare/Quad9
dnsptrrange
dnsptrrange
PTR Range Sweep: Reverse-DNS every host in a /24 (offline)
dnsquery
dnsquery
DNS A Record: DNS A record lookup via Google DoH
dnsrecon
dnsrecon
DNS Recon: Query ALL DNS record types at once
dnssec
dnssec
DNSSEC: Is the zone signed (AD flag + DNSKEY/DS)
dnsverify
dnsverify
TXT Verifications: Which SaaS a domain is enrolled in (TXT tokens)
dockerhub
dockerhub
Docker Hub Repo: Docker Hub repo pulls, stars, last update (no key)
dogeaddr
dogeaddr
DOGE Address: Dogecoin address balance & tx count
doh
doh
DoH Records: Uncommon DNS records (HTTPS/SVCB/TLSA/SRV/NAPTR…)
doi
doi
DOI Resolver: Crossref publication metadata for a DOI
domainage
domainage
Domain Age: Days since registration (phishing signal)
dorking
gh_dorking
GitHub Dork Search: GitHub code search for target string exposure in public repos
dorks
dorks
Search Dorks: Builds manual OSINT search links
ean
ean
Barcode/EAN: EAN/UPC check digit + GS1 country prefix (offline)
elevation
elevation
Elevation: Ground elevation in metres (Open-Meteo)
emailformat
emailformat
Email Validator: Basic RFC 5322 email format validation
emailrep
emailrep
Email Reputation: emailrep.io: malicious/spam/breach flags for email (no key, limited)
emailsec
emailsec
Email Security: SPF / DMARC / DKIM posture
emerging
emerging_threats
Emerging Threats: Emerging threats: new CVEs + 0days (24h)
emoji
emoji
Emoji Lookup: Emoji ↔ Unicode name/codepoint (offline)
ens
ens
ENS Resolve: ENS name <-> ETH address + avatar
entropy
entropy
Shannon Entropy: Per-char entropy — flags secrets/keys
epoch
epoch
Epoch Time: Unix timestamp <-> UTC datetime
epss
epss
EPSS Score: Exploitation probability (FIRST EPSS)
ethaddr
ethaddr
ETH Address: Ethereum balance/tx + contract flag
ethcontract
ethcontract
ETH Contract: Contract check + Sourcify verified source
exploit
exploit_cve
CVE Exploits: Exploit-DB + GitHub POCs for a CVE
favicon
favicon
Favicon Hash: favicon md5/sha256 for pivoting
fbsearch
fbsearch
FB Search URLs (graph replacement): name [| keyword] -> ready facebook search URLs: people/posts/all/keyword-filtered
fccid
fccid
FCC ID: FCC equipment authorization database
feeds
feeds
RSS / Atom Feeds: Discover syndication feeds on a site
feodo
feodo
Feodo C2: abuse.ch botnet C2 blocklist (key-free)
feodoips
feodoips
Feodo C2 List: Is IP on abuse.ch Feodo botnet C2 list
flightsnear
flightsnear
Flights Nearby: Live aircraft within ~1° of coords (OpenSky)
formaudit
formaudit
Form Audit: Enumerate forms/inputs (login/upload) — attack surface
fxrate
fxrate
FX Rates: Live exchange rates for a currency code
gdelt
gdelt
GDELT News: Global news/events by keyword (last 24h)
genderize
genderize
Gender Predictor: Predict gender from a first name (genderize.io)
geocode
geocode
Geocode: Place name → coordinates (OSM Nominatim)
geodist
geodist
Geo Distance: Great-circle distance between two coord pairs (offline)
geohash
geohash
Geohash: lat,lon -> geohash (offline)
ghadvisory
ghadvisory
GitHub Advisories: Security advisories for an ecosystem (pip/npm/…)
ghcommits
ghcommits
GitHub Commits: Recent commits for owner/repo
ghevents
ghevents
GitHub Activity: Recent public GitHub events for a user (60/hr)
ghgists
ghgists
GitHub Gists: Public gists for a user
ghkeysgpg
ghkeysgpg
GitHub GPG Key: Whether a user publishes a GPG key
ghlanguages
ghlanguages
Repo Languages: Language byte-breakdown for owner/repo
ghorg
ghorg
GitHub Org: Public org profile
ghpubkeys
ghpubkeys
GitHub SSH Keys: A user's public SSH keys (.keys)
ghrepo
ghrepo
GitHub Repo: Stars/langs/license/activity (owner/repo)
gitexposed
gitexposed
Exposed Files: .git/.env/backup exposure (per-target)
githubgists
githubgists
GitHub Gists: A user's public gists
githubsearch
githubsearch
GitHub Repo Search: Search GitHub repos by keyword
gitignore
gitignore
gitignore Template: GitHub .gitignore template for a language
gitlab
gitlab
GitLab: Public user profile
gleif
gleif_name
GLEIF Name: GLEIF fuzzy legal-entity name → LEI codes
golangpkg
golangpkg
Go Module: Latest version of a Go module
gomod
gomod
Go Module: Go module latest version (module proxy)
goproxy
goproxy
Go Module: Latest version of a Go module via module proxy (no key)
gps
gps_deep
GPS Full Context: Coords/place -> address, sun times, nearby POIs, map links
graphql
graphql
GraphQL Probe: Find GraphQL endpoint + introspection (per-target)
gravatarfull
gravatarfull
Gravatar Profile: Full public Gravatar profile + linked accounts
greynoise
greynoise
GreyNoise: Is the IP a known internet scanner — benign/malicious
hashid
hashid
Hash Identifier: Guess hash algorithm from length/charset
hashnode
hashnode
Hashnode: Blogger profile: followers, posts
hashtext
hashtext
Hash Text: md5/sha1/sha256/sha512 of text (offline)
headers
headers
HTTP / Security: Headers + security-header scorecard
hexdump
hexdump
Hexdump: Offset/hex/ASCII hexdump of input (offline)
hexpm
hexpm
Hex.pm: Elixir/Erlang package downloads
hnsearch
hnsearch
HN Search: Search Hacker News stories/comments
hnuser
hnuser
Hacker News User: HN profile: karma, created, submission count
holidays
holidays
Public Holidays: Country public holidays this year (nager.at)
homoglyph
homoglyph
Homoglyph: Detect confusable/mixed-script spoofing chars (offline)
hosthunt
hosthunt
Host Search: Forward-DNS host/subdomain map (HackerTarget)
hostname
hostname
Reverse DNS: IP → hostname via reverse DNS
hostsearch
hostsearch
Host Search: Forward-DNS host enumeration for a domain
hstspreload
hstspreload
HSTS Preload: Is the domain on the browser HSTS preload list
htmlcomments
htmlcomments
HTML Comments: Extract HTML comments — leaked TODOs/paths/software
htmlencode
htmlencode
HTML Encode/Decode: HTML entity encode/decode
httpcode
httpcode
HTTP Status Code: HTTP status code meaning & family (offline)
httping
httping
HTTP Ping: Reachability + response timing
httpmethods
httpmethods
HTTP Methods: Allowed methods + TRACE/risky-verb check
httpstatus
httpstatus
HTTP Status: Explain an HTTP status code (offline)
hudsonrock
hudsonrock
HudsonRock Stealer: Stealer-log exposure check via HudsonRock Cavalier free API
huggingface
huggingface
HuggingFace: HuggingFace user profile or model card
human
human_sweep
Human Sweep: Auto-detect target type, run all matching human tools, merge entities
iban
iban
IBAN Validate: ISO 13616 checksum + country/length (offline)
imagechunks
imagechunks
PNG Chunks: Hidden tEXt/zTXt/iTXt chunks in PNG (steganography)
imagecolors
imagecolors
Image Palette: Dominant color palette extraction
imageexif
imageexif
Image EXIF: Full EXIF: camera, lens, timestamps, software
imagegps
imagegps
Image GPS: GPS coordinates from EXIF → map links (feeds globe)
imagehash
imagehash
Image Hash: Perceptual aHash + sha256/md5 for dupe matching
imageicc
imageicc
ICC Profile: Color profile name — fingerprints editing software
imagelsb
imagelsb
LSB Steg Detect: Statistical LSB analysis — detects possible hidden payload
imagemeta
imagemeta
Image Metadata: Dimensions, format, mode, size, megapixels
imagephash
imagephash
Image pHash/dHash: dHash + pHash for robust near-duplicate detection
imagerev
imagerev
Reverse Image: Google Lens / Yandex / Bing / TinEye search links
imagethumb
imagethumb
EXIF Thumbnail: Extract embedded thumbnail — often retains GPS after stripping
imagexmp
imagexmp
XMP Metadata: XMP block: creator tool, edit history, software version
imei
imei
IMEI Check: Validate IMEI (Luhn) + split TAC/serial (offline)
infra
infra_fingerprint
Infra Fingerprint: Infrastructure fingerprinting + hosting
infrastructure
c2_infrastructure
C2 Infrastructure: Detect C2 infrastructure + hosting
intelx
intelx_email
XposedOrNot Breach: Email breach exposure — breach names, data types, paste hits (XposedOrNot, no key)
internetdb
internetdb
Shodan InternetDB: Open ports, CPEs, tags, known CVEs for a host
ioc
ioc_reputation
IOC Reputation: Cross-check IP/domain/hash across feeds
ipfull
ipfull
IP Full Profile: Rich geo+ASN+proxy/mobile/hosting flags
ipgeo
ipgeo
IP Geolocation: Geo, ISP, ASN, proxy/hosting flags
ipint
ipint
IP ↔ Integer: IPv4 ↔ integer ↔ hex (offline)
ipv4classify
ipv4classify
IP Classify: Classify IP: private/loopback/multicast/global (offline)
ipv6
ipv6
IPv6 Validator: IPv6 parser, expander, classifier
ipwhois
ipwhois
IP WHOIS / RDAP: Network owner, range, abuse contact
isbn
isbn
ISBN Book: Book metadata (OpenLibrary) + checksum
isbnmeta
isbnmeta
ISBN Metadata: Book title/authors/subjects (OpenLibrary)
isexitnode
isexitnode
Tor Exit Check: Is this a Tor exit node?
isin
isin
ISIN Validate: Validate ISIN security identifier check digit (offline)
isotime
isotime
Timestamp Convert: Parse/convert a timestamp (offline)
iss
iss
ISS Position: Live International Space Station lat/lon
jarm
jarm
JARM / InternetDB: Shodan InternetDB: ports, CPEs, vulns, tags (no key)
jslibs
jslibs
JS Libraries: Enumerate <script> sources + detect JS libs/versions
jsonfmt
jsonfmt
JSON Format: Validate, pretty-print & stat JSON (offline)
jwt
jwt
JWT Decoder: Header + claims (no signature verify)
jwtdecode
jwtdecode
JWT Decode: Decode JWT header+payload (offline, unverified)
kev
kev
CISA KEV: Is the CVE actively exploited (KEV catalog)
keybase
keybase
Keybase: Crypto identity + linked social proofs
latlonformat
latlonformat
Lat/Lon Format: DD ↔ DMS ↔ DM coordinate format conversion (offline)
leakcheck
leakcheck
LeakCheck: Breach exposure via leakcheck.io public endpoint (no key)
leaklookup
leaklookup
Hudson Rock Stealers: Infostealer compromise check — stealer logs, credential count (Hudson Rock, no key)
leet
leet
Leetspeak: Leetspeak transform (offline)
leetcode
leetcode_user
LeetCode: LeetCode solved problems, ranking, badges
lei
lei
LEI Lookup: GLEIF legal-entity record by LEI code
links
links
Link Extractor: All links + external domains + emails on a page
linktree
linktree
Linktree: Extract destination links from a linktr.ee profile
lobsters
lobsters
Lobste.rs: Public user profile + karma
ltcaddr
ltcaddr
LTC Address: Litecoin address balance & tx count
luhn
luhn
Luhn Check: Validate card/IMEI Luhn checksum (offline)
mac
mac
MAC Vendor: OUI → hardware vendor
macvalid
macvalid
MAC Validator: MAC address parser (colon/dash/plain)
macvendor
macvendor
MAC Vendor (OUI): MAC vendor + local/multicast bits from local OUI table (offline)
macvendorlookup
macvendorlookup
MAC Vendor: OUI → hardware vendor (macvendors.com)
maidenhead
maidenhead
Maidenhead Grid: Coords → ham-radio grid locator (offline)
malware
malware_family
Malware Family: Variants, IOCs, AV detections
manifest
manifest
PWA Manifest: Web app manifest: name, icons, theme
marineweather
marineweather
Marine Weather: Wave height/period/direction + sea temp at coords
mastodon
mastodon
Mastodon: Resolve user@instance via WebFinger
math
ip_math
IP Math: CIDR: network/broadcast/range/host count (offline)
maven
maven
Maven Central: Java artifact: 'group:artifact' or name
medium
medium
Medium: Author feed: recent post titles
metatags
metatags
Meta Tags: OpenGraph / Twitter-card / generator meta tags
mgrs
mgrs
MGRS Grid: Lat/lon → MGRS military grid reference (offline)
mimetype
mimetype
MIME Type: File extension → MIME type (offline)
mitre
mitre_technique
MITRE Technique: ATT&CK technique → tactics + detection
moonphase
moonphase
Moon Phase: Current moon phase & illumination (offline)
morse
morse
Morse Code: Morse encode/decode, autodetecting direction (offline)
mtasts
mtasts
MTA-STS: Inbound-mail TLS enforcement policy
musicbrainz
musicbrainz
MusicBrainz: Artist search: type, country, MBID
musicbrainzartist
musicbrainzartist
MusicBrainz Artist: Artist type, country, lifespan
nationalize
nationalize
Nationality: Predict nationality from a name (nationalize.io)
nato
nato
NATO Phonetic: Spell text in NATO phonetic alphabet (offline)
nearbywiki
nearbywiki
Nearby Places: Wikipedia places near a coordinate
npm
npm
npm Author: Packages published by an author
npmdl
npmdl
npm Downloads: npm download counts day/week/month
npmdownloads
npmdownloads
npm Downloads: npm package download counts, last week + month (no key)
npmorg
npmorg
npm Org: npm organization: all published packages
npmpkg
npmpkg
npm Package: npm package version, deps, maintainers
nstrace
nstrace
NS Delegation: Trace NS delegation: TLD → registrar → authoritative
nuget
nuget
NuGet: .NET package stats + downloads
numlookup
numlookup
Number Lookup: Validity, region, carrier, line type, timezones (libphonenumber)
numwords
numwords
Number to Words: Integer → English words (offline)
nvdcve
nvdcve
NVD CVE Detail: Full NVD record: CVSS, CWE, references
onthisday
onthisday
On This Day: Historical events on a date (Wikipedia; MM/DD or today)
openalexauthor
openalexauthor
OpenAlex Author: Author works count, h-index, institution
openalexwork
openalexwork
OpenAlex Work: Scholarly work: citations, concepts, OA
opencorp
opencorp
OpenCorporates: Company registrations worldwide search
openfoodfacts
openfoodfacts
Product Barcode: EAN/UPC -> product, brand, nutrition
openphish
openphish
OpenPhish: Community phishing-URL feed membership
orcid
orcid
ORCID: Researcher record (0000-000X-…)
orcidworks
orcidworks
ORCID Works: Recent publications for an ORCID iD
orgname
orgname
Company → LEI: Fuzzy company-name search → candidate LEIs
osmuser
osmuser
OpenStreetMap User: Contributor: last edit + changeset
osv
osv
OSV Vulns: Known package vulns (OSV.dev). 'eco:name'
otxdomain
otxdomain
OTX Domain Rep: AlienVault OTX threat pulses for a domain
otxip
otxip
OTX IP Rep: AlienVault OTX threat pulses for an IP
packagist
packagist
Packagist: PHP/Composer package stats (vendor/pkg)
pageinfo
pageinfo
Common Crawl Page: Common Crawl capture index lookup
passentropy
passentropy
Password Entropy: Estimate entropy & offline crack time (offline)
passgen
passgen
Password Gen: Generate strong random passwords + passphrase (offline)
password
password_dumps
Password Dump Search: Search Dehashed for leaked passwords (query-only)
passwordcheck
passwordcheck
Password Pwned: HIBP k-anonymity breach check (safe)
peeringdb
peeringdb
PeeringDB: Network type, traffic, IX/facility presence
peeringnet
peeringnet
PeeringDB Net: Peering policy / traffic / IX presence for ASN
peers
peers
ASN Peers: Upstream/downstream BGP neighbours
permissions
permissions_pol
Permissions Policy: Permissions-Policy: camera/mic/geo controls
pgp
pgp
PGP Key: Public key published on keys.openpgp.org
phishing
phishing_intel
Phishing Intel: Phishing kit tracking + URL detection
phoneapps
phoneapps
Messaging Links: WhatsApp / Telegram / Viber / Signal deep links
phonecc
phonecc
Calling Code: Country, trunk & intl dialing prefixes (offline)
phonefmt
phonefmt
Phone Format: E.164 / national / international / RFC3966 formats (offline)
phonenanp
phonenanp
NANP Area Code: +1 number → US/Canada region (offline subset)
phonepivot
phonepivot
Phone Lookups: Caller-ID / reputation site links (Truecaller, Sync.me…)
phonespam
phonespam
Spam Reports: Robocall / scam report-database links
phonevcard
phonevcard
vCard: Generate a .vcf contact card (offline)
pluscode
pluscode
Plus Code: Coords → Open Location Code / Google Plus Code (offline)
port
port
Port Reference: Service + exposure notes for a port number
portlookup
portlookup
Port Lookup: IANA port → service name (offline)
portquick
portquick
Port Check: Quick TCP port scan (2s timeout)
portscan
portscan
Port Scan: TCP connect scan: common + camera ports
pubmed
pubmed
PubMed: PubMed biomedical paper search (NCBI)
punycode
punycode
Punycode/IDN: IDN domain ↔ Punycode (xn--) homograph check (offline)
pwstrength
pwstrength
Password Strength: Offline entropy/strength estimate
pypi
pypi
PyPI Package: Python package metadata + links
pypiproject
pypiproject
PyPI Project: PyPI version/license/links
pypistats
pypistats
PyPI Downloads: PyPI recent download counts
qrcode
qrcode
QR Code: Generate a QR code for text/URL
quakes
quakes
Earthquakes: USGS recent quakes — global or near coords (M2.5+)
quoted
quoted_printable
Quoted-Printable: Quoted-printable encode/decode
railfence
railfence
Rail Fence: Rail-fence cipher over 3 rails (offline)
random
random_fact
Random Fact: Random trivia fact
randomuser
randomuser
Random Identity: Synthetic identity for sockpuppet hygiene (randomuser.me)
ransomware
ransomware_tracker
Ransomware Groups: Ransomware gang profiles + recent hits
rdapip
rdapip
RDAP IP: Authoritative RDAP record for an IP
redirects
redirects
Redirect Tracer: Full HTTP redirect chain
referrer
referrer_pol
Referrer Policy: Referrer-Policy header — URL leakage risk
regdomain
regdomain
Registered Domain: Extract eTLD+1 registered domain from URL (offline)
restcountry
restcountry
Country Detail: Capital/region/income by name or ISO (World Bank)
reversedns
reversedns
Reverse DNS: PTR record / hostname
reverseip
reverseip
Reverse IP: Other domains sharing the host
revgeo
revgeo
Reverse Geocode: lat,lon -> address (OSM Nominatim)
revgeocode
revgeocode
Reverse Geocode: Coordinates → nearest address (OSM)
revimg
revimg
Reverse Image: Reverse-image-search links (Lens/Yandex/TinEye/Bing)
ripewhois
ripewhois
RIPE Network Info: Covering prefix + origin ASN (RIPEstat)
robots
robots
robots.txt: Disallowed paths + sitemaps
robotsmeta
robotsmeta
Robots Meta: meta-robots + X-Robots-Tag: noindex/nofollow/noarchive
robotstxt
robotstxt_history
robots.txt History: Historical robots.txt snapshots from Wayback Machine
roman
roman
Roman Numerals: Convert int <-> roman numeral, autodetecting (offline)
rot13
rot13
ROT-13 Cipher: ROT-13 encode/decode
rot47
rot47
ROT47: ROT47 ASCII cipher (offline, self-inverse)
rpki
rpki
RPKI / ROA: Route-origin validation for the covering prefix
rubygemrev
rubygemrev
Gem Rev-Deps: Reverse dependencies of a RubyGem
rubygems
rubygems
RubyGems: Ruby gem stats + downloads
s3buckets
s3buckets
Cloud Buckets: S3/GCS/Azure buckets named for the domain
sec
sec_edgar
SEC EDGAR: Company name + recent SEC filings by ticker/CIK
secret
gh_secret_scan
GitHub Secret Scan: Scan GitHub user's public repos for leaked secrets/passwords
securitytxt
securitytxt
security.txt: RFC 9116 disclosure policy & contacts
semanticscholar
semanticscholar
Semantic Scholar: Paper TLDR, citations, influence
semver
semver
Semantic Version: Parse and validate semantic versioning
sha256lookup
sha256lookup
SHA-256 Reverse: Crack SHA-256 via online DB
sitemap
sitemap
Sitemap: Fetch sitemap.xml + list URLs
slug
slug
Slugify: Text → URL-safe slug (offline)
smtpbanner
smtpbanner
SMTP Banner: SMTP banner & EHLO capabilities (ports 25/587/465)
snowflake
snowflake
Snowflake ID: Decode Twitter/Discord snowflake → timestamp (offline)
snusbase
snusbase_hash
Hash Reverse (Leaks): Reverse MD5/SHA1 hash via breach-sourced hash DB (md5decrypt.net)
soladdr
soladdr
SOL Account: Solana account balance & owner program
sopostuser
sopostuser
StackOverflow User: SO profile + reputation by numeric id
soundcloud
soundcloud
SoundCloud Meta: Track/user title + author (oEmbed)
spacepeople
spacepeople
People in Space: Who is in space right now (names + craft)
spaceweather
spaceweather
Space Weather: Planetary Kp index + geomagnetic storm/aurora (NOAA)
spamhauslookup
spamhauslookup
Spamhaus IP Check: Spam/phishing IP blacklist check
spdxlicense
spdxlicense
SPDX License: SPDX license id → name + OSI status
sri
sri_check
SRI Check: Subresource Integrity: external scripts without integrity=
srvlookup
srvlookup
SRV Records: SIP/XMPP/mail/CalDAV SRV record discovery
ssh
ssh
SSH Banner: Per-target SSH server banner / version
ssn
ssn_check
SSN/Identity Leak: Check if SSN/DOB appears in identity theft databases
stackoverflow
stackoverflow
Stack Overflow: SO/SE user search by display name
steam
steam_user
Steam Profile: Steam community profile via public XML
stringmetrics
stringmetrics
String Metrics: Length, entropy, character breakdown
subbrute
subbrute
Subdomain Brute: Resolve a common-subdomain wordlist (per-target)
subdomains
subdomains
Subdomains: Certificate-transparency subdomain discovery
suntimes
suntimes
Sun Times: Sunrise/sunset/twilight for a coordinate (UTC)
supply
supply_chain_risk
Supply Chain Risk: Dependency vulns + typosquatting
swagger
swagger
Swagger / OpenAPI: Exposed API docs at common paths (per-target)
swiftbic
swiftbic
SWIFT/BIC: Parse SWIFT/BIC: bank/country/branch (offline)
takeover
takeover
Subdomain Takeover: Dangling-CNAME takeover fingerprint check
teamcymru
teamcymru
Team Cymru ASN: IP → ASN via Team Cymru DNS (fastest ASN lookup)
tech
tech
Tech Fingerprint: CMS/framework/server detection
telegram
telegram_channel
Telegram Channel: Public channel preview: subscribers, description
tempconv
tempconv
Temperature: Convert °C / °F / K (offline)
tempmail
tempmail
Temp Email: Generate/read a disposable email inbox (1secmail)
threatcrowd
threatcrowd
Passive DNS: OTX passive DNS resolution history
tiktok
tiktok
TikTok Profile: TikTok user stats (best-effort, keyless)
timezone
timezone_info
Timezone Info: Timezone UTC offset & current time (offline, IANA names)
tldinfo
tldinfo
TLD Info: TLD registry operator, type, purpose (offline)
tls
tls
TLS Certificate: Live cert: issuer, validity, SANs, cipher
tlsa
tlsa
DANE / TLSA: Certificate-pinning DANE records on :443
tlsscan
tlsscan
TLS Versions: Which SSL/TLS protocols the host accepts
tor
tor
Tor Exit Check: Is the IP a known Tor exit node
transform
transform
Text Transforms: rot13/base32/morse/reverse (offline)
trendingwiki
trendingwiki
Trending Wikipedia: Most-read Wikipedia articles today
trufflehog
trufflehog_url
Secret Pattern Scan: Scan raw URL content for API keys, tokens, private keys, JWTs
txhash
txhash
Crypto Tx: BTC/ETH transaction detail (blockchair)
typosquat
typosquat
Typosquat Finder: Look-alike domains that currently resolve
ulid
ulid
ULID Decode: Decode a ULID's embedded timestamp (offline)
unicode
unicode_lookup
Unicode Lookup: Unicode codepoint: name, category, HTML entity (offline)
unixperm
unixperm
Unix Permissions: Octal permission (755/644) → rwx breakdown (offline)
unpaywall
unpaywall
Unpaywall: Is a DOI open-access? Direct PDF link
urban
urban
Urban Dictionary: Slang/term definitions + examples
urlparse
urlparse
URL Parse: Parse URL into components + query params
urlscan
urlscan
urlscan.io: Past scans, verdicts, infra (IP/ASN/server) for a site
urlscansearch
urlscansearch
urlscan Archive: Public urlscan.io scan history for a domain
useragent
useragent
UA Parser: Parse a User-Agent into OS/browser (offline)
utm
utm
UTM Coords: Lat/lon → UTM coordinates (WGS84, offline)
uuencode
uuencode
UUencode: Unix-to-Unix encoding
vatid
vatid
EU VAT: Validate EU VAT number country format (offline)
vigenere
vigenere
Vigenere Cipher: Vigenere encrypt/decrypt: 'KEY:text[:d]' (offline)
vimeo
vimeo
Vimeo Meta: Video title, author, thumbnail (oEmbed)
vin
vin
VIN Decoder: NHTSA vPIC vehicle decode (make/model/plant)
vuln
vuln_feed
Vuln Feed: Real-time vuln feeds (NVD, Exploit-DB, PacketStorm)
waf
waf
WAF / CDN: Detect WAF/CDN from headers & cookies
weather
weather
Weather: Current weather at a coordinate (Open-Meteo)
weatheralerts
weatheralerts
Weather Alerts: Active US NWS weather alerts near coords
webfinger
webfinger
WebFinger: WebFinger resource discovery (ActivityPub/OIDC)
wellknown
wellknown
.well-known Scan: Which /.well-known/* resources exist
whatsnearby
whatsnearby
Nearby POIs: OSM amenities within 500m of coords (Overpass)
whoisserver
whoisserver
WHOIS Server: TLD → WHOIS server mapping (offline + IANA fallback)
wikidata
wikidata
Wikidata Search: Search Wikidata entities by label (no key)
wikidatasearch
wikidatasearch
Wikidata Search: Free-text → Wikidata entities
wikipedia
wikipedia
Wikipedia Summary: Wikipedia REST summary: extract, type, coords (no key)
wikipv
wikipv
Wikipedia Meta: Page length, last edit, editor
wikisummary
wikisummary
Wikipedia Summary: Page extract/description for a topic
wordcount
wordcount
Word Count: Text stats: words/chars/lines/reading time (offline)
workup
workup
WORKUP: Full Person Dossier: first+last -> username variants x 16 platforms, name stats, dork surfaces, wiki (30-60s)
wpplugin
wpplugin
WP Plugin Info: WordPress.org plugin version/install stats
wpscan
wpscan
WordPress Scan: WP version + author enum via REST (per-target)
xrpaddr
xrpaddr
XRP Account: XRP Ledger account balance & sequence
youtube
youtube
YouTube Meta: Video/channel title, author, thumbnail (oEmbed)
zenodo
zenodo
Zenodo: Zenodo open-research records search
zerodday
zerodday_timeline
Zero-Day Timeline: 0day mentions across researchers + CVE
zonetransfer
zonetransfer
Zone Transfer: AXFR attempt — is zone transfer misconfigured?
Endpoints
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://osint-mcp.thetempleofdoom.com/mcp | streamable-http | answering | 93 ms | 2 min ago |
Alternatives to Osint Terminal
same job, measured the same wayMemori MCP
by memorilabs
Memori MCP server — persistent AI memory with recall and augmentation tools
Advanced GitLab MCP server
by structured-world
64 CQRS tools exposing 236 GitLab operations across 26 entity types
MCP Recon Ng
by daedalus
MCP server exposing full recon-ng OSINT framework functionality
Adscapi
by pooriaarab
Fire one canonical conversion event to every ad platform's server-side Conversions API.
honesty-mcp
by lkopietz3-byte
MCP server exposing 11 honesty-SDK kits (grounding, trust, audit, corroboration) as agent tools.
Ogs MCP
by mrfentmen
Keyless MCP server for Online-Go.com: Go/Baduk/Weiqi players, ratings, recent games.
Concurrent-client isolation probe
by textforagents
Concurrent two-client overlap probe proving MCP servers do not cross-deliver tool results.
Compliance Trestle MCP
by oscal-compass
An MCP server that provides tools to author OSCAL security compliance documentation
Osint Terminal — questions
Answers built from our own checks of this server.
What can Osint Terminal do?
It exposes 474 tools, read directly from the server on our last check. Among them: abusecontact, adstxt, agent_manifest, agify, airquality, antipode and 468 more. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README.
How MCP servers expose tools in the first place →
What is Osint Terminal mostly used for?
Its tools cluster around hunter, cve and email. That is what this server is built to work with — the grouping comes from the actual tool names, not from a category we assigned.
Is Osint Terminal working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 0 of 92 checks got a reply (0.0%), average response time 93 ms. The bar chart above shows every period we have measured.
The registry lists Osint Terminal as active — why does it not respond?
The official MCP registry stores what the author submitted; it does not verify that the server still runs. We check the endpoint ourselves, and this one does not answer. Catalogues that copy the registry without checking will show it as working.
How do I connect Osint Terminal?
Copy the ready config from this page. We generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each in the form that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does Osint Terminal need an API key?
No. Osint Terminal completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 474 of them are readable on this page. This is what we observed, not what the docs claim.