Official MCP RegistryListed
com.thetempleofdoom.osint-mcp/osint-terminal
454 OSINT recon tools + server-side entity correlation & person sweeps. Keyless.
First seen 2 Oct 2026. Evidence as of 2 Oct 2026.
457
Tools
From an anonymous probe
1
Source listings
Each with its own history
0
Recorded changes
Since first seen
Tools
| Tool | Description | Behaviour |
|---|---|---|
| abusecontact | Abuse Contact: Authoritative abuse email (RIPEstat finder) | Not declared |
| adstxt | ads.txt: Ad-tech sellers declared in ads.txt | Not declared |
| agent_manifest | Self-describing manifest of all OSINT Terminal agent endpoints. | Not declared |
| agify | Age Predictor: Predict age from a first name (agify.io) | Not declared |
| airquality | Air Quality: PM2.5/PM10/European AQI at coords (Open-Meteo, no key) | Not declared |
| antipode | Antipode: Opposite point on Earth for coords (offline) | Not declared |
| api_key_scan | API Key Exposure: Scan GitHub/Pastebin/Google for exposed API keys/secrets | Not declared |
| apileak | API Leak Search: GitHub dork links for API key/secret exposure | Not declared |
| apod | NASA APOD: Astronomy Picture of the Day (optional date) | Not declared |
| apt_track | APT Track: Track APT campaigns via MITRE + researchers | Not declared |
| archiveorg | Archive.org Item: Internet Archive item metadata | Not declared |
| arxiv | arXiv Search: arXiv paper search by title/author/keyword | Not declared |
| ascii85 | Ascii85: Ascii85 encode/decode (offline) | Not declared |
| asn | ASN / BGP: ASN details or prefixes for an IP | Not declared |
| asnlookup | ASN Lookup: ASN org/country/prefixes via RIPEstat | Not declared |
| asnprefixes | ASN Prefixes: All announced prefixes for an ASN (RIPEstat) | Not declared |
| asrank | AS Rank (CAIDA): Global ASN ranking + customer cone size | Not declared |
| atbash | Atbash Cipher: Atbash A↔Z mirror cipher (offline, self-inverse) | Not declared |
| attack_surface | Attack Surface: Map attack surface: services + endpoints + API | Not declared |
| barcode | Barcode Validate: EAN-13 / UPC-A check digit validation (offline) | Not declared |
| base_convert | Base Convert: Binary/octal/decimal/hex number conversion (offline) | Not declared |
| base32 | Base32 Encode/Decode: RFC 4648 Base32 encode or decode | Not declared |
| base36 | Base36 Codec: Encode int <-> base36, autodetecting direction (offline) | Not declared |
| base58 | Base58 Codec: Bitcoin base58 encode/decode: 'hex:..' / 'b58:..' (offline) | Not declared |
| base64 | Base64: Auto decode/encode base64 (offline) | Not declared |
| bearing | Bearing: Initial compass bearing between two coord pairs (offline) | Not declared |
| bgphistory | BGP History: Routing origin history (RIPE Stat) | Not declared |
| bimi | BIMI: Brand-indicator (logo) DNS record | Not declared |
| bin | Card BIN: Issuer/scheme/country from card BIN (binlist) | Not declared |
| binarytext | Binary Text: Text ↔ 8-bit binary (offline) | Not declared |
| binlookup | BIN Lookup: Card BIN → bank, brand, country, type | Not declared |
| blockheight | Block Height: Current Bitcoin + Ethereum block height | Not declared |
| bluesky | Bluesky: AT Protocol public profile | Not declared |
| botnet_tracker | Botnet Tracker: Botnet C2 + IoT malware tracking | Not declared |
| breach_aggregator | Breach Aggregator: Aggregate breach databases (XposedOrNot, LeakCheck, etc) | Not declared |
| breachdb | BreachDB Search: Aggregated breach collection search | Not declared |
| breachdirectory | Breach Directory: ProxyNova COMB dataset search for credential exposure | Not declared |
| breachsearch | Breach Catalog: Public HIBP breach metadata search | Not declared |
| brew | Homebrew: Formula/cask version, deps, installs | Not declared |
| btcaddr | BTC Address: Bitcoin balance/tx via mempool.space | Not declared |
| btcfees | BTC Fees: Recommended Bitcoin fees sat/vB (mempool.space) | Not declared |
| c2_infrastructure | C2 Infrastructure: Detect C2 infrastructure + hosting | Not declared |
| caa | CAA Records: Which CAs may issue certs for the domain | Not declared |
| caesar | Caesar Cipher: ROT-N / Caesar brute force, all 25 shifts (offline) | Not declared |
| camera | Camera Exposure: RTSP/ONVIF + camera-port exposure (per-target) | Not declared |
| casify | Case Convert: snake/camel/Pascal/kebab/CONSTANT case (offline) | Not declared |
| cdnjs | cdnjs: Hosted JS library version + assets | Not declared |
| cdxwayback | Wayback CDX: Snapshot count + first/latest capture in Wayback Machine | Not declared |
| certhistory | Cert History: crt.sh issuer timeline & counts | Not declared |
| cfradar | Cloudflare Radar: Domain rank + categories from Cloudflare Radar | Not declared |
| checksum | CRC32/Adler32: CRC32 + Adler32 checksum of input text (offline) | Not declared |
| chesscom | Chess.com: Public player profile + ratings | Not declared |
| cidr | CIDR Calculator: Subnet calc: network, mask, host range, count (offline) | Not declared |
| cidrinfo | CIDR Calculator: Network/broadcast/host-count (offline) | Not declared |
| circlhash | Hash Lookup: Known-file lookup (CIRCL hashlookup) | Not declared |
| cisa_alerts | CISA Alerts: CISA alerts + advisories (recent threats) | Not declared |
| clickjacking | Clickjacking: X-Frame-Options + CSP frame-ancestors check | Not declared |
| cloud | Cloud Provider: AWS/GCP/Azure/etc. detection + hosting flag | Not declared |
| codeberg | Codeberg: Codeberg/Gitea public user | Not declared |
| codeforces | Codeforces: Codeforces competitive programmer rating & rank | Not declared |
| coininfo | Coin Info: Coin metadata: categories, algorithm, genesis (CoinGecko) | Not declared |
| color | Color Parser: hex/rgb -> rgb/hsl + nearest name (offline) | Not declared |
| comb_search | COMB Credential Search: Search COMB breach compilation via ProxyNova free API | Not declared |
| commoncrawl | Common Crawl: Captures of a domain in Common Crawl index | Not declared |
| cookies | Cookie Audit: Secure/HttpOnly/SameSite flag review | Not declared |
| correlate_sweep | Run a 40-tool broad sweep on the query and return the cross-tool entity graph: emails/domains/IPs/handles/phones appearing in >=2 tools, strongest first. This is the connected-pattern signal. | Not declared |
| cors | CORS Check: Origin-reflection / wildcard misconfig | Not declared |
| country | Country Profile: World Bank country profile by ISO code | Not declared |
| cpe | CPE → CVEs: NVD: recent CVEs affecting a CPE 2.3 string | Not declared |
| cpfcnpj | CPF / CNPJ: Brazilian doc checksum (offline) | Not declared |
| cratedownloads | Crate Downloads: Download totals for a Rust crate | Not declared |
| crates | crates.io: Rust crate stats + downloads | Not declared |
| cratestats | crates.io Stats: Rust crate downloads, version, repo (no key) | Not declared |
| crc32 | CRC-32 Checksum: Compute CRC-32 of input | Not declared |
| credential_stuffing | Credential Stuffing Risk: Check breach + stuffing risk | Not declared |
| creditcard | Card Brand: Identify card brand + Luhn validity (offline) | Not declared |
| creditcardtest | Credit Card Validator: Luhn check + brand guess (test only) | Not declared |
| cron | Cron Explain: Explain a 5-field cron expression (offline) | Not declared |
| crossrefauthor | Crossref Author: Works by author/keyword (Crossref) | Not declared |
| crypto | Crypto Address: BTC/ETH balance & tx history | Not declared |
| cryptomarket | Crypto Market: Global market cap, BTC dominance, 24h volume (CoinGecko) | Not declared |
| cryptoprice | Crypto Price: Live coin price + 24h change (CoinGecko) | Not declared |
| csp_parse | CSP Analyzer: Content-Security-Policy header analysis & grade | Not declared |
| ctlogsearch | CT Logs (Org): crt.sh cert search by organization name | Not declared |
| cve | CVE Lookup: CVE detail + CVSS (CIRCL, no key) | Not declared |
| cve_poc_checker | CVE POC Check: Check if a CVE has public POC/exploit code | Not declared |
| cve_severity | CVE Severity: CVSS + EPSS + KEV for a CVE | Not declared |
| cve_timeline | CVE Timeline: When a CVE was discussed (Twitter/Reddit/News) | Not declared |
| cvedetail | CVE Detail: Full CVE record (CVSS, refs) via CIRCL | Not declared |
| darkweb_monitor | Darkweb Monitor: Darkweb monitoring: marketplaces, paste sites | Not declared |
| datacite | DataCite Search: Research datasets/DOIs by keyword | Not declared |
| datauri | Data URI Parse: Parse or create data: URIs | Not declared |
| dblp | DBLP: DBLP CS publication search | Not declared |
| ddg_instant | DDG Instant: DuckDuckGo instant answer + related topics | Not declared |
| decode | Decoder: Auto base64/hex/URL-decode + refang | Not declared |
| dehashed_domain | DeHashed Domain: DeHashed public page scrape for domain breach exposure | Not declared |
| depsdev | deps.dev: Open-source insights: versions, default | Not declared |
| deviantart | DeviantArt Meta: Deviation title + author (oEmbed) | Not declared |
| devto | dev.to: Forem/dev.to public profile | Not declared |
| dirlisting | Directory Listing: Open directory-index exposure (per-target) | Not declared |
| disasters | Disasters (GDACS): Active worldwide disasters: quakes/cyclones/floods (feeds globe) | Not declared |
| disposable | Disposable Email: Is the email domain a disposable provider? | Not declared |
| disposablecheck | Disposable Email: Check if email is temporary/disposable | Not declared |
| dns | DNS Records: A/AAAA/MX/NS/TXT/CNAME/SOA/CAA records | Not declared |
| dnsbl | DNS Blocklist: Spamhaus/Barracuda/SORBS/SpamCop check | Not declared |
| dnsgraph | DNS Graph (HE): Hurricane Electric DNS delegation info | Not declared |
| dnsmx | MX (DoH): MX records via Google DNS-over-HTTPS | Not declared |
| dnsprop | DNS Propagation: Compare A records across Google/Cloudflare/Quad9 | Not declared |
| dnsptrrange | PTR Range Sweep: Reverse-DNS every host in a /24 (offline) | Not declared |
| dnsquery | DNS A Record: DNS A record lookup via Google DoH | Not declared |
| dnsrecon | DNS Recon: Query ALL DNS record types at once | Not declared |
| dnssec | DNSSEC: Is the zone signed (AD flag + DNSKEY/DS) | Not declared |
| dnsverify | TXT Verifications: Which SaaS a domain is enrolled in (TXT tokens) | Not declared |
| dockerhub | Docker Hub Repo: Docker Hub repo pulls, stars, last update (no key) | Not declared |
| dogeaddr | DOGE Address: Dogecoin address balance & tx count | Not declared |
| doh | DoH Records: Uncommon DNS records (HTTPS/SVCB/TLSA/SRV/NAPTR…) | Not declared |
| doi | DOI Resolver: Crossref publication metadata for a DOI | Not declared |
| domainage | Domain Age: Days since registration (phishing signal) | Not declared |
| dorks | Search Dorks: Builds manual OSINT search links | Not declared |
| ean | Barcode/EAN: EAN/UPC check digit + GS1 country prefix (offline) | Not declared |
| elevation | Elevation: Ground elevation in metres (Open-Meteo) | Not declared |
| Email Intel: Gravatar, MX, disposable detection | Not declared | |
| emailformat | Email Validator: Basic RFC 5322 email format validation | Not declared |
| emailrep | Email Reputation: emailrep.io: malicious/spam/breach flags for email (no key, limited) | Not declared |
| emailsec | Email Security: SPF / DMARC / DKIM posture | Not declared |
| emerging_threats | Emerging Threats: Emerging threats: new CVEs + 0days (24h) | Not declared |
| emoji | Emoji Lookup: Emoji ↔ Unicode name/codepoint (offline) | Not declared |
| ens | ENS Resolve: ENS name <-> ETH address + avatar | Not declared |
| entropy | Shannon Entropy: Per-char entropy — flags secrets/keys | Not declared |
| epoch | Epoch Time: Unix timestamp <-> UTC datetime | Not declared |
| epss | EPSS Score: Exploitation probability (FIRST EPSS) | Not declared |
| ethaddr | ETH Address: Ethereum balance/tx + contract flag | Not declared |
| ethcontract | ETH Contract: Contract check + Sourcify verified source | Not declared |
| exploit_cve | CVE Exploits: Exploit-DB + GitHub POCs for a CVE | Not declared |
| favicon | Favicon Hash: favicon md5/sha256 for pivoting | Not declared |
| fccid | FCC ID: FCC equipment authorization database | Not declared |
| feeds | RSS / Atom Feeds: Discover syndication feeds on a site | Not declared |
| feodo | Feodo C2: abuse.ch botnet C2 blocklist (key-free) | Not declared |
| feodoips | Feodo C2 List: Is IP on abuse.ch Feodo botnet C2 list | Not declared |
| flightsnear | Flights Nearby: Live aircraft within ~1° of coords (OpenSky) | Not declared |
| formaudit | Form Audit: Enumerate forms/inputs (login/upload) — attack surface | Not declared |
| fxrate | FX Rates: Live exchange rates for a currency code | Not declared |
| gdelt | GDELT News: Global news/events by keyword (last 24h) | Not declared |
| genderize | Gender Predictor: Predict gender from a first name (genderize.io) | Not declared |
| geocode | Geocode: Place name → coordinates (OSM Nominatim) | Not declared |
| geodist | Geo Distance: Great-circle distance between two coord pairs (offline) | Not declared |
| geohash | Geohash: lat,lon -> geohash (offline) | Not declared |
| gh_dorking | GitHub Dork Search: GitHub code search for target string exposure in public repos | Not declared |
| gh_secret_scan | GitHub Secret Scan: Scan GitHub user's public repos for leaked secrets/passwords | Not declared |
| ghadvisory | GitHub Advisories: Security advisories for an ecosystem (pip/npm/…) | Not declared |
| ghcommits | GitHub Commits: Recent commits for owner/repo | Not declared |
| ghevents | GitHub Activity: Recent public GitHub events for a user (60/hr) | Not declared |
| ghgists | GitHub Gists: Public gists for a user | Not declared |
| ghkeysgpg | GitHub GPG Key: Whether a user publishes a GPG key | Not declared |
| ghlanguages | Repo Languages: Language byte-breakdown for owner/repo | Not declared |
| ghorg | GitHub Org: Public org profile | Not declared |
| ghpubkeys | GitHub SSH Keys: A user's public SSH keys (.keys) | Not declared |
| ghrepo | GitHub Repo: Stars/langs/license/activity (owner/repo) | Not declared |
| gitexposed | Exposed Files: .git/.env/backup exposure (per-target) | Not declared |
| github | GitHub Recon: Profile, repos, languages | Not declared |
| github_code | GitHub Code Search: GitHub unauthenticated code search (10 results) | Not declared |
| github_trending | GitHub Trending: Trending repos (optional language filter) | Not declared |
| githubgists | GitHub Gists: A user's public gists | Not declared |
| githubsearch | GitHub Repo Search: Search GitHub repos by keyword | Not declared |
| gitignore | gitignore Template: GitHub .gitignore template for a language | Not declared |
| gitlab | GitLab: Public user profile | Not declared |
| gleif_name | GLEIF Name: GLEIF fuzzy legal-entity name → LEI codes | Not declared |
| golangpkg | Go Module: Latest version of a Go module | Not declared |
| gomod | Go Module: Go module latest version (module proxy) | Not declared |
| goproxy | Go Module: Latest version of a Go module via module proxy (no key) | Not declared |
| graphql | GraphQL Probe: Find GraphQL endpoint + introspection (per-target) | Not declared |
| gravatarfull | Gravatar Profile: Full public Gravatar profile + linked accounts | Not declared |
| greynoise | GreyNoise: Is the IP a known internet scanner — benign/malicious | Not declared |
| hackernews | Hacker News: Profile: karma, age, activity | Not declared |
| hackernews_front | HN Front Page: Current Hacker News front-page stories | Not declared |
| hashid | Hash Identifier: Guess hash algorithm from length/charset | Not declared |
| hashnode | Hashnode: Blogger profile: followers, posts | Not declared |
| hashtext | Hash Text: md5/sha1/sha256/sha512 of text (offline) | Not declared |
| headers | HTTP / Security: Headers + security-header scorecard | Not declared |
| hexdump | Hexdump: Offset/hex/ASCII hexdump of input (offline) | Not declared |
| hexpm | Hex.pm: Elixir/Erlang package downloads | Not declared |
| hibp | HIBP Password Check: Check if a password appeared in breaches via HIBP k-anonymity (no key) | Not declared |
| hibp_breaches | HIBP Breaches: Check breach database for email/username exposure | Not declared |
| hibp_email | HIBP Email Breaches: Email breach exposure via XposedOrNot (HIBP-compatible, no key) | Not declared |
| hnsearch | HN Search: Search Hacker News stories/comments | Not declared |
| hnuser | Hacker News User: HN profile: karma, created, submission count | Not declared |
| holidays | Public Holidays: Country public holidays this year (nager.at) | Not declared |
| homoglyph | Homoglyph: Detect confusable/mixed-script spoofing chars (offline) | Not declared |
| hosthunt | Host Search: Forward-DNS host/subdomain map (HackerTarget) | Not declared |
| hostname | Reverse DNS: IP → hostname via reverse DNS | Not declared |
| hostsearch | Host Search: Forward-DNS host enumeration for a domain | Not declared |
| hstspreload | HSTS Preload: Is the domain on the browser HSTS preload list | Not declared |
| htmlcomments | HTML Comments: Extract HTML comments — leaked TODOs/paths/software | Not declared |
| htmlencode | HTML Encode/Decode: HTML entity encode/decode | Not declared |
| httpcode | HTTP Status Code: HTTP status code meaning & family (offline) | Not declared |
| httping | HTTP Ping: Reachability + response timing | Not declared |
| httpmethods | HTTP Methods: Allowed methods + TRACE/risky-verb check | Not declared |
| httpstatus | HTTP Status: Explain an HTTP status code (offline) | Not declared |
| hudsonrock | HudsonRock Stealer: Stealer-log exposure check via HudsonRock Cavalier free API | Not declared |
| huggingface | HuggingFace: HuggingFace user profile or model card | Not declared |
| iban | IBAN Validate: ISO 13616 checksum + country/length (offline) | Not declared |
| imagechunks | PNG Chunks: Hidden tEXt/zTXt/iTXt chunks in PNG (steganography) | Not declared |
| imagecolors | Image Palette: Dominant color palette extraction | Not declared |
| imageexif | Image EXIF: Full EXIF: camera, lens, timestamps, software | Not declared |
| imagegps | Image GPS: GPS coordinates from EXIF → map links (feeds globe) | Not declared |
| imagehash | Image Hash: Perceptual aHash + sha256/md5 for dupe matching | Not declared |
| imageicc | ICC Profile: Color profile name — fingerprints editing software | Not declared |
| imagelsb | LSB Steg Detect: Statistical LSB analysis — detects possible hidden payload | Not declared |
| imagemeta | Image Metadata: Dimensions, format, mode, size, megapixels | Not declared |
| imagephash | Image pHash/dHash: dHash + pHash for robust near-duplicate detection | Not declared |
| imagerev | Reverse Image: Google Lens / Yandex / Bing / TinEye search links | Not declared |
| imagethumb | EXIF Thumbnail: Extract embedded thumbnail — often retains GPS after stripping | Not declared |
| imagexmp | XMP Metadata: XMP block: creator tool, edit history, software version | Not declared |
| imei | IMEI Check: Validate IMEI (Luhn) + split TAC/serial (offline) | Not declared |
| infra_fingerprint | Infra Fingerprint: Infrastructure fingerprinting + hosting | Not declared |
| intelx_email | XposedOrNot Breach: Email breach exposure — breach names, data types, paste hits (XposedOrNot, no key) | Not declared |
| internetdb | Shodan InternetDB: Open ports, CPEs, tags, known CVEs for a host | Not declared |
| ioc_reputation | IOC Reputation: Cross-check IP/domain/hash across feeds | Not declared |
| ip_math | IP Math: CIDR: network/broadcast/range/host count (offline) | Not declared |
| ipfull | IP Full Profile: Rich geo+ASN+proxy/mobile/hosting flags | Not declared |
| ipgeo | IP Geolocation: Geo, ISP, ASN, proxy/hosting flags | Not declared |
| ipint | IP ↔ Integer: IPv4 ↔ integer ↔ hex (offline) | Not declared |
| ipv4classify | IP Classify: Classify IP: private/loopback/multicast/global (offline) | Not declared |
| ipv6 | IPv6 Validator: IPv6 parser, expander, classifier | Not declared |
| ipwhois | IP WHOIS / RDAP: Network owner, range, abuse contact | Not declared |
| isbn | ISBN Book: Book metadata (OpenLibrary) + checksum | Not declared |
| isbnmeta | ISBN Metadata: Book title/authors/subjects (OpenLibrary) | Not declared |
| isexitnode | Tor Exit Check: Is this a Tor exit node? | Not declared |
| isin | ISIN Validate: Validate ISIN security identifier check digit (offline) | Not declared |
| isotime | Timestamp Convert: Parse/convert a timestamp (offline) | Not declared |
| iss | ISS Position: Live International Space Station lat/lon | Not declared |
| jarm | JARM / InternetDB: Shodan InternetDB: ports, CPEs, vulns, tags (no key) | Not declared |
| jslibs | JS Libraries: Enumerate <script> sources + detect JS libs/versions | Not declared |
| jsonfmt | JSON Format: Validate, pretty-print & stat JSON (offline) | Not declared |
| jwt | JWT Decoder: Header + claims (no signature verify) | Not declared |
| jwtdecode | JWT Decode: Decode JWT header+payload (offline, unverified) | Not declared |
| kev | CISA KEV: Is the CVE actively exploited (KEV catalog) | Not declared |
| keybase | Keybase: Crypto identity + linked social proofs | Not declared |
| latlonformat | Lat/Lon Format: DD ↔ DMS ↔ DM coordinate format conversion (offline) | Not declared |
| leakcheck | LeakCheck: Breach exposure via leakcheck.io public endpoint (no key) | Not declared |
| leaklookup | Hudson Rock Stealers: Infostealer compromise check — stealer logs, credential count (Hudson Rock, no key) | Not declared |
| leet | Leetspeak: Leetspeak transform (offline) | Not declared |
| leetcode_user | LeetCode: LeetCode solved problems, ranking, badges | Not declared |
| lei | LEI Lookup: GLEIF legal-entity record by LEI code | Not declared |
| links | Link Extractor: All links + external domains + emails on a page | Not declared |
| linktree | Linktree: Extract destination links from a linktr.ee profile | Not declared |
| lobsters | Lobste.rs: Public user profile + karma | Not declared |
| ltcaddr | LTC Address: Litecoin address balance & tx count | Not declared |
| luhn | Luhn Check: Validate card/IMEI Luhn checksum (offline) | Not declared |
| mac | MAC Vendor: OUI → hardware vendor | Not declared |
| macvalid | MAC Validator: MAC address parser (colon/dash/plain) | Not declared |
| macvendor | MAC Vendor (OUI): MAC vendor + local/multicast bits from local OUI table (offline) | Not declared |
| macvendorlookup | MAC Vendor: OUI → hardware vendor (macvendors.com) | Not declared |
| maidenhead | Maidenhead Grid: Coords → ham-radio grid locator (offline) | Not declared |
| malware_family | Malware Family: Variants, IOCs, AV detections | Not declared |
| manifest | PWA Manifest: Web app manifest: name, icons, theme | Not declared |
| marineweather | Marine Weather: Wave height/period/direction + sea temp at coords | Not declared |
| mastodon | Mastodon: Resolve user@instance via WebFinger | Not declared |
| maven | Maven Central: Java artifact: 'group:artifact' or name | Not declared |
| medium | Medium: Author feed: recent post titles | Not declared |
| metatags | Meta Tags: OpenGraph / Twitter-card / generator meta tags | Not declared |
| mgrs | MGRS Grid: Lat/lon → MGRS military grid reference (offline) | Not declared |
| mimetype | MIME Type: File extension → MIME type (offline) | Not declared |
| mitre_technique | MITRE Technique: ATT&CK technique → tactics + detection | Not declared |
| moonphase | Moon Phase: Current moon phase & illumination (offline) | Not declared |
| morse | Morse Code: Morse encode/decode, autodetecting direction (offline) | Not declared |
| mtasts | MTA-STS: Inbound-mail TLS enforcement policy | Not declared |
| musicbrainz | MusicBrainz: Artist search: type, country, MBID | Not declared |
| musicbrainzartist | MusicBrainz Artist: Artist type, country, lifespan | Not declared |
| nationalize | Nationality: Predict nationality from a name (nationalize.io) | Not declared |
| nato | NATO Phonetic: Spell text in NATO phonetic alphabet (offline) | Not declared |
| nearbywiki | Nearby Places: Wikipedia places near a coordinate | Not declared |
| npm | npm Author: Packages published by an author | Not declared |
| npmdl | npm Downloads: npm download counts day/week/month | Not declared |
| npmdownloads | npm Downloads: npm package download counts, last week + month (no key) | Not declared |
| npmorg | npm Org: npm organization: all published packages | Not declared |
| npmpkg | npm Package: npm package version, deps, maintainers | Not declared |
| nstrace | NS Delegation: Trace NS delegation: TLD → registrar → authoritative | Not declared |
| nuget | NuGet: .NET package stats + downloads | Not declared |
| numlookup | Number Lookup: Validity, region, carrier, line type, timezones (libphonenumber) | Not declared |
| numwords | Number to Words: Integer → English words (offline) | Not declared |
| nvdcve | NVD CVE Detail: Full NVD record: CVSS, CWE, references | Not declared |
| onthisday | On This Day: Historical events on a date (Wikipedia; MM/DD or today) | Not declared |
| openalexauthor | OpenAlex Author: Author works count, h-index, institution | Not declared |
| openalexwork | OpenAlex Work: Scholarly work: citations, concepts, OA | Not declared |
| opencorp | OpenCorporates: Company registrations worldwide search | Not declared |
| openfoodfacts | Product Barcode: EAN/UPC -> product, brand, nutrition | Not declared |
| openphish | OpenPhish: Community phishing-URL feed membership | Not declared |
| orcid | ORCID: Researcher record (0000-000X-…) | Not declared |
| orcidworks | ORCID Works: Recent publications for an ORCID iD | Not declared |
| orgname | Company → LEI: Fuzzy company-name search → candidate LEIs | Not declared |
| osmuser | OpenStreetMap User: Contributor: last edit + changeset | Not declared |
| osv | OSV Vulns: Known package vulns (OSV.dev). 'eco:name' | Not declared |
| otxdomain | OTX Domain Rep: AlienVault OTX threat pulses for a domain | Not declared |
| otxip | OTX IP Rep: AlienVault OTX threat pulses for an IP | Not declared |
| packagist | Packagist: PHP/Composer package stats (vendor/pkg) | Not declared |
| pageinfo | Common Crawl Page: Common Crawl capture index lookup | Not declared |
| passentropy | Password Entropy: Estimate entropy & offline crack time (offline) | Not declared |
| passgen | Password Gen: Generate strong random passwords + passphrase (offline) | Not declared |
| password_dumps | Password Dump Search: Search Dehashed for leaked passwords (query-only) | Not declared |
| passwordcheck | Password Pwned: HIBP k-anonymity breach check (safe) | Not declared |
| paste_domain | Paste Domain Search: Find domain in public pastes via psbdmp.ws (no key) | Not declared |
| paste_email | Paste Email Search: Find email in public pastes via Wayback CDX + search links (no key) | Not declared |
| peeringdb | PeeringDB: Network type, traffic, IX/facility presence | Not declared |
| peeringnet | PeeringDB Net: Peering policy / traffic / IX presence for ASN | Not declared |
| peers | ASN Peers: Upstream/downstream BGP neighbours | Not declared |
| permissions_pol | Permissions Policy: Permissions-Policy: camera/mic/geo controls | Not declared |
| person_sweep | Person-focused sweep: checks ~30 username/email/social presence tools for one name/handle and returns where it exists plus extracted entities. | Not declared |
| pgp | PGP Key: Public key published on keys.openpgp.org | Not declared |
| phishing_intel | Phishing Intel: Phishing kit tracking + URL detection | Not declared |
| phone | Phone Number: E.164 country/region (offline) | Not declared |
| phone_leak | Phone Leak Check: Search for phone number in leaked databases | Not declared |
| phoneapps | Messaging Links: WhatsApp / Telegram / Viber / Signal deep links | Not declared |
| phonecc | Calling Code: Country, trunk & intl dialing prefixes (offline) | Not declared |
| phonefmt | Phone Format: E.164 / national / international / RFC3966 formats (offline) | Not declared |
| phonenanp | NANP Area Code: +1 number → US/Canada region (offline subset) | Not declared |
| phonepivot | Phone Lookups: Caller-ID / reputation site links (Truecaller, Sync.me…) | Not declared |
| phonespam | Spam Reports: Robocall / scam report-database links | Not declared |
| phonevcard | vCard: Generate a .vcf contact card (offline) | Not declared |
| pluscode | Plus Code: Coords → Open Location Code / Google Plus Code (offline) | Not declared |
| port | Port Reference: Service + exposure notes for a port number | Not declared |
| portlookup | Port Lookup: IANA port → service name (offline) | Not declared |
| portquick | Port Check: Quick TCP port scan (2s timeout) | Not declared |
| portscan | Port Scan: TCP connect scan: common + camera ports | Not declared |
| pubmed | PubMed: PubMed biomedical paper search (NCBI) | Not declared |
| punycode | Punycode/IDN: IDN domain ↔ Punycode (xn--) homograph check (offline) | Not declared |
| pwstrength | Password Strength: Offline entropy/strength estimate | Not declared |
| pypi | PyPI Package: Python package metadata + links | Not declared |
| pypiproject | PyPI Project: PyPI version/license/links | Not declared |
| pypistats | PyPI Downloads: PyPI recent download counts | Not declared |
| qrcode | QR Code: Generate a QR code for text/URL | Not declared |
| quakes | Earthquakes: USGS recent quakes — global or near coords (M2.5+) | Not declared |
| quoted_printable | Quoted-Printable: Quoted-printable encode/decode | Not declared |
| railfence | Rail Fence: Rail-fence cipher over 3 rails (offline) | Not declared |
| random_fact | Random Fact: Random trivia fact | Not declared |
| randomuser | Random Identity: Synthetic identity for sockpuppet hygiene (randomuser.me) | Not declared |
| ransomware_tracker | Ransomware Groups: Ransomware gang profiles + recent hits | Not declared |
| rdap | RDAP Registration: Structured domain registration record (RDAP/IANA bootstrap, no key) | Not declared |
| rdap_domain | RDAP Domain: RDAP structured domain registration data | Not declared |
| rdapip | RDAP IP: Authoritative RDAP record for an IP | Not declared |
| reddit_sub | Reddit Subreddit: Subreddit: subscribers, active users, description | Not declared |
| reddit_user | Reddit User: Reddit user: karma, age, verified status | Not declared |
| redirects | Redirect Tracer: Full HTTP redirect chain | Not declared |
| referrer_pol | Referrer Policy: Referrer-Policy header — URL leakage risk | Not declared |
| regdomain | Registered Domain: Extract eTLD+1 registered domain from URL (offline) | Not declared |
| restcountry | Country Detail: Capital/region/income by name or ISO (World Bank) | Not declared |
| reversedns | Reverse DNS: PTR record / hostname | Not declared |
| reverseip | Reverse IP: Other domains sharing the host | Not declared |
| revgeo | Reverse Geocode: lat,lon -> address (OSM Nominatim) | Not declared |
| revgeocode | Reverse Geocode: Coordinates → nearest address (OSM) | Not declared |
| revimg | Reverse Image: Reverse-image-search links (Lens/Yandex/TinEye/Bing) | Not declared |
| ripewhois | RIPE Network Info: Covering prefix + origin ASN (RIPEstat) | Not declared |
| robots | robots.txt: Disallowed paths + sitemaps | Not declared |
| robotsmeta | Robots Meta: meta-robots + X-Robots-Tag: noindex/nofollow/noarchive | Not declared |
| robotstxt_history | robots.txt History: Historical robots.txt snapshots from Wayback Machine | Not declared |
| roman | Roman Numerals: Convert int <-> roman numeral, autodetecting (offline) | Not declared |
| rot13 | ROT-13 Cipher: ROT-13 encode/decode | Not declared |
| rot47 | ROT47: ROT47 ASCII cipher (offline, self-inverse) | Not declared |
| rpki | RPKI / ROA: Route-origin validation for the covering prefix | Not declared |
| rubygemrev | Gem Rev-Deps: Reverse dependencies of a RubyGem | Not declared |
| rubygems | RubyGems: Ruby gem stats + downloads | Not declared |
| s3buckets | Cloud Buckets: S3/GCS/Azure buckets named for the domain | Not declared |
| sec_edgar | SEC EDGAR: Company name + recent SEC filings by ticker/CIK | Not declared |
| securitytxt | security.txt: RFC 9116 disclosure policy & contacts | Not declared |
| semanticscholar | Semantic Scholar: Paper TLDR, citations, influence | Not declared |
| semver | Semantic Version: Parse and validate semantic versioning | Not declared |
| sha256lookup | SHA-256 Reverse: Crack SHA-256 via online DB | Not declared |
| sitemap | Sitemap: Fetch sitemap.xml + list URLs | Not declared |
| slug | Slugify: Text → URL-safe slug (offline) | Not declared |
| smtpbanner | SMTP Banner: SMTP banner & EHLO capabilities (ports 25/587/465) | Not declared |
| snowflake | Snowflake ID: Decode Twitter/Discord snowflake → timestamp (offline) | Not declared |
| snusbase_hash | Hash Reverse (Leaks): Reverse MD5/SHA1 hash via breach-sourced hash DB (md5decrypt.net) | Not declared |
| social | Social Links: Direct profile URLs across 20 platforms | Not declared |
| soladdr | SOL Account: Solana account balance & owner program | Not declared |
| sopostuser | StackOverflow User: SO profile + reputation by numeric id | Not declared |
| soundcloud | SoundCloud Meta: Track/user title + author (oEmbed) | Not declared |
| spacepeople | People in Space: Who is in space right now (names + craft) | Not declared |
| spaceweather | Space Weather: Planetary Kp index + geomagnetic storm/aurora (NOAA) | Not declared |
| spamhauslookup | Spamhaus IP Check: Spam/phishing IP blacklist check | Not declared |
| spdxlicense | SPDX License: SPDX license id → name + OSI status | Not declared |
| sri_check | SRI Check: Subresource Integrity: external scripts without integrity= | Not declared |
| srvlookup | SRV Records: SIP/XMPP/mail/CalDAV SRV record discovery | Not declared |
| ssh | SSH Banner: Per-target SSH server banner / version | Not declared |
| ssn_check | SSN/Identity Leak: Check if SSN/DOB appears in identity theft databases | Not declared |
| stackoverflow | Stack Overflow: SO/SE user search by display name | Not declared |
| steam_user | Steam Profile: Steam community profile via public XML | Not declared |
| stringmetrics | String Metrics: Length, entropy, character breakdown | Not declared |
| subbrute | Subdomain Brute: Resolve a common-subdomain wordlist (per-target) | Not declared |
| subdomains | Subdomains: Certificate-transparency subdomain discovery | Not declared |
| suntimes | Sun Times: Sunrise/sunset/twilight for a coordinate (UTC) | Not declared |
| supply_chain_risk | Supply Chain Risk: Dependency vulns + typosquatting | Not declared |
| swagger | Swagger / OpenAPI: Exposed API docs at common paths (per-target) | Not declared |
| swiftbic | SWIFT/BIC: Parse SWIFT/BIC: bank/country/branch (offline) | Not declared |
| takeover | Subdomain Takeover: Dangling-CNAME takeover fingerprint check | Not declared |
| teamcymru | Team Cymru ASN: IP → ASN via Team Cymru DNS (fastest ASN lookup) | Not declared |
| tech | Tech Fingerprint: CMS/framework/server detection | Not declared |
| telegram_channel | Telegram Channel: Public channel preview: subscribers, description | Not declared |
| tempconv | Temperature: Convert °C / °F / K (offline) | Not declared |
| tempmail | Temp Email: Generate/read a disposable email inbox (1secmail) | Not declared |
| threat_actor | Threat Actor: Known campaigns, techniques, tools | Not declared |
| threat_pattern | Threat Pattern: Find threat patterns across incidents | Not declared |
| threatcrowd | Passive DNS: OTX passive DNS resolution history | Not declared |
| tiktok | TikTok Profile: TikTok user stats (best-effort, keyless) | Not declared |
| timezone_info | Timezone Info: Timezone UTC offset & current time (offline, IANA names) | Not declared |
| tldinfo | TLD Info: TLD registry operator, type, purpose (offline) | Not declared |
| tls | TLS Certificate: Live cert: issuer, validity, SANs, cipher | Not declared |
| tlsa | DANE / TLSA: Certificate-pinning DANE records on :443 | Not declared |
| tlsscan | TLS Versions: Which SSL/TLS protocols the host accepts | Not declared |
| tor | Tor Exit Check: Is the IP a known Tor exit node | Not declared |
| transform | Text Transforms: rot13/base32/morse/reverse (offline) | Not declared |
| trendingwiki | Trending Wikipedia: Most-read Wikipedia articles today | Not declared |
| trufflehog_url | Secret Pattern Scan: Scan raw URL content for API keys, tokens, private keys, JWTs | Not declared |
| txhash | Crypto Tx: BTC/ETH transaction detail (blockchair) | Not declared |
| typosquat | Typosquat Finder: Look-alike domains that currently resolve | Not declared |
| ulid | ULID Decode: Decode a ULID's embedded timestamp (offline) | Not declared |
| unicode_lookup | Unicode Lookup: Unicode codepoint: name, category, HTML entity (offline) | Not declared |
| unixperm | Unix Permissions: Octal permission (755/644) → rwx breakdown (offline) | Not declared |
| unpaywall | Unpaywall: Is a DOI open-access? Direct PDF link | Not declared |
| urban | Urban Dictionary: Slang/term definitions + examples | Not declared |
| urlparse | URL Parse: Parse URL into components + query params | Not declared |
| urlscan | urlscan.io: Past scans, verdicts, infra (IP/ASN/server) for a site | Not declared |
| urlscansearch | urlscan Archive: Public urlscan.io scan history for a domain | Not declared |
| useragent | UA Parser: Parse a User-Agent into OS/browser (offline) | Not declared |
| username | Username Hunter: Presence across 16 public sites | Not declared |
| utm | UTM Coords: Lat/lon → UTM coordinates (WGS84, offline) | Not declared |
| uuencode | UUencode: Unix-to-Unix encoding | Not declared |
| uuid | UUID Parser: Version/variant + v1 timestamp/MAC (offline) | Not declared |
| uuid_validate | UUID Validator: UUID v1-v5 version and variant detector | Not declared |
| vatid | EU VAT: Validate EU VAT number country format (offline) | Not declared |
| vigenere | Vigenere Cipher: Vigenere encrypt/decrypt: 'KEY:text[:d]' (offline) | Not declared |
| vimeo | Vimeo Meta: Video title, author, thumbnail (oEmbed) | Not declared |
| vin | VIN Decoder: NHTSA vPIC vehicle decode (make/model/plant) | Not declared |
| vuln_feed | Vuln Feed: Real-time vuln feeds (NVD, Exploit-DB, PacketStorm) | Not declared |
| waf | WAF / CDN: Detect WAF/CDN from headers & cookies | Not declared |
| wayback | Wayback Machine: Archive.org snapshot history | Not declared |
| wayback_leaks | Wayback Leak Scan: Search Wayback Machine for historically exposed .env/config/secrets | Not declared |
| weather | Weather: Current weather at a coordinate (Open-Meteo) | Not declared |
| weatheralerts | Weather Alerts: Active US NWS weather alerts near coords | Not declared |
| webfinger | WebFinger: WebFinger resource discovery (ActivityPub/OIDC) | Not declared |
| wellknown | .well-known Scan: Which /.well-known/* resources exist | Not declared |
| whatsnearby | Nearby POIs: OSM amenities within 500m of coords (Overpass) | Not declared |
| whois | WHOIS / RDAP: Registration, status, nameservers, DNSSEC | Not declared |
| whois_check | WHOIS Check: Domain WHOIS record existence via who.is | Not declared |
| whoisserver | WHOIS Server: TLD → WHOIS server mapping (offline + IANA fallback) | Not declared |
| wikidata | Wikidata Search: Search Wikidata entities by label (no key) | Not declared |
| wikidatasearch | Wikidata Search: Free-text → Wikidata entities | Not declared |
| wikipedia | Wikipedia Summary: Wikipedia REST summary: extract, type, coords (no key) | Not declared |
| wikipv | Wikipedia Meta: Page length, last edit, editor | Not declared |
| wikisummary | Wikipedia Summary: Page extract/description for a topic | Not declared |
| wordcount | Word Count: Text stats: words/chars/lines/reading time (offline) | Not declared |
| wpplugin | WP Plugin Info: WordPress.org plugin version/install stats | Not declared |
| wpscan | WordPress Scan: WP version + author enum via REST (per-target) | Not declared |
| xrpaddr | XRP Account: XRP Ledger account balance & sequence | Not declared |
| youtube | YouTube Meta: Video/channel title, author, thumbnail (oEmbed) | Not declared |
| zenodo | Zenodo: Zenodo open-research records search | Not declared |
| zerodday_timeline | Zero-Day Timeline: 0day mentions across researchers + CVE | Not declared |
| zonetransfer | Zone Transfer: AXFR attempt — is zone transfer misconfigured? | Not declared |
Change history
No changes since the first observation. The first snapshot is the baseline.
| Source | Listing | First seen | Last seen | Versions |
|---|---|---|---|---|
| Official MCP Registry | com.thetempleofdoom.osint-mcp/osint-terminal | 2 Oct 2026 | 2 Oct 2026 | 1 |