← MCP catalog#020 · OSINT — Technical Infrastructure
OSINT-MCP-Server (badchars)
37 tools across 12 aggregated sources
Aggregated alternative to running 8 separate MCPs. Bundles Shodan, VirusTotal, Censys, SecurityTrails, crt.sh, Wayback Machine, GeoIP, and more under one MCP namespace.
Cost
Free · no API key
API key
Some integrations
Slug
osint-mcp-badchars
MCP.md
---
name: osint-mcp-badchars
category: osint-technical-infrastructure
cost: free
api_key_required: partial
repo: https://github.com/badchars/osint-mcp-server
paired_skills: ["domain-and-whois-research", "ip-and-asn-attribution", "ssl-certificate-pivoting", "dns-history-and-passive-dns", "cdn-and-origin-discovery", "shodan-investigative-queries", "censys-investigative-queries", "crt-sh-and-certificate-transparency-pivoting"]
capabilities: ["internet-scan", "dns-whois", "threat-intel", "aggregated-osint"]
---
# OSINT-MCP-Server (badchars) — 37 tools across 12 aggregated sources
Aggregated alternative to running 8 separate MCPs. Bundles Shodan, VirusTotal, Censys, SecurityTrails, crt.sh, Wayback Machine, GeoIP, and more under one MCP namespace.
## Install
```
git clone https://github.com/badchars/osint-mcp-server
docker compose up
```
Requires Docker. Each integrated source still needs its own API key, but the server manages them all in one place.
## Configuration
```json
{
"mcpServers": {
"osint": {
"command": "docker",
"args": ["exec", "-i", "osint-mcp-server", "python", "-m", "osint_mcp"]
}
}
}
```
See the repo's README for the full Docker Compose configuration with per-source environment variables.
## What it adds
Single MCP that covers the breadth of 015 (Shodan), 016 (Censys), 014 (domain), 009 (Wayback), and crt.sh in one namespace. Best for investigators who want maximum coverage with minimal MCP configuration. If you're already running the individual MCPs, skip this one to avoid duplicate tool names.
## Pairs with skills
- 041 `domain-and-whois-research`
- 042 `ip-and-asn-attribution`
- 043 `ssl-certificate-pivoting`
- 044 `dns-history-and-passive-dns`
- 045 `cdn-and-origin-discovery`
- 383 `shodan-investigative-queries`
- 384 `censys-investigative-queries`
- 442 `crt-sh-and-certificate-transparency-pivoting`
## Cost
Server is free and open-source. Per-source API keys required — most have free tiers (Shodan, VirusTotal, Censys, SecurityTrails).Pairs with skills
- #041domain-and-whois-research
- #042ip-and-asn-attribution
- #043ssl-certificate-pivoting
- #044dns-history-and-passive-dns
- #045cdn-and-origin-discovery
- #383shodan-investigative-queries
- #384censys-investigative-queries
- #442crt-sh-and-certificate-transparency-pivoting
This MCP gives your agent the tools to execute the workflow described by these skills — instead of just describing it.
Bundled in the Toolkit
This MCP is one of 36 pre-configured servers in the Investigator's MCP Toolkit. One-command installer, $149 one-time.
Pricing