New Your team’s decisions, in one playbook every coding agent works from. Never answer your agent twice

Osint Terminal

474 tools. 13 can modify or destroy data without limits.

13 write tools that can modify data. Rate limits recommended.

Last updated:

13 can modify or destroy data
461 read-only
474 tools total

Community server · catalogue entry checked 12/10/2026 · full schemas captured for 473 of 474 tools

How to control Osint Terminal ↓

What Osint Terminal exposes to your agents

Read (461) Write / Execute (13) Destructive / Financial (0)

What Osint Terminal costs in tokens

22,880 tokens of tool definitions, loaded on every request
11% of a 200k context window
97 heaviest tool: social_deep
High Risk

The most dangerous Osint Terminal tools

13 of Osint Terminal's 474 tools can modify, destroy, or commit something on every call — and an agent calls them with no built-in limits.

How to control Osint Terminal

PolicyLayer is an MCP gateway — it sits between your AI agents and Osint Terminal, and nothing reaches the server without passing your rules. These are the rules we recommend:

Rate limit write operations
{
  "base_convert": {
    "limits": [
      {
        "counter": "base_convert_per_hour",
        "window": "hour",
        "max": 30,
        "scope": "grant"
      }
    ]
  }
}

Prevents bulk unintended modifications from agents caught in loops.

Cap read operations
{
  "abusecontact": {
    "limits": [
      {
        "counter": "abusecontact_per_minute",
        "window": "minute",
        "max": 60,
        "scope": "grant"
      }
    ]
  }
}

Controls API costs and prevents retry loops from exhausting upstream rate limits.

  1. Create a free account and register Osint Terminal — nothing to install.
  2. Add these rules — paste them, or build them visually. Tune the limits to your setup.
  3. Point your MCP client (Claude, Cursor, anything) at your gateway URL.
ENFORCE POLICY ON OSINT TERMINAL →

Instant setup, no code required.

All 474 Osint Terminal tools

READ 461 tools
Read abusecontact Abuse Contact: Authoritative abuse email (RIPEstat finder) Read adstxt ads.txt: Ad-tech sellers declared in ads.txt Read agent_manifest Self-describing manifest of all OSINT Terminal agent endpoints. Read agify Age Predictor: Predict age from a first name (agify.io) Read airquality Air Quality: PM2.5/PM10/European AQI at coords (Open-Meteo, no key) Read antipode Antipode: Opposite point on Earth for coords (offline) Read api_key_scan API Key Exposure: Scan GitHub/Pastebin/Google for exposed API keys/secrets Read apileak API Leak Search: GitHub dork links for API key/secret exposure Read apod NASA APOD: Astronomy Picture of the Day (optional date) Read apt_track APT Track: Track APT campaigns via MITRE + researchers Read archiveorg Archive.org Item: Internet Archive item metadata Read arxiv arXiv Search: arXiv paper search by title/author/keyword Read ascii85 Ascii85: Ascii85 encode/decode (offline) Read asn ASN / BGP: ASN details or prefixes for an IP Read asnlookup ASN Lookup: ASN org/country/prefixes via RIPEstat Read asnprefixes ASN Prefixes: All announced prefixes for an ASN (RIPEstat) Read asrank AS Rank (CAIDA): Global ASN ranking + customer cone size Read atbash Atbash Cipher: Atbash A↔Z mirror cipher (offline, self-inverse) Read attack_surface Attack Surface: Map attack surface: services + endpoints + API Read barcode Barcode Validate: EAN-13 / UPC-A check digit validation (offline) Read base32 Base32 Encode/Decode: RFC 4648 Base32 encode or decode Read base36 Base36 Codec: Encode int <-> base36, autodetecting direction (offline) Read base58 Base58 Codec: Bitcoin base58 encode/decode: 'hex:..' / 'b58:..' (offline) Read base64 Base64: Auto decode/encode base64 (offline) Read bearing Bearing: Initial compass bearing between two coord pairs (offline) Read bgphistory BGP History: Routing origin history (RIPE Stat) Read bimi BIMI: Brand-indicator (logo) DNS record Read bin Card BIN: Issuer/scheme/country from card BIN (binlist) Read binarytext Binary Text: Text ↔ 8-bit binary (offline) Read binlookup BIN Lookup: Card BIN → bank, brand, country, type Read blockheight Block Height: Current Bitcoin + Ethereum block height Read bluesky Bluesky: AT Protocol public profile Read botnet_tracker Botnet Tracker: Botnet C2 + IoT malware tracking Read breach_aggregator Breach Aggregator: Aggregate breach databases (XposedOrNot, LeakCheck, etc) Read breachdb BreachDB Search: Aggregated breach collection search Read breachdirectory Breach Directory: ProxyNova COMB dataset search for credential exposure Read breachsearch Breach Catalog: Public HIBP breach metadata search Read brew Homebrew: Formula/cask version, deps, installs Read bssid_geo WiFi BSSID Geo: BSSID/cell -> approximate location (Mylnikov free DB) Read btcaddr BTC Address: Bitcoin balance/tx via mempool.space Read btcfees BTC Fees: Recommended Bitcoin fees sat/vB (mempool.space) Read c2_infrastructure C2 Infrastructure: Detect C2 infrastructure + hosting Read caa CAA Records: Which CAs may issue certs for the domain Read caesar Caesar Cipher: ROT-N / Caesar brute force, all 25 shifts (offline) Read camera Camera Exposure: RTSP/ONVIF + camera-port exposure (per-target) Read casify Case Convert: snake/camel/Pascal/kebab/CONSTANT case (offline) Read cdnjs cdnjs: Hosted JS library version + assets Read cdxwayback Wayback CDX: Snapshot count + first/latest capture in Wayback Machine Read certhistory Cert History: crt.sh issuer timeline & counts Read cfradar Cloudflare Radar: Domain rank + categories from Cloudflare Radar Read checksum CRC32/Adler32: CRC32 + Adler32 checksum of input text (offline) Read chesscom Chess.com: Public player profile + ratings Read cidr CIDR Calculator: Subnet calc: network, mask, host range, count (offline) Read cidrinfo CIDR Calculator: Network/broadcast/host-count (offline) Read circlhash Hash Lookup: Known-file lookup (CIRCL hashlookup) Read cisa_alerts CISA Alerts: CISA alerts + advisories (recent threats) Read clickjacking Clickjacking: X-Frame-Options + CSP frame-ancestors check Read cloud Cloud Provider: AWS/GCP/Azure/etc. detection + hosting flag Read codeberg Codeberg: Codeberg/Gitea public user Read codeforces Codeforces: Codeforces competitive programmer rating & rank Read coininfo Coin Info: Coin metadata: categories, algorithm, genesis (CoinGecko) Read color Color Parser: hex/rgb -> rgb/hsl + nearest name (offline) Read comb_search COMB Credential Search: Search COMB breach compilation via ProxyNova free API Read commoncrawl Common Crawl: Captures of a domain in Common Crawl index Read cookies Cookie Audit: Secure/HttpOnly/SameSite flag review Read cors CORS Check: Origin-reflection / wildcard misconfig Read country Country Profile: World Bank country profile by ISO code Read cpe CPE → CVEs: NVD: recent CVEs affecting a CPE 2.3 string Read cpfcnpj CPF / CNPJ: Brazilian doc checksum (offline) Read cratedownloads Crate Downloads: Download totals for a Rust crate Read crates crates.io: Rust crate stats + downloads Read cratestats crates.io Stats: Rust crate downloads, version, repo (no key) Read crc32 CRC-32 Checksum: Compute CRC-32 of input Read credential_stuffing Credential Stuffing Risk: Check breach + stuffing risk Read creditcard Card Brand: Identify card brand + Luhn validity (offline) Read creditcardtest Credit Card Validator: Luhn check + brand guess (test only) Read cron Cron Explain: Explain a 5-field cron expression (offline) Read crossrefauthor Crossref Author: Works by author/keyword (Crossref) Read crypto Crypto Address: BTC/ETH balance & tx history Read cryptomarket Crypto Market: Global market cap, BTC dominance, 24h volume (CoinGecko) Read cryptoprice Crypto Price: Live coin price + 24h change (CoinGecko) Read ctlogsearch CT Logs (Org): crt.sh cert search by organization name Read cve CVE Lookup: CVE detail + CVSS (CIRCL, no key) Read cve_poc_checker CVE POC Check: Check if a CVE has public POC/exploit code Read cve_severity CVE Severity: CVSS + EPSS + KEV for a CVE Read cve_timeline CVE Timeline: When a CVE was discussed (Twitter/Reddit/News) Read cvedetail CVE Detail: Full CVE record (CVSS, refs) via CIRCL Read darkweb_monitor Darkweb Monitor: Darkweb monitoring: marketplaces, paste sites Read datacite DataCite Search: Research datasets/DOIs by keyword Read dblp DBLP: DBLP CS publication search Read ddg_instant DDG Instant: DuckDuckGo instant answer + related topics Read decode Decoder: Auto base64/hex/URL-decode + refang Read dehashed_domain DeHashed Domain: DeHashed public page scrape for domain breach exposure Read depsdev deps.dev: Open-source insights: versions, default Read deviantart DeviantArt Meta: Deviation title + author (oEmbed) Read devto dev.to: Forem/dev.to public profile Read dirlisting Directory Listing: Open directory-index exposure (per-target) Read disasters Disasters (GDACS): Active worldwide disasters: quakes/cyclones/floods (feeds globe) Read disposable Disposable Email: Is the email domain a disposable provider? Read disposablecheck Disposable Email: Check if email is temporary/disposable Read dns DNS Records: A/AAAA/MX/NS/TXT/CNAME/SOA/CAA records Read dnsbl DNS Blocklist: Spamhaus/Barracuda/SORBS/SpamCop check Read dnsgraph DNS Graph (HE): Hurricane Electric DNS delegation info Read dnsmx MX (DoH): MX records via Google DNS-over-HTTPS Read dnsprop DNS Propagation: Compare A records across Google/Cloudflare/Quad9 Read dnsptrrange PTR Range Sweep: Reverse-DNS every host in a /24 (offline) Read dnsquery DNS A Record: DNS A record lookup via Google DoH Read dnsrecon DNS Recon: Query ALL DNS record types at once Read dnssec DNSSEC: Is the zone signed (AD flag + DNSKEY/DS) Read dnsverify TXT Verifications: Which SaaS a domain is enrolled in (TXT tokens) Read dogeaddr DOGE Address: Dogecoin address balance & tx count Read doh DoH Records: Uncommon DNS records (HTTPS/SVCB/TLSA/SRV/NAPTR…) Read doi DOI Resolver: Crossref publication metadata for a DOI Read domainage Domain Age: Days since registration (phishing signal) Read dorks Search Dorks: Builds manual OSINT search links Read ean Barcode/EAN: EAN/UPC check digit + GS1 country prefix (offline) Read elevation Elevation: Ground elevation in metres (Open-Meteo) Read email Email Intel: Gravatar, MX, disposable detection Read email_crosssite Email Identity: Gravatar graph, disposable check, breach/paste surfaces (mosint) Read email_domain_cross Domain Emails: Subdomain surface + org email-pattern dorks for a domain Read email_registration Email Cross-Site: Which 120+ sites have an account on this email (holehe) Read emailformat Email Validator: Basic RFC 5322 email format validation Read emailrep Email Reputation: emailrep.io: malicious/spam/breach flags for email (no key, limited) Read emailsec Email Security: SPF / DMARC / DKIM posture Read emerging_threats Emerging Threats: Emerging threats: new CVEs + 0days (24h) Read emoji Emoji Lookup: Emoji ↔ Unicode name/codepoint (offline) Read ens ENS Resolve: ENS name <-> ETH address + avatar Read entropy Shannon Entropy: Per-char entropy — flags secrets/keys Read epoch Epoch Time: Unix timestamp <-> UTC datetime Read epss EPSS Score: Exploitation probability (FIRST EPSS) Read ethaddr ETH Address: Ethereum balance/tx + contract flag Read ethcontract ETH Contract: Contract check + Sourcify verified source Read exploit_cve CVE Exploits: Exploit-DB + GitHub POCs for a CVE Read favicon Favicon Hash: favicon md5/sha256 for pivoting Read fbsearch FB Search URLs (graph replacement): name [| keyword] -> ready facebook search URLs: people/posts/all/keyword-f Read fccid FCC ID: FCC equipment authorization database Read feeds RSS / Atom Feeds: Discover syndication feeds on a site Read feodo Feodo C2: abuse.ch botnet C2 blocklist (key-free) Read feodoips Feodo C2 List: Is IP on abuse.ch Feodo botnet C2 list Read flightsnear Flights Nearby: Live aircraft within ~1° of coords (OpenSky) Read fxrate FX Rates: Live exchange rates for a currency code Read gdelt GDELT News: Global news/events by keyword (last 24h) Read genderize Gender Predictor: Predict gender from a first name (genderize.io) Read geocode Geocode: Place name → coordinates (OSM Nominatim) Read geodist Geo Distance: Great-circle distance between two coord pairs (offline) Read geohash Geohash: lat,lon -> geohash (offline) Read gh_dorking GitHub Dork Search: GitHub code search for target string exposure in public repos Read gh_secret_scan GitHub Secret Scan: Scan GitHub user's public repos for leaked secrets/passwords Read ghadvisory GitHub Advisories: Security advisories for an ecosystem (pip/npm/…) Read ghcommits GitHub Commits: Recent commits for owner/repo Read ghevents GitHub Activity: Recent public GitHub events for a user (60/hr) Read ghgists GitHub Gists: Public gists for a user Read ghkeysgpg GitHub GPG Key: Whether a user publishes a GPG key Read ghlanguages Repo Languages: Language byte-breakdown for owner/repo Read ghorg GitHub Org: Public org profile Read ghpubkeys GitHub SSH Keys: A user's public SSH keys (.keys) Read ghrepo GitHub Repo: Stars/langs/license/activity (owner/repo) Read gitexposed Exposed Files: .git/.env/backup exposure (per-target) Read github GitHub Recon: Profile, repos, languages Read github_code GitHub Code Search: GitHub unauthenticated code search (10 results) Read github_trending GitHub Trending: Trending repos (optional language filter) Read githubgists GitHub Gists: A user's public gists Read githubsearch GitHub Repo Search: Search GitHub repos by keyword Read gitignore gitignore Template: GitHub .gitignore template for a language Read gitlab GitLab: Public user profile Read gleif_name GLEIF Name: GLEIF fuzzy legal-entity name → LEI codes Read golangpkg Go Module: Latest version of a Go module Read gomod Go Module: Go module latest version (module proxy) Read goproxy Go Module: Latest version of a Go module via module proxy (no key) Read gps_deep GPS Full Context: Coords/place -> address, sun times, nearby POIs, map links Read graphql GraphQL Probe: Find GraphQL endpoint + introspection (per-target) Read gravatarfull Gravatar Profile: Full public Gravatar profile + linked accounts Read greynoise GreyNoise: Is the IP a known internet scanner — benign/malicious Read hackernews Hacker News: Profile: karma, age, activity Read hackernews_front HN Front Page: Current Hacker News front-page stories Read hashid Hash Identifier: Guess hash algorithm from length/charset Read hashnode Hashnode: Blogger profile: followers, posts Read hashtext Hash Text: md5/sha1/sha256/sha512 of text (offline) Read headers HTTP / Security: Headers + security-header scorecard Read hexdump Hexdump: Offset/hex/ASCII hexdump of input (offline) Read hexpm Hex.pm: Elixir/Erlang package downloads Read hibp HIBP Password Check: Check if a password appeared in breaches via HIBP k-anonymity (no key) Read hibp_breaches HIBP Breaches: Check breach database for email/username exposure Read hibp_email HIBP Email Breaches: Email breach exposure via XposedOrNot (HIBP-compatible, no key) Read hnsearch HN Search: Search Hacker News stories/comments Read hnuser Hacker News User: HN profile: karma, created, submission count Read holidays Public Holidays: Country public holidays this year (nager.at) Read homoglyph Homoglyph: Detect confusable/mixed-script spoofing chars (offline) Read hosthunt Host Search: Forward-DNS host/subdomain map (HackerTarget) Read hostname Reverse DNS: IP → hostname via reverse DNS Read hostsearch Host Search: Forward-DNS host enumeration for a domain Read hstspreload HSTS Preload: Is the domain on the browser HSTS preload list Read htmlcomments HTML Comments: Extract HTML comments — leaked TODOs/paths/software Read htmlencode HTML Encode/Decode: HTML entity encode/decode Read httpcode HTTP Status Code: HTTP status code meaning & family (offline) Read httping HTTP Ping: Reachability + response timing Read httpmethods HTTP Methods: Allowed methods + TRACE/risky-verb check Read httpstatus HTTP Status: Explain an HTTP status code (offline) Read hudsonrock HudsonRock Stealer: Stealer-log exposure check via HudsonRock Cavalier free API Read huggingface HuggingFace: HuggingFace user profile or model card Read hunter_count Hunter: Email Count: How many emails findable for a domain (free) Read hunter_domain Hunter: Domain Emails: All findable emails for a domain + names/positions/confidence Read hunter_find Hunter: Find Email: name + domain -> most likely email (usage: first last domain) Read hunter_verify Hunter: Verify Email: Deliverability verdict: valid/invalid/accept_all + score Read iban IBAN Validate: ISO 13616 checksum + country/length (offline) Read imagechunks PNG Chunks: Hidden tEXt/zTXt/iTXt chunks in PNG (steganography) Read imagecolors Image Palette: Dominant color palette extraction Read imageexif Image EXIF: Full EXIF: camera, lens, timestamps, software Read imagegps Image GPS: GPS coordinates from EXIF → map links (feeds globe) Read imagehash Image Hash: Perceptual aHash + sha256/md5 for dupe matching Read imageicc ICC Profile: Color profile name — fingerprints editing software Read imagelsb LSB Steg Detect: Statistical LSB analysis — detects possible hidden payload Read imagemeta Image Metadata: Dimensions, format, mode, size, megapixels Read imagephash Image pHash/dHash: dHash + pHash for robust near-duplicate detection Read imagerev Reverse Image: Google Lens / Yandex / Bing / TinEye search links Read imagethumb EXIF Thumbnail: Extract embedded thumbnail — often retains GPS after stripping Read imei IMEI Check: Validate IMEI (Luhn) + split TAC/serial (offline) Read infra_fingerprint Infra Fingerprint: Infrastructure fingerprinting + hosting Read intelx_email XposedOrNot Breach: Email breach exposure — breach names, data types, paste hits (XposedOrNot, no key) Read internetdb Shodan InternetDB: Open ports, CPEs, tags, known CVEs for a host Read ioc_reputation IOC Reputation: Cross-check IP/domain/hash across feeds Read ip_deep IP Deep Intel: Geo + ASN + VPN/proxy/Tor risk + open ports/vulns + reverse DNS Read ip_math IP Math: CIDR: network/broadcast/range/host count (offline) Read ipfull IP Full Profile: Rich geo+ASN+proxy/mobile/hosting flags Read ipgeo IP Geolocation: Geo, ISP, ASN, proxy/hosting flags Read ipint IP ↔ Integer: IPv4 ↔ integer ↔ hex (offline) Read ipv4classify IP Classify: Classify IP: private/loopback/multicast/global (offline) Read ipv6 IPv6 Validator: IPv6 parser, expander, classifier Read ipwhois IP WHOIS / RDAP: Network owner, range, abuse contact Read isbn ISBN Book: Book metadata (OpenLibrary) + checksum Read isbnmeta ISBN Metadata: Book title/authors/subjects (OpenLibrary) Read isexitnode Tor Exit Check: Is this a Tor exit node? Read isin ISIN Validate: Validate ISIN security identifier check digit (offline) Read isotime Timestamp Convert: Parse/convert a timestamp (offline) Read iss ISS Position: Live International Space Station lat/lon Read jarm JARM / InternetDB: Shodan InternetDB: ports, CPEs, vulns, tags (no key) Read jslibs JS Libraries: Enumerate <script> sources + detect JS libs/versions Read jsonfmt JSON Format: Validate, pretty-print & stat JSON (offline) Read jwt JWT Decoder: Header + claims (no signature verify) Read jwtdecode JWT Decode: Decode JWT header+payload (offline, unverified) Read kev CISA KEV: Is the CVE actively exploited (KEV catalog) Read keybase Keybase: Crypto identity + linked social proofs Read latlonformat Lat/Lon Format: DD ↔ DMS ↔ DM coordinate format conversion (offline) Read leakcheck LeakCheck: Breach exposure via leakcheck.io public endpoint (no key) Read leaklookup Hudson Rock Stealers: Infostealer compromise check — stealer logs, credential count (Hudson Rock, no key) Read leet Leetspeak: Leetspeak transform (offline) Read leetcode_user LeetCode: LeetCode solved problems, ranking, badges Read lei LEI Lookup: GLEIF legal-entity record by LEI code Read links Link Extractor: All links + external domains + emails on a page Read linktree Linktree: Extract destination links from a linktr.ee profile Read lobsters Lobste.rs: Public user profile + karma Read ltcaddr LTC Address: Litecoin address balance & tx count Read luhn Luhn Check: Validate card/IMEI Luhn checksum (offline) Read mac MAC Vendor: OUI → hardware vendor Read macvalid MAC Validator: MAC address parser (colon/dash/plain) Read macvendor MAC Vendor (OUI): MAC vendor + local/multicast bits from local OUI table (offline) Read macvendorlookup MAC Vendor: OUI → hardware vendor (macvendors.com) Read maidenhead Maidenhead Grid: Coords → ham-radio grid locator (offline) Read malware_family Malware Family: Variants, IOCs, AV detections Read manifest PWA Manifest: Web app manifest: name, icons, theme Read marineweather Marine Weather: Wave height/period/direction + sea temp at coords Read mastodon Mastodon: Resolve user@instance via WebFinger Read maven Maven Central: Java artifact: 'group:artifact' or name Read medium Medium: Author feed: recent post titles Read metatags Meta Tags: OpenGraph / Twitter-card / generator meta tags Read mgrs MGRS Grid: Lat/lon → MGRS military grid reference (offline) Read mimetype MIME Type: File extension → MIME type (offline) Read mitre_technique MITRE Technique: ATT&CK technique → tactics + detection Read moonphase Moon Phase: Current moon phase & illumination (offline) Read morse Morse Code: Morse encode/decode, autodetecting direction (offline) Read mtasts MTA-STS: Inbound-mail TLS enforcement policy Read musicbrainz MusicBrainz: Artist search: type, country, MBID Read musicbrainzartist MusicBrainz Artist: Artist type, country, lifespan Read nationalize Nationality: Predict nationality from a name (nationalize.io) Read nato NATO Phonetic: Spell text in NATO phonetic alphabet (offline) Read nearbywiki Nearby Places: Wikipedia places near a coordinate Read npm npm Author: Packages published by an author Read npmdl npm Downloads: npm download counts day/week/month Read npmdownloads npm Downloads: npm package download counts, last week + month (no key) Read npmorg npm Org: npm organization: all published packages Read npmpkg npm Package: npm package version, deps, maintainers Read nstrace NS Delegation: Trace NS delegation: TLD → registrar → authoritative Read nuget NuGet: .NET package stats + downloads Read numlookup Number Lookup: Validity, region, carrier, line type, timezones (libphonenumber) Read numwords Number to Words: Integer → English words (offline) Read nvdcve NVD CVE Detail: Full NVD record: CVSS, CWE, references Read onthisday On This Day: Historical events on a date (Wikipedia; MM/DD or today) Read openalexauthor OpenAlex Author: Author works count, h-index, institution Read openalexwork OpenAlex Work: Scholarly work: citations, concepts, OA Read opencorp OpenCorporates: Company registrations worldwide search Read openfoodfacts Product Barcode: EAN/UPC -> product, brand, nutrition Read openphish OpenPhish: Community phishing-URL feed membership Read orcid ORCID: Researcher record (0000-000X-…) Read orcidworks ORCID Works: Recent publications for an ORCID iD Read orgname Company → LEI: Fuzzy company-name search → candidate LEIs Read osv OSV Vulns: Known package vulns (OSV.dev). 'eco:name' Read otxdomain OTX Domain Rep: AlienVault OTX threat pulses for a domain Read otxip OTX IP Rep: AlienVault OTX threat pulses for an IP Read packagist Packagist: PHP/Composer package stats (vendor/pkg) Read pageinfo Common Crawl Page: Common Crawl capture index lookup Read passentropy Password Entropy: Estimate entropy & offline crack time (offline) Read passgen Password Gen: Generate strong random passwords + passphrase (offline) Read password_dumps Password Dump Search: Search Dehashed for leaked passwords (query-only) Read passwordcheck Password Pwned: HIBP k-anonymity breach check (safe) Read paste_domain Paste Domain Search: Find domain in public pastes via psbdmp.ws (no key) Read paste_email Paste Email Search: Find email in public pastes via Wayback CDX + search links (no key) Read peeringdb PeeringDB: Network type, traffic, IX/facility presence Read peeringnet PeeringDB Net: Peering policy / traffic / IX presence for ASN Read peers ASN Peers: Upstream/downstream BGP neighbours Read permissions_pol Permissions Policy: Permissions-Policy: camera/mic/geo controls Read person_identity Person Identity: Name -> gender/age/nationality probs + Wikipedia/Wikidata + dorks Read person_sweep Person-focused sweep: checks ~30 username/email/social presence tools for one name/handle and returns where it Read pgp PGP Key: Public key published on keys.openpgp.org Read phishing_intel Phishing Intel: Phishing kit tracking + URL detection Read phone Phone Number: E.164 country/region (offline) Read phone_deep Phone Deep-Dive: Validity, carrier, region + WhatsApp/Telegram/Signal pivots, caller-ID surfaces Read phone_leak Phone Leak Check: Phone in breaches/pastes via LeakCheck + dork pack Read phoneapps Messaging Links: WhatsApp / Telegram / Viber / Signal deep links Read phonecc Calling Code: Country, trunk & intl dialing prefixes (offline) Read phonefmt Phone Format: E.164 / national / international / RFC3966 formats (offline) Read phonenanp NANP Area Code: +1 number → US/Canada region (offline subset) Read phonepivot Phone Lookups: Caller-ID / reputation site links (Truecaller, Sync.me…) Read phonespam Spam Reports: Robocall / scam report-database links Read phonevcard vCard: Generate a .vcf contact card (offline) Read pluscode Plus Code: Coords → Open Location Code / Google Plus Code (offline) Read port Port Reference: Service + exposure notes for a port number Read portlookup Port Lookup: IANA port → service name (offline) Read portquick Port Check: Quick TCP port scan (2s timeout) Read portscan Port Scan: TCP connect scan: common + camera ports Read pubmed PubMed: PubMed biomedical paper search (NCBI) Read punycode Punycode/IDN: IDN domain ↔ Punycode (xn--) homograph check (offline) Read pwstrength Password Strength: Offline entropy/strength estimate Read pypi PyPI Package: Python package metadata + links Read pypiproject PyPI Project: PyPI version/license/links Read pypistats PyPI Downloads: PyPI recent download counts Read qrcode QR Code: Generate a QR code for text/URL Read quakes Earthquakes: USGS recent quakes — global or near coords (M2.5+) Read quoted_printable Quoted-Printable: Quoted-printable encode/decode Read railfence Rail Fence: Rail-fence cipher over 3 rails (offline) Read random_fact Random Fact: Random trivia fact Read randomuser Random Identity: Synthetic identity for sockpuppet hygiene (randomuser.me) Read ransomware_tracker Ransomware Groups: Ransomware gang profiles + recent hits Read rdap RDAP Registration: Structured domain registration record (RDAP/IANA bootstrap, no key) Read rdap_domain RDAP Domain: RDAP structured domain registration data Read rdapip RDAP IP: Authoritative RDAP record for an IP Read reddit_sub Reddit Subreddit: Subreddit: subscribers, active users, description Read reddit_user Reddit User: Reddit user: karma, age, verified status Read redirects Redirect Tracer: Full HTTP redirect chain Read referrer_pol Referrer Policy: Referrer-Policy header — URL leakage risk Read regdomain Registered Domain: Extract eTLD+1 registered domain from URL (offline) Read restcountry Country Detail: Capital/region/income by name or ISO (World Bank) Read reversedns Reverse DNS: PTR record / hostname Read reverseip Reverse IP: Other domains sharing the host Read revgeo Reverse Geocode: lat,lon -> address (OSM Nominatim) Read revgeocode Reverse Geocode: Coordinates → nearest address (OSM) Read revimg Reverse Image: Reverse-image-search links (Lens/Yandex/TinEye/Bing) Read ripewhois RIPE Network Info: Covering prefix + origin ASN (RIPEstat) Read robots robots.txt: Disallowed paths + sitemaps Read robotsmeta Robots Meta: meta-robots + X-Robots-Tag: noindex/nofollow/noarchive Read robotstxt_history robots.txt History: Historical robots.txt snapshots from Wayback Machine Read roman Roman Numerals: Convert int <-> roman numeral, autodetecting (offline) Read rot13 ROT-13 Cipher: ROT-13 encode/decode Read rot47 ROT47: ROT47 ASCII cipher (offline, self-inverse) Read rpki RPKI / ROA: Route-origin validation for the covering prefix Read rubygemrev Gem Rev-Deps: Reverse dependencies of a RubyGem Read rubygems RubyGems: Ruby gem stats + downloads Read s3buckets Cloud Buckets: S3/GCS/Azure buckets named for the domain Read sec_edgar SEC EDGAR: Company name + recent SEC filings by ticker/CIK Read securitytxt security.txt: RFC 9116 disclosure policy & contacts Read semanticscholar Semantic Scholar: Paper TLDR, citations, influence Read semver Semantic Version: Parse and validate semantic versioning Read sha256lookup SHA-256 Reverse: Crack SHA-256 via online DB Read sitemap Sitemap: Fetch sitemap.xml + list URLs Read slug Slugify: Text → URL-safe slug (offline) Read smtpbanner SMTP Banner: SMTP banner & EHLO capabilities (ports 25/587/465) Read snowflake Snowflake ID: Decode Twitter/Discord snowflake → timestamp (offline) Read snusbase_hash Hash Reverse (Leaks): Reverse MD5/SHA1 hash via breach-sourced hash DB (md5decrypt.net) Read social Social Links: Direct profile URLs across 20 platforms Read soladdr SOL Account: Solana account balance & owner program Read sopostuser StackOverflow User: SO profile + reputation by numeric id Read soundcloud SoundCloud Meta: Track/user title + author (oEmbed) Read spacepeople People in Space: Who is in space right now (names + craft) Read spaceweather Space Weather: Planetary Kp index + geomagnetic storm/aurora (NOAA) Read spamhauslookup Spamhaus IP Check: Spam/phishing IP blacklist check Read spdxlicense SPDX License: SPDX license id → name + OSI status Read sri_check SRI Check: Subresource Integrity: external scripts without integrity= Read srvlookup SRV Records: SIP/XMPP/mail/CalDAV SRV record discovery Read ssh SSH Banner: Per-target SSH server banner / version Read ssn_check SSN/Identity Leak: Check if SSN/DOB appears in identity theft databases Read stackoverflow Stack Overflow: SO/SE user search by display name Read steam_user Steam Profile: Steam community profile via public XML Read stringmetrics String Metrics: Length, entropy, character breakdown Read subbrute Subdomain Brute: Resolve a common-subdomain wordlist (per-target) Read subdomains Subdomains: Certificate-transparency subdomain discovery Read suntimes Sun Times: Sunrise/sunset/twilight for a coordinate (UTC) Read supply_chain_risk Supply Chain Risk: Dependency vulns + typosquatting Read swagger Swagger / OpenAPI: Exposed API docs at common paths (per-target) Read swiftbic SWIFT/BIC: Parse SWIFT/BIC: bank/country/branch (offline) Read takeover Subdomain Takeover: Dangling-CNAME takeover fingerprint check Read teamcymru Team Cymru ASN: IP → ASN via Team Cymru DNS (fastest ASN lookup) Read tech Tech Fingerprint: CMS/framework/server detection Read telegram_channel Telegram Channel: Public channel preview: subscribers, description Read tempconv Temperature: Convert °C / °F / K (offline) Read tempmail Temp Email: Generate/read a disposable email inbox (1secmail) Read threat_actor Threat Actor: Known campaigns, techniques, tools Read threat_pattern Threat Pattern: Find threat patterns across incidents Read threatcrowd Passive DNS: OTX passive DNS resolution history Read tiktok TikTok Profile: TikTok user stats (best-effort, keyless) Read timezone_info Timezone Info: Timezone UTC offset & current time (offline, IANA names) Read tldinfo TLD Info: TLD registry operator, type, purpose (offline) Read tls TLS Certificate: Live cert: issuer, validity, SANs, cipher Read tlsa DANE / TLSA: Certificate-pinning DANE records on :443 Read tlsscan TLS Versions: Which SSL/TLS protocols the host accepts Read tor Tor Exit Check: Is the IP a known Tor exit node Read trendingwiki Trending Wikipedia: Most-read Wikipedia articles today Read trufflehog_url Secret Pattern Scan: Scan raw URL content for API keys, tokens, private keys, JWTs Read txhash Crypto Tx: BTC/ETH transaction detail (blockchair) Read typosquat Typosquat Finder: Look-alike domains that currently resolve Read ulid ULID Decode: Decode a ULID's embedded timestamp (offline) Read unicode_lookup Unicode Lookup: Unicode codepoint: name, category, HTML entity (offline) Read unixperm Unix Permissions: Octal permission (755/644) → rwx breakdown (offline) Read unpaywall Unpaywall: Is a DOI open-access? Direct PDF link Read urban Urban Dictionary: Slang/term definitions + examples Read urlparse URL Parse: Parse URL into components + query params Read urlscan urlscan.io: Past scans, verdicts, infra (IP/ASN/server) for a site Read urlscansearch urlscan Archive: Public urlscan.io scan history for a domain Read useragent UA Parser: Parse a User-Agent into OS/browser (offline) Read username Username Hunter: Presence across 16 public sites Read username_dossier Username Dossier: 250-site profile dossier via Maigret with extracted names/emails/phones Read utm UTM Coords: Lat/lon → UTM coordinates (WGS84, offline) Read uuencode UUencode: Unix-to-Unix encoding Read uuid UUID Parser: Version/variant + v1 timestamp/MAC (offline) Read uuid_validate UUID Validator: UUID v1-v5 version and variant detector Read vatid EU VAT: Validate EU VAT number country format (offline) Read vigenere Vigenere Cipher: Vigenere encrypt/decrypt: 'KEY:text[:d]' (offline) Read vimeo Vimeo Meta: Video title, author, thumbnail (oEmbed) Read vin VIN Decoder: NHTSA vPIC vehicle decode (make/model/plant) Read vuln_feed Vuln Feed: Real-time vuln feeds (NVD, Exploit-DB, PacketStorm) Read waf WAF / CDN: Detect WAF/CDN from headers & cookies Read wayback Wayback Machine: Archive.org snapshot history Read wayback_leaks Wayback Leak Scan: Search Wayback Machine for historically exposed .env/config/secrets Read weather Weather: Current weather at a coordinate (Open-Meteo) Read weatheralerts Weather Alerts: Active US NWS weather alerts near coords Read webfinger WebFinger: WebFinger resource discovery (ActivityPub/OIDC) Read wellknown .well-known Scan: Which /.well-known/ resources exist Read whatsnearby Nearby POIs: OSM amenities within 500m of coords (Overpass) Read whois WHOIS / RDAP: Registration, status, nameservers, DNSSEC Read whois_check WHOIS Check: Domain WHOIS record existence via who.is Read whoisserver WHOIS Server: TLD → WHOIS server mapping (offline + IANA fallback) Read wikidata Wikidata Search: Search Wikidata entities by label (no key) Read wikidatasearch Wikidata Search: Free-text → Wikidata entities Read wikipedia Wikipedia Summary: Wikipedia REST summary: extract, type, coords (no key) Read wikisummary Wikipedia Summary: Page extract/description for a topic Read wordcount Word Count: Text stats: words/chars/lines/reading time (offline) Read workup WORKUP: Full Person Dossier: first+last -> username variants x 16 platforms, name stats, dork surfaces, wiki ( Read wpscan WordPress Scan: WP version + author enum via REST (per-target) Read xrpaddr XRP Account: XRP Ledger account balance & sequence Read youtube YouTube Meta: Video/channel title, author, thumbnail (oEmbed) Read zenodo Zenodo: Zenodo open-research records search Read zerodday_timeline Zero-Day Timeline: 0day mentions across researchers + CVE Read zonetransfer Zone Transfer: AXFR attempt — is zone transfer misconfigured?

Related servers

Other MCP servers with similar tools — same risk classification, starter policies for each.

Questions about Osint Terminal

How do I prevent bulk modifications through Osint Terminal? +

The Osint Terminal server has 9 write tools including base_convert, datauri, dockerhub. Set a rate limit in your policy -- for example, 10 calls per hour prevents an agent from making more than 10 modifications per hour. PolicyLayer enforces this at the gateway, before calls reach Osint Terminal.

How many tools does the Osint Terminal MCP server expose? +

474 tools across 3 categories: Execute, Read, Write. 461 are read-only. 13 can modify, create, or delete data.

How do I enforce a policy on Osint Terminal? +

Register the Osint Terminal MCP server in PolicyLayer, apply the suggested rules above (adjust the limits to your use case), and point your AI client at the PolicyLayer proxy URL instead of the server directly. Your agents keep the same tools; PolicyLayer evaluates every call against policy before it executes. Nothing to install, live in minutes.

Enforce policy on every Osint Terminal tool call.

Deterministic rules across all 474 Osint Terminal tools. Per-identity grants. Full audit log. Live in minutes. Nothing to install.

Instant setup, no code required.

474 Osint Terminal tools catalogued and risk-classified — across an index of 46,500+ MCP servers.

// WHERE THIS COMES FROM

These policies come from Osint Terminal's registry record.

The record behind this page: verified identity, auth posture, risk grade, every tool classified, recommended policy — re-checked continuously.

Teams ship this data inside their own products. See what a licence covers →

// GET IN TOUCH

Have a question or want to learn more? Send us a message.

Message sent.

We'll get back to you soon.