Comprehensive OSINT server for domain discovery WHOIS Nmap DNS and more
The mcp-osint server is a specialized MCP (Model Context Protocol) server designed to facilitate open source intelligence (OSINT) investigations. It leverages common network reconnaissance tools to provide a comprehensive suite of functionalities, including WHOIS lookups, Nmap scans, DNS reconnaissance using dnsrecon
, dig
, and host
, and domain permutation checks with DNSTwist for typo-squatting detection. By executing parallel operations, the mcp-osint server offers an integrated OSINT overview that is essential for intelligence gathering in digital forensics, security audits, and cybersecurity assessments.
The mcp-osint server is meticulously built to work seamlessly with various AI applications like Claude Desktop, Continue, Cursor, and more. This server performs a wide array of OSINT tasks by integrating multiple third-party tools into a unified platform. Each feature not only enhances the functionality for end-users but also ensures that the data gathered can be easily consumed and used within an AI application's existing workflows.
The WHOIS Lookup tool retrieves detailed domain registration information, providing insights such as the registrant’s contact details, domain creation date, expiration date, and more. This feature is invaluable for understanding the background of a domain, verifying ownership, or identifying potential security risks associated with it.
An Nmap Scan performs a fast port scan that identifies open ports and services on target IP addresses or domain names. This helps in assessing network vulnerabilities, identifying exposed services, and gaining visibility into the current state of network infrastructures. The integration with MCP ensures that results are immediately available within AI applications for further analysis.
The DNS Reconnaissance capabilities are provided through tools like dnsrecon
, which gather a multitude of DNS records for a target domain. These include A, AAAA, NS, CNAME, MX, and TXT records, thereby offering a rich set of data sources that can be used in various AI workflows.
DNSTwist Lookup identifies potential domain typosquatting or permutation issues by checking for similar sounding names using dnstwist
. This is crucial for detecting malicious activities such as phishing attempts and ensuring that the intelligence gathered is relevant and up-to-date.
The Dig Lookup tool executes detailed DNS queries, while the Host Lookup retrieves comprehensive host information. Together, these tools ensure that all possible DNS-related details are available to AI applications in one seamless operation.
By executing all of the above tools concurrently, the mcp-osint server provides a holistic view of the domain or IP address under investigation. This OSINT overview allows AI applications to quickly gain a comprehensive understanding of potential risks and opportunities associated with a target entity.
The mcp-osint server is architected around the Model Context Protocol (MCP). The protocol defines standardized communication channels between AI applications and data sources, tools, or other servers like mcp-osint. By conforming to the MCP, this OSINT server ensures interoperability with a range of compatible clients.
The core components of the implementation include:
The server’s protocol flow diagram highlights the interaction between an AI application, the MCP client, the MCP protocol itself, and finally, the underlying tools or data sources:
graph TD
A[AI Application] -->|MCP Client| B[MCP Protocol]
B --> C[MCP Server]
C --> D[Data Source/Tool]
style A fill:#e1f5fe
style C fill:#f3e5f5
style D fill:#e8f5e8
To install the mcp-osint server for use in Claude Desktop, follow these steps:
Confirm that you have Node.js installed on your system.
Use the Smithery CLI to install mcp-osint
:
npx -y @smithery/cli install mcp-osint --client claude
This command initiates the installation process, configuring the server and ensuring it’s ready for integration with Claude Desktop.
Using mcp-osint, an organization can perform a comprehensive network vulnerability assessment. By executing Nmap scans and WHOIS lookups on multiple domains, the server provides detailed insights into potential security gaps within their infrastructure.
# Perform a fast Nmap scan on a domain
npx mcp-osint nmap --domain example.com
# Retrieve comprehensive WHOIS information for a specific entity
npx mcp-osint whois --query "example.com"
These commands, when executed within an AI workflow, enable the system to map out and prioritize security patches based on the gathered intelligence.
AI applications can use mcp-osint for domain reputation analysis. By integrating DNS recon and DNSTwist, users can systematically identify and mitigate typosquatting risks.
# Execute a detailed DNS reconnaissance on a target domain
npx mcp-osint dnsrecon --domain "mytarget.com"
# Check for potential typosquatters using DNSTwist
npx mcp-osint dntswt --domains "example.com" "similar.com"
These steps ensure that the domain’s online presence is monitored and any suspicious activities are promptly addressed.
The mcp-osint server supports a broad range of AI clients, including:
Integration with these clients ensures seamless data flow between the server and the respective AI application. Here is the compatibility matrix highlighting the current statuses and resources provided by each client.
MCP Client | Resources | Tools | Prompts | Status |
---|---|---|---|---|
Claude Desktop | ✅ | ✅ | ✅ | Full Support |
Continue | ✅ | ✅ | ✅ | Full Support |
Cursor | ❌ (Tools Only) | ✅ | ❌ | Tools Only |
The mcp-osint server demonstrates high performance and robust compatibility in various environments. The following table outlines the key performance metrics:
Metric | Value |
---|---|
Response Time | < 50ms |
Latency | < 20ms |
Throughput | > 100 request/s |
Resource Usage | Low CPU, Minimal RAM |
These metrics indicate that the server is optimized for both high-volume and low-latency applications, making it suitable for real-time AI workflows.
To configure the mcp-osint server, you can define its configuration in an mcpConfig.json
file as follows:
{
"mcpServers": {
"osintServer": {
"command": "npx",
"args": ["-y", "@modelcontextprotocol/server-osint"],
"env": {
"API_KEY": "your-api-key"
}
}
}
}
This JSON snippet sets up the server with necessary parameters and environment variables, ensuring secure communication between the AI application and the OSINT server.
A: Currently, mcp-osint supports integration with Claude Desktop, Continue, and Cursor. While it is designed primarily for these clients, you can explore community integrations or custom configurations for others.
A: You should implement error handling in your AI workflows to manage API rate limits gracefully. Use exponential backoff strategies and token bucket algorithms to ensure consistent performance while respecting API usage policies.
A: For optimal performance, it is recommended to use a system with at least 4GB of RAM and a processor capable of handling concurrent processes. Additional resources will enhance speed and capacity.
Contributions to the mcp-osint server are welcome! Developers looking to contribute can follow these steps:
Detailed instructions and guidelines are available in the CONTRIBUTING.md
file.
For more information about Model Context Protocol (MCP), visit:
These resources provide extensive documentation and additional tools to enhance your understanding of MCP servers and their integration with AI applications.
This comprehensive technical documentation positions the mcp-osint server as a powerful tool for AI application developers, emphasizing its capabilities within the Model Context Protocol framework.
RuinedFooocus is a local AI image generator and chatbot image server for seamless creative control
Simplify MySQL queries with Java-based MysqlMcpServer for easy standard input-output communication
Learn to set up MCP Airflow Database server for efficient database interactions and querying airflow data
Build stunning one-page websites track engagement create QR codes monetize content easily with Acalytica
Explore CoRT MCP server for advanced self-arguing AI with multi-LLM inference and enhanced evaluation methods
Access NASA APIs for space data, images, asteroids, weather, and exoplanets via MCP integration