Topic · updated 2026-10-05
OSINT & Threat Intelligence MCP servers
32 OSINT & Threat Intelligence MCP servers indexed on awesomemcp.in. Every entry links to a live GitHub repository with a known author, is de-duplicated across the official MCP registry and community lists, and carries an automated vulnerability-check badge. Built by @apurvsinghgautam, @w0h1v, @frangelbarrera, @VirusTotal, @AnshumanAtrey and 25 other authors.
Top 32 OSINT & Threat Intelligence MCP servers
Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.
Scan passed
★ 7,424
2026-10-03MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries.
Scan passed
★ 174
2026-09-08MCP server for querying VirusTotal API with comprehensive security analysis tools.
Scan passed
★ 150
2026-09-08OSINT MCP server — 23 tools: DNS, WHOIS, Shodan, breaches, GEOINT, crypto. Works with Claude Code.
Scan passed
★ 36
2026-10-02Official VirusTotal MCP server: threat reports, file and URL submissions, and analysis recovery.
Scan passed
★ 16
2026-10-03PhoneInfoga - International Phone Number OSINT
Scan passed
★ 5
2026-09-24From first signal to satellite evidence: live world-event intelligence and collection planning.
Scan passed
★ 0
2026-10-01Live markets, conflicts, country risk, chokepoints, energy, and China decision signals. 89 tools.
Scan passed
★ 87,824
2026-10-05AI-powered OSINT agent & MCP server. 20 tools: email, breach, IP, WHOIS, DNS, Shodan, GitHub & more.
Scan passed
★ 1,692
2026-10-05Search usernames across social networks and analyze URLs with maigret, an OSINT tool that collects account information from public sources.
Scan passed
★ 267
2026-01-27Real-time data-breach lookup and analytics for emails and domains from XposedOrNot.
Scan passed
★ 98
2026-10-05Query network asset information from ZoomEye.
Scan passed
★ 82
2026-09-09Agentic memory for cyber threat intelligence. STIX graphs, actor aliasing, offline RAG, Sigma/YARA.
Scan passed
★ 64
2026-09-2155 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
Scan passed
★ 33
2026-10-05Fetch recent public X/Twitter posts by named handle for monitoring, comparison, OSINT, and research.
Scan passed
★ 9
2026-08-10OSINT sweep of a digital footprint: breaches, accounts, data brokers, domains and IPs
Scan passed
★ 9
2026-08-26Unified threat intel - OTX, AbuseIPDB, GreyNoise, abuse.ch, Feodo Tracker
Scan passed
★ 8
2026-08-12Detect fake-recruiter and job-offer scams using free OSINT. No API keys.
Scan passed
★ 8
2026-07-03MCP server for Proofpoint TAP — threat intelligence, forensics, quarantine, and email security.
Scan passed
★ 5
2026-10-05Rights-aware censorship, China-economic status, and tamper-evident AI evaluation tools.
Scan passed
★ 3
2026-10-03Scan MCP servers and skill files for AVE vulnerabilities. Conformance scoring and threat intel.
Scan passed
★ 2
2026-05-23Verify a photo's capture time and provenance: C2PA validation, EXIF/XMP, and pixel forensics.
Scan passed
★ 2
2026-08-31Threat intelligence: enrich IOCs (IP, domain, URL, hash), search CVEs and actors, scan SBOMs.
Scan passed
★ 2
2026-08-31Read-only MISP threat intelligence (events, attributes, search, tags, feeds, galaxies) with prompt injection scanning of every response.
Scan passed
★ 2
2026-05-29Domain intel for AI agents: RDAP registration, DNS, email deliverability, tech stack.
Scan passed
★ 1
2026-10-0423 security tools for AI agents: phishing links, exposure maps, DNS, SSL, PQC, headers, email.
Scan passed
★ 1
2026-10-05Screen crypto wallets vs OFAC SDN + threat intel; pre-payment checks, signed receipts; SAR drafts
Scan passed
★ 1
2026-10-05Pay-per-call cybersecurity for AI agents: vuln scans, threat intel, compliance, code security.
Scan passed
★ 1
2026-08-11Search stories and discover OSINT sources in Taranis AI.
Scan passed
★ 1
2026-08-06The internet's infrastructure graph for AI agents - 46B nodes and edges, free trial via 2 HTTP calls
Scan passed
★ 1
2026-07-19Mocap, rehab biomechanics, threat intel, fleet vision. 21 MCP tools, 10 free. x402/USDC paid.
Scan passed
★ 1
2026-08-05Developer and security utilities via the onlinecybertools.com API: encoding, hashing, JWT decoding, regex testing, formatters, network diagnostics and OSINT.
Scan passed
★ 1
2026-06-03
Quick install
Add the most popular option to Claude Code:
# see https://github.com/apurvsinghgautam/robin for setup
FAQ
What is the best osint & threat intelligence mcp server?
By GitHub stars, the most popular is Robin: AI-Powered Dark Web OSINT by @apurvsinghgautam (7,424 stars). awesomemcp.in lists 32 MCP servers for this topic, ranked by official status and popularity.
Are these MCP servers safe to install?
32 of 32 passed our automated vulnerability check (OSV.dev advisories for the published package, OpenSSF Scorecard, license, maintenance and provenance). The check is automated and does not guarantee 100% safety — review the code and permissions before installing.
How do I install Robin: AI-Powered Dark Web OSINT?
With Claude Code: # see https://github.com/apurvsinghgautam/robin for setup. Every listing on awesomemcp.in includes an install command and, where available, an mcp.json snippet for Claude Desktop, Cursor and other MCP clients.
Can AI agents read this list?
Yes. The full catalog is available as JSON at https://awesomemcp.in/api/mcps.json and https://awesomemcp.in/api/skills.json, and as plain text at https://awesomemcp.in/llms.txt.