MCP servercom.thetempleofdoom.osint-mcp/osint-terminal

Abuse Contact: Authoritative abuse email (RIPEstat finder)

ads.txt: Ad-tech sellers declared in ads.txt

Self-describing manifest of all OSINT Terminal agent endpoints.

Age Predictor: Predict age from a first name (agify.io)

Air Quality: PM2.5/PM10/European AQI at coords (Open-Meteo, no key)

Antipode: Opposite point on Earth for coords (offline)

API Key Exposure: Scan GitHub/Pastebin/Google for exposed API keys/secrets

API Leak Search: GitHub dork links for API key/secret exposure

NASA APOD: Astronomy Picture of the Day (optional date)

APT Track: Track APT campaigns via MITRE + researchers

Archive.org Item: Internet Archive item metadata

arXiv Search: arXiv paper search by title/author/keyword

Ascii85: Ascii85 encode/decode (offline)

ASN / BGP: ASN details or prefixes for an IP

ASN Lookup: ASN org/country/prefixes via RIPEstat

ASN Prefixes: All announced prefixes for an ASN (RIPEstat)

AS Rank (CAIDA): Global ASN ranking + customer cone size

Atbash Cipher: Atbash A↔Z mirror cipher (offline, self-inverse)

Attack Surface: Map attack surface: services + endpoints + API

Barcode Validate: EAN-13 / UPC-A check digit validation (offline)

Base32 Encode/Decode: RFC 4648 Base32 encode or decode

Base36 Codec: Encode int <-> base36, autodetecting direction (offline)

Base58 Codec: Bitcoin base58 encode/decode: 'hex:..' / 'b58:..' (offline)

Base64: Auto decode/encode base64 (offline)

Base Convert: Binary/octal/decimal/hex number conversion (offline)

Bearing: Initial compass bearing between two coord pairs (offline)

BGP History: Routing origin history (RIPE Stat)

BIMI: Brand-indicator (logo) DNS record

Card BIN: Issuer/scheme/country from card BIN (binlist)

Binary Text: Text ↔ 8-bit binary (offline)

BIN Lookup: Card BIN → bank, brand, country, type

Block Height: Current Bitcoin + Ethereum block height

Bluesky: AT Protocol public profile

Botnet Tracker: Botnet C2 + IoT malware tracking

Breach Aggregator: Aggregate breach databases (XposedOrNot, LeakCheck, etc)

BreachDB Search: Aggregated breach collection search

Breach Directory: ProxyNova COMB dataset search for credential exposure

Breach Catalog: Public HIBP breach metadata search

Homebrew: Formula/cask version, deps, installs

BTC Address: Bitcoin balance/tx via mempool.space

BTC Fees: Recommended Bitcoin fees sat/vB (mempool.space)

C2 Infrastructure: Detect C2 infrastructure + hosting

CAA Records: Which CAs may issue certs for the domain

Caesar Cipher: ROT-N / Caesar brute force, all 25 shifts (offline)

Camera Exposure: RTSP/ONVIF + camera-port exposure (per-target)

Case Convert: snake/camel/Pascal/kebab/CONSTANT case (offline)

cdnjs: Hosted JS library version + assets

Wayback CDX: Snapshot count + first/latest capture in Wayback Machine

Cert History: crt.sh issuer timeline & counts

Cloudflare Radar: Domain rank + categories from Cloudflare Radar

CRC32/Adler32: CRC32 + Adler32 checksum of input text (offline)

Chess.com: Public player profile + ratings

CIDR Calculator: Subnet calc: network, mask, host range, count (offline)

CIDR Calculator: Network/broadcast/host-count (offline)

Hash Lookup: Known-file lookup (CIRCL hashlookup)

CISA Alerts: CISA alerts + advisories (recent threats)

Clickjacking: X-Frame-Options + CSP frame-ancestors check

Cloud Provider: AWS/GCP/Azure/etc. detection + hosting flag

Codeberg: Codeberg/Gitea public user

Codeforces: Codeforces competitive programmer rating & rank

Coin Info: Coin metadata: categories, algorithm, genesis (CoinGecko)

Color Parser: hex/rgb -> rgb/hsl + nearest name (offline)

COMB Credential Search: Search COMB breach compilation via ProxyNova free API

Common Crawl: Captures of a domain in Common Crawl index

Cookie Audit: Secure/HttpOnly/SameSite flag review

Run a 40-tool broad sweep on the query and return the cross-tool entity graph: emails/domains/IPs/handles/phones appearing in >=2 tools, strongest first. This is the connected-patt

CORS Check: Origin-reflection / wildcard misconfig

Country Profile: World Bank country profile by ISO code

CPE → CVEs: NVD: recent CVEs affecting a CPE 2.3 string

CPF / CNPJ: Brazilian doc checksum (offline)

Crate Downloads: Download totals for a Rust crate

crates.io: Rust crate stats + downloads

crates.io Stats: Rust crate downloads, version, repo (no key)

CRC-32 Checksum: Compute CRC-32 of input

Credential Stuffing Risk: Check breach + stuffing risk

Card Brand: Identify card brand + Luhn validity (offline)

Credit Card Validator: Luhn check + brand guess (test only)

Cron Explain: Explain a 5-field cron expression (offline)

Crossref Author: Works by author/keyword (Crossref)

Crypto Address: BTC/ETH balance & tx history

Crypto Market: Global market cap, BTC dominance, 24h volume (CoinGecko)

Crypto Price: Live coin price + 24h change (CoinGecko)

CSP Analyzer: Content-Security-Policy header analysis & grade

CT Logs (Org): crt.sh cert search by organization name

CVE Lookup: CVE detail + CVSS (CIRCL, no key)

CVE POC Check: Check if a CVE has public POC/exploit code

CVE Severity: CVSS + EPSS + KEV for a CVE

CVE Timeline: When a CVE was discussed (Twitter/Reddit/News)

CVE Detail: Full CVE record (CVSS, refs) via CIRCL

Darkweb Monitor: Darkweb monitoring: marketplaces, paste sites

DataCite Search: Research datasets/DOIs by keyword

Data URI Parse: Parse or create data: URIs

DBLP: DBLP CS publication search

DDG Instant: DuckDuckGo instant answer + related topics

Decoder: Auto base64/hex/URL-decode + refang

DeHashed Domain: DeHashed public page scrape for domain breach exposure

deps.dev: Open-source insights: versions, default

DeviantArt Meta: Deviation title + author (oEmbed)

dev.to: Forem/dev.to public profile

Directory Listing: Open directory-index exposure (per-target)

Disasters (GDACS): Active worldwide disasters: quakes/cyclones/floods (feeds globe)

Disposable Email: Is the email domain a disposable provider?

Disposable Email: Check if email is temporary/disposable

DNS Records: A/AAAA/MX/NS/TXT/CNAME/SOA/CAA records

DNS Blocklist: Spamhaus/Barracuda/SORBS/SpamCop check

DNS Graph (HE): Hurricane Electric DNS delegation info

MX (DoH): MX records via Google DNS-over-HTTPS

DNS Propagation: Compare A records across Google/Cloudflare/Quad9

PTR Range Sweep: Reverse-DNS every host in a /24 (offline)

DNS A Record: DNS A record lookup via Google DoH

DNS Recon: Query ALL DNS record types at once

DNSSEC: Is the zone signed (AD flag + DNSKEY/DS)

TXT Verifications: Which SaaS a domain is enrolled in (TXT tokens)

Docker Hub Repo: Docker Hub repo pulls, stars, last update (no key)

DOGE Address: Dogecoin address balance & tx count

DoH Records: Uncommon DNS records (HTTPS/SVCB/TLSA/SRV/NAPTR…)

DOI Resolver: Crossref publication metadata for a DOI

Domain Age: Days since registration (phishing signal)

Search Dorks: Builds manual OSINT search links

Barcode/EAN: EAN/UPC check digit + GS1 country prefix (offline)

Elevation: Ground elevation in metres (Open-Meteo)

Email Intel: Gravatar, MX, disposable detection

Email Validator: Basic RFC 5322 email format validation

Email Reputation: emailrep.io: malicious/spam/breach flags for email (no key, limited)

Email Security: SPF / DMARC / DKIM posture

Emerging Threats: Emerging threats: new CVEs + 0days (24h)

Emoji Lookup: Emoji ↔ Unicode name/codepoint (offline)

ENS Resolve: ENS name <-> ETH address + avatar

Shannon Entropy: Per-char entropy — flags secrets/keys

Epoch Time: Unix timestamp <-> UTC datetime

EPSS Score: Exploitation probability (FIRST EPSS)

ETH Address: Ethereum balance/tx + contract flag

ETH Contract: Contract check + Sourcify verified source

CVE Exploits: Exploit-DB + GitHub POCs for a CVE

Favicon Hash: favicon md5/sha256 for pivoting

FCC ID: FCC equipment authorization database

RSS / Atom Feeds: Discover syndication feeds on a site

Feodo C2: abuse.ch botnet C2 blocklist (key-free)

Feodo C2 List: Is IP on abuse.ch Feodo botnet C2 list

Flights Nearby: Live aircraft within ~1° of coords (OpenSky)

Form Audit: Enumerate forms/inputs (login/upload) — attack surface

FX Rates: Live exchange rates for a currency code

GDELT News: Global news/events by keyword (last 24h)

Gender Predictor: Predict gender from a first name (genderize.io)

Geocode: Place name → coordinates (OSM Nominatim)

Geo Distance: Great-circle distance between two coord pairs (offline)

Geohash: lat,lon -> geohash (offline)

GitHub Dork Search: GitHub code search for target string exposure in public repos

GitHub Secret Scan: Scan GitHub user's public repos for leaked secrets/passwords

GitHub Advisories: Security advisories for an ecosystem (pip/npm/…)

GitHub Commits: Recent commits for owner/repo

GitHub Activity: Recent public GitHub events for a user (60/hr)

GitHub Gists: Public gists for a user

GitHub GPG Key: Whether a user publishes a GPG key

Repo Languages: Language byte-breakdown for owner/repo

GitHub Org: Public org profile

GitHub SSH Keys: A user's public SSH keys (.keys)

GitHub Repo: Stars/langs/license/activity (owner/repo)

Exposed Files: .git/.env/backup exposure (per-target)

GitHub Recon: Profile, repos, languages

GitHub Code Search: GitHub unauthenticated code search (10 results)

GitHub Trending: Trending repos (optional language filter)

GitHub Gists: A user's public gists

GitHub Repo Search: Search GitHub repos by keyword

gitignore Template: GitHub .gitignore template for a language

GitLab: Public user profile

GLEIF Name: GLEIF fuzzy legal-entity name → LEI codes

Go Module: Latest version of a Go module

Go Module: Go module latest version (module proxy)

Go Module: Latest version of a Go module via module proxy (no key)

GraphQL Probe: Find GraphQL endpoint + introspection (per-target)

Gravatar Profile: Full public Gravatar profile + linked accounts

GreyNoise: Is the IP a known internet scanner — benign/malicious

Hacker News: Profile: karma, age, activity

HN Front Page: Current Hacker News front-page stories

Hash Identifier: Guess hash algorithm from length/charset

Hashnode: Blogger profile: followers, posts

Hash Text: md5/sha1/sha256/sha512 of text (offline)

HTTP / Security: Headers + security-header scorecard

Hexdump: Offset/hex/ASCII hexdump of input (offline)

Hex.pm: Elixir/Erlang package downloads

HIBP Password Check: Check if a password appeared in breaches via HIBP k-anonymity (no key)

HIBP Breaches: Check breach database for email/username exposure

HIBP Email Breaches: Email breach exposure via XposedOrNot (HIBP-compatible, no key)

HN Search: Search Hacker News stories/comments

Hacker News User: HN profile: karma, created, submission count

Public Holidays: Country public holidays this year (nager.at)

Homoglyph: Detect confusable/mixed-script spoofing chars (offline)

Host Search: Forward-DNS host/subdomain map (HackerTarget)

Reverse DNS: IP → hostname via reverse DNS

Host Search: Forward-DNS host enumeration for a domain

HSTS Preload: Is the domain on the browser HSTS preload list

HTML Comments: Extract HTML comments — leaked TODOs/paths/software

HTML Encode/Decode: HTML entity encode/decode

HTTP Status Code: HTTP status code meaning & family (offline)

HTTP Ping: Reachability + response timing

HTTP Methods: Allowed methods + TRACE/risky-verb check

HTTP Status: Explain an HTTP status code (offline)

HudsonRock Stealer: Stealer-log exposure check via HudsonRock Cavalier free API

HuggingFace: HuggingFace user profile or model card