Alternatives to Robin: AI-Powered Dark Web OSINT
Robin: AI-Powered Dark Web OSINT is a MCP server by apurvsinghgautam: Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model. If it doesn't fit your setup, these 12 MCP servers cover similar ground. They are ordered by how closely they match Robin: AI-Powered Dark Web OSINT and by our rank, which weighs adoption, freshness and documentation; money never changes the order. Shodan leads the list (most GitHub stars here (178); active in the last 30 days). 2 of them are published by the company behind the product. 5 offer a remote endpoint, so there is nothing to install locally. Each entry shows data reasons to switch, and you can open a side-by-side comparison with Robin: AI-Powered Dark Web OSINT.
Updated Oct 26, 2026 · Built from catalog data; how we rank and grade
You're replacing
Robin: AI-Powered Dark Web OSINT
Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.
12 alternatives
Ordered by how closely each matches Robin: AI-Powered Dark Web OSINT (shared product, category or stated alternative) and by rank.
- 1Shodan
w0h1v
MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.
- Most GitHub stars here (178)
- Active in the last 30 days
★ 178↓ 313/wkLast active Oct 12, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 2Virustotal
w0h1v
MCP server for querying VirusTotal API with comprehensive security analysis tools.
- Most weekly downloads here (333)
- Active in the last 30 days
★ 151↓ 333/wkLast active Oct 20, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 3OSINT Toolbox
renkagod
Run Sherlock, Maigret, Holehe, GHunt, theHarvester, SpiderFoot and more OSINT tools locally
- Active in the last 30 days
- Open source (MIT)
★ 2↓ 100/wkLast active Oct 23, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 4Osint Agent Skills
frangelbarrera
OSINT MCP server — 23 tools: DNS, WHOIS, Shodan, breaches, GEOINT, crypto.
- Active in the last 30 days
- Open source (MIT)
★ 38↓ 24/wkLast active Oct 2, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 5isMalicious threat intelligence for AI agents
ismalicious.comOfficial
Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans
- Remote server, no local install
- Published by the vendor
↓ 248/wkLast active Oct 23, 2026Local (stdio), Remote (HTTP)Claude Code, VS Code, Codex, Cursor +2
AFreshness: A–Security: not graded yet - 6Mitre Attack MCP Server
imouiche
MCP server providing 50+ tools for MITRE ATT&CK techniques, groups, and mitigations
- Active in the last 30 days
- Open source (Apache-2.0)
★ 5↓ 39/wkLast active Oct 23, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 7OSINT
robyroro
Domain and website investigations: batch recon, shared infrastructure, CT history and public lookups
- Active in the last 30 days
- Open source (MIT)
↓ 71/wkLast active Oct 5, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 8Truss Threat Intelligence
truss-security.com
Query Truss threat intelligence via hosted MCP (OAuth).
- Remote server, no local install
Last active Oct 16, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf
AFreshness: A–Security: not graded yet - 9PG1 Sovereign Threat Intelligence
Project-Gifted1
Preflight for AI agents, signed: one call; wallet, domain, IP abuse, package checks and CVEs.
- Remote server, no local install
Last active Oct 24, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf
AFreshness: A–Security: not graded yet - 10BeVigil OSINT
santhosh-005
Discover mobile app attack surfaces via BeVigil OSINT — hosts, subdomains, URLs, and more.
- Open source (MIT)
★ 1Last active Aug 24, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
BFreshness: B–Security: not graded yet - 11Dragons Eye Ransomware Claims
api.ransomware-tracker.com
Ransomware claim lookups, IOC and CVE intel, group intel, bulk checks and watch alerts (x402 USDC).
- Remote server, no local install
Last active Oct 17, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf
AFreshness: A–Security: not graded yet - 12osint.foundation
osint.foundationOfficial
OSINT lookups: usernames, social profiles, phones, domains, IPs, crypto wallets and companies.
- Remote server, no local install
- Published by the vendor
Last active Oct 25, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf
AFreshness: A–Security: not graded yet