Alternatives to OpenOSINT
OpenOSINT is a MCP server by OpenOSINT: AI-powered OSINT agent & MCP server. If it doesn't fit your setup, these 12 MCP servers cover similar ground. They are ordered by how closely they match OpenOSINT and by our rank, which weighs adoption, freshness and documentation; money never changes the order. OneUptime leads the list (remote server, no local install; published by the vendor). 2 of them are published by the company behind the product. 2 offer a remote endpoint, so there is nothing to install locally. Each entry shows data reasons to switch, and you can open a side-by-side comparison with OpenOSINT.
Updated Oct 26, 2026 · Built from catalog data; how we rank and grade
You're replacing
OpenOSINT
AI-powered OSINT agent & MCP server.
12 alternatives
Ordered by how closely each matches OpenOSINT (shared product, category or stated alternative) and by rank.
- 1
OneUptimeoneuptime.comOfficial
Manage incidents, alerts, monitors, status pages, on-call and telemetry in OneUptime.
- Remote server, no local install
- Published by the vendor
- More GitHub stars (7.8K)
★ 7.8KLast active Oct 26, 2026Remote (HTTP)Claude Code, VS Code, Cursor, Windsurf
AFreshness: A–Security: not graded yet - 2Robin: AI-Powered Dark Web OSINT
apurvsinghgautam
Dark web OSINT over Tor: search onion engines, scrape pages, report with your own model.
- More GitHub stars (7.7K)
★ 7.7KLast active Oct 3, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 3Reversecore MCP
sjkim1127
Security-first MCP server for reverse engineering, malware analysis, forensics, and SAST.
- Active in the last 30 days
- Open source (MIT)
★ 212↓ 170/wkLast active Oct 17, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 4Shodan
w0h1v
MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.
- Active in the last 30 days
- Open source (MIT)
★ 178↓ 313/wkLast active Oct 12, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 5Virustotal
w0h1v
MCP server for querying VirusTotal API with comprehensive security analysis tools.
- Most weekly downloads here (333)
- Active in the last 30 days
★ 151↓ 333/wkLast active Oct 20, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 6Cyberbro MCP Server
stanfrbd
MCP server for Cyberbro IOC extraction, enrichment and reputation analysis.
- Active in the last 30 days
- Open source (MIT)
★ 19↓ 142/wkLast active Oct 18, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 7Supply Chain Guard
homeofe
Supply-chain malware scanner and MCP server: vet packages in 15 ecosystems before install, offline.
- Active in the last 30 days
- Open source (Apache-2.0)
★ 7Last active Oct 24, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 8OSINT Toolbox
renkagod
Run Sherlock, Maigret, Holehe, GHunt, theHarvester, SpiderFoot and more OSINT tools locally
- Active in the last 30 days
- Open source (MIT)
★ 2↓ 100/wkLast active Oct 23, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 9DugganUSA CLI — Local STDIO MCP
pduggusa
Local STDIO MCP for DugganUSA threat intel.
- Active in the last 30 days
- Open source (MIT)
★ 2Last active Oct 23, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 10Osint Agent Skills
frangelbarrera
OSINT MCP server — 23 tools: DNS, WHOIS, Shodan, breaches, GEOINT, crypto.
- Active in the last 30 days
- Open source (MIT)
★ 38↓ 24/wkLast active Oct 2, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet - 11isMalicious threat intelligence for AI agents
ismalicious.comOfficial
Reputation for IPs, domains, URLs, hashes, emails, phones; CVEs; injection and email scans
- Remote server, no local install
- Published by the vendor
↓ 248/wkLast active Oct 23, 2026Local (stdio), Remote (HTTP)Claude Code, VS Code, Codex, Cursor +2
AFreshness: A–Security: not graded yet - 12Flagrix
flagrix-io
Scan GitHub repos and profiles for malware before cloning — commit-pinned risk verdicts for agents
- Active in the last 30 days
- Open source (MIT)
★ 2Last active Oct 21, 2026Local (stdio)Claude Code, Codex, VS Code, Cursor +2
AFreshness: A–Security: not graded yet