osint-terminal

Name: osint-terminal
Author: com.thetempleofdoom.osint-mcp

MCP serverMCP

454 OSINT recon tools + server-side entity correlation & person sweeps. Keyless.

by com.thetempleofdoom.osint-mcpv1.1.0

Is this yours?

This record is unclaimed

Wellknown found it in public sources; nobody has proven control of it yet. Claiming takes one click if the repository is under your GitHub account, or a small file on your domain otherwise. Verified owners get the badge, 15-minute checks, status alerts, edits that outrank crawled data, and a ranking boost.

Agents can do it too: POST https://wellknown.network/api/v1/claims with {"agent":"osint-terminal","method":"well_known_file"} — machine-readable steps at claim.json, guide at /docs/claim.

Claim this record

Observed by Wellknown

Evidence

Everything here was measured by our prober or read from a registry. Nothing is self-reported.

30-day availability50/52 checks ok

Tools observed via MCP handshake

dns — DNS Records: A/AAAA/MX/NS/TXT/CNAME/SOA/CAA records
whois — WHOIS / RDAP: Registration, status, nameservers, DNSSEC
subdomains — Subdomains: Certificate-transparency subdomain discovery
tls — TLS Certificate: Live cert: issuer, validity, SANs, cipher
headers — HTTP / Security: Headers + security-header scorecard
wayback — Wayback Machine: Archive.org snapshot history
ipgeo — IP Geolocation: Geo, ISP, ASN, proxy/hosting flags
reversedns — Reverse DNS: PTR record / hostname
username — Username Hunter: Presence across 16 public sites
github — GitHub Recon: Profile, repos, languages
email — Email Intel: Gravatar, MX, disposable detection
internetdb — Shodan InternetDB: Open ports, CPEs, tags, known CVEs for a host
portscan — Port Scan: TCP connect scan: common + camera ports
camera — Camera Exposure: RTSP/ONVIF + camera-port exposure (per-target)
ipwhois — IP WHOIS / RDAP: Network owner, range, abuse contact
asn — ASN / BGP: ASN details or prefixes for an IP
reverseip — Reverse IP: Other domains sharing the host
dnsbl — DNS Blocklist: Spamhaus/Barracuda/SORBS/SpamCop check
tor — Tor Exit Check: Is the IP a known Tor exit node
cloud — Cloud Provider: AWS/GCP/Azure/etc. detection + hosting flag
emailsec — Email Security: SPF / DMARC / DKIM posture
robots — robots.txt: Disallowed paths + sitemaps
tech — Tech Fingerprint: CMS/framework/server detection
favicon — Favicon Hash: favicon md5/sha256 for pivoting
redirects — Redirect Tracer: Full HTTP redirect chain
certhistory — Cert History: crt.sh issuer timeline & counts
social — Social Links: Direct profile URLs across 20 platforms
mac — MAC Vendor: OUI → hardware vendor
crypto — Crypto Address: BTC/ETH balance & tx history
dorks — Search Dorks: Builds manual OSINT search links
urlscan — urlscan.io: Past scans, verdicts, infra (IP/ASN/server) for a site
greynoise — GreyNoise: Is the IP a known internet scanner — benign/malicious
typosquat — Typosquat Finder: Look-alike domains that currently resolve
securitytxt — security.txt: RFC 9116 disclosure policy & contacts
keybase — Keybase: Crypto identity + linked social proofs
phone — Phone Number: E.164 country/region (offline)
decode — Decoder: Auto base64/hex/URL-decode + refang
jwt — JWT Decoder: Header + claims (no signature verify)
hashid — Hash Identifier: Guess hash algorithm from length/charset
cidr — CIDR Calculator: Subnet calc: network, mask, host range, count (offline)
gitexposed — Exposed Files: .git/.env/backup exposure (per-target)
cors — CORS Check: Origin-reflection / wildcard misconfig
cookies — Cookie Audit: Secure/HttpOnly/SameSite flag review
dnssec — DNSSEC: Is the zone signed (AD flag + DNSKEY/DS)
pgp — PGP Key: Public key published on keys.openpgp.org
hackernews — Hacker News: Profile: karma, age, activity
gitlab — GitLab: Public user profile
dnsprop — DNS Propagation: Compare A records across Google/Cloudflare/Quad9
takeover — Subdomain Takeover: Dangling-CNAME takeover fingerprint check
sitemap — Sitemap: Fetch sitemap.xml + list URLs
waf — WAF / CDN: Detect WAF/CDN from headers & cookies
cve — CVE Lookup: CVE detail + CVSS (CIRCL, no key)
npm — npm Author: Packages published by an author
peers — ASN Peers: Upstream/downstream BGP neighbours
urlparse — URL Parse: Parse URL into components + query params
epoch — Epoch Time: Unix timestamp <-> UTC datetime
tlsscan — TLS Versions: Which SSL/TLS protocols the host accepts
revgeo — Reverse Geocode: lat,lon -> address (OSM Nominatim)
suntimes — Sun Times: Sunrise/sunset/twilight for a coordinate (UTC)
iban — IBAN Validate: ISO 13616 checksum + country/length (offline)
bin — Card BIN: Issuer/scheme/country from card BIN (binlist)
uuid — UUID Parser: Version/variant + v1 timestamp/MAC (offline)
isbn — ISBN Book: Book metadata (OpenLibrary) + checksum
txhash — Crypto Tx: BTC/ETH transaction detail (blockchair)
bluesky — Bluesky: AT Protocol public profile
chesscom — Chess.com: Public player profile + ratings
wikipedia — Wikipedia Summary: Wikipedia REST summary: extract, type, coords (no key)
httping — HTTP Ping: Reachability + response timing
links — Link Extractor: All links + external domains + emails on a page
pwstrength — Password Strength: Offline entropy/strength estimate
entropy — Shannon Entropy: Per-char entropy — flags secrets/keys
lobsters — Lobste.rs: Public user profile + karma
caa — CAA Records: Which CAs may issue certs for the domain
mtasts — MTA-STS: Inbound-mail TLS enforcement policy
bimi — BIMI: Brand-indicator (logo) DNS record
domainage — Domain Age: Days since registration (phishing signal)
luhn — Luhn Check: Validate card/IMEI Luhn checksum (offline)
pypi — PyPI Package: Python package metadata + links
crates — crates.io: Rust crate stats + downloads
rubygems — RubyGems: Ruby gem stats + downloads
packagist — Packagist: PHP/Composer package stats (vendor/pkg)
npmpkg — npm Package: npm package version, deps, maintainers
btcaddr — BTC Address: Bitcoin balance/tx via mempool.space
ethaddr — ETH Address: Ethereum balance/tx + contract flag
ghrepo — GitHub Repo: Stars/langs/license/activity (owner/repo)
ghgists — GitHub Gists: Public gists for a user
ghorg — GitHub Org: Public org profile
mastodon — Mastodon: Resolve user@instance via WebFinger
geohash — Geohash: lat,lon -> geohash (offline)
ipv6 — IPv6 Validator: IPv6 parser, expander, classifier
transform — Text Transforms: rot13/base32/morse/reverse (offline)
cpfcnpj — CPF / CNPJ: Brazilian doc checksum (offline)
color — Color Parser: hex/rgb -> rgb/hsl + nearest name (offline)
doh — DoH Records: Uncommon DNS records (HTTPS/SVCB/TLSA/SRV/NAPTR…)
tlsa — DANE / TLSA: Certificate-pinning DANE records on :443
dnsverify — TXT Verifications: Which SaaS a domain is enrolled in (TXT tokens)
subbrute — Subdomain Brute: Resolve a common-subdomain wordlist (per-target)
hstspreload — HSTS Preload: Is the domain on the browser HSTS preload list
wpscan — WordPress Scan: WP version + author enum via REST (per-target)
wellknown — .well-known Scan: Which /.well-known/* resources exist

when	check	result	http	latency	detail
6 h ago	mcp initialize	ok	200	527 ms	server osint-terminal 4.0.5 · protocol 2025-06-18 · 474 tools
12 h ago	mcp initialize	ok	200	449 ms	server osint-terminal 4.0.5 · protocol 2025-06-18 · 474 tools
18 h ago	mcp initialize	ok	200	526 ms	server osint-terminal 4.0.5 · protocol 2025-06-18 · 474 tools
30 h ago	mcp initialize	failed	530	12 ms	http 530
2 d ago	mcp initialize	ok	200	470 ms	server osint-terminal 4.0.5 · protocol 2025-06-18 · 471 tools
2 d ago	mcp initialize	ok	200	453 ms	server osint-terminal 4.0.5 · protocol 2025-06-18 · 467 tools
2 d ago	mcp initialize	ok	200	495 ms	server osint-terminal 4.0.5 · protocol 2025-06-18 · 467 tools
2 d ago	mcp initialize	ok	200	439 ms	server osint-terminal 4.0.5 · protocol 2025-06-18 · 467 tools
3 d ago	mcp initialize	ok	200	475 ms	server osint-terminal 4.0.5 · protocol 2025-06-18 · 467 tools
3 d ago	mcp initialize	ok	200	484 ms	server osint-terminal 4.0.5 · protocol 2025-06-18 · 467 tools

osint-terminal

This record is unclaimed

Evidence

What the publisher says

Capabilities

Where this record came from