Skip to content
OSINT Tradecraft
OSINT Tradecraft
Investigation skills · Vol. 8
← MCP catalog#020 · OSINT — Technical Infrastructure

OSINT-MCP-Server (badchars)

37 tools across 12 aggregated sources

Aggregated alternative to running 8 separate MCPs. Bundles Shodan, VirusTotal, Censys, SecurityTrails, crt.sh, Wayback Machine, GeoIP, and more under one MCP namespace.

Cost
Free · no API key
API key
Some integrations
Slug
osint-mcp-badchars
MCP.md
---
name: osint-mcp-badchars
category: osint-technical-infrastructure
cost: free
api_key_required: partial
repo: https://github.com/badchars/osint-mcp-server
paired_skills: ["domain-and-whois-research", "ip-and-asn-attribution", "ssl-certificate-pivoting", "dns-history-and-passive-dns", "cdn-and-origin-discovery", "shodan-investigative-queries", "censys-investigative-queries", "crt-sh-and-certificate-transparency-pivoting"]
capabilities: ["internet-scan", "dns-whois", "threat-intel", "aggregated-osint"]
---

# OSINT-MCP-Server (badchars) — 37 tools across 12 aggregated sources

Aggregated alternative to running 8 separate MCPs. Bundles Shodan, VirusTotal, Censys, SecurityTrails, crt.sh, Wayback Machine, GeoIP, and more under one MCP namespace.

## Install

```
git clone https://github.com/badchars/osint-mcp-server
docker compose up
```

Requires Docker. Each integrated source still needs its own API key, but the server manages them all in one place.

## Configuration

```json
{
  "mcpServers": {
    "osint": {
      "command": "docker",
      "args": ["exec", "-i", "osint-mcp-server", "python", "-m", "osint_mcp"]
    }
  }
}
```

See the repo's README for the full Docker Compose configuration with per-source environment variables.

## What it adds

Single MCP that covers the breadth of 015 (Shodan), 016 (Censys), 014 (domain), 009 (Wayback), and crt.sh in one namespace. Best for investigators who want maximum coverage with minimal MCP configuration. If you're already running the individual MCPs, skip this one to avoid duplicate tool names.

## Pairs with skills

- 041 `domain-and-whois-research`
- 042 `ip-and-asn-attribution`
- 043 `ssl-certificate-pivoting`
- 044 `dns-history-and-passive-dns`
- 045 `cdn-and-origin-discovery`
- 383 `shodan-investigative-queries`
- 384 `censys-investigative-queries`
- 442 `crt-sh-and-certificate-transparency-pivoting`

## Cost

Server is free and open-source. Per-source API keys required — most have free tiers (Shodan, VirusTotal, Censys, SecurityTrails).
Pairs with skills
  • #041domain-and-whois-research
  • #042ip-and-asn-attribution
  • #043ssl-certificate-pivoting
  • #044dns-history-and-passive-dns
  • #045cdn-and-origin-discovery
  • #383shodan-investigative-queries
  • #384censys-investigative-queries
  • #442crt-sh-and-certificate-transparency-pivoting

This MCP gives your agent the tools to execute the workflow described by these skills — instead of just describing it.

Bundled in the Toolkit

This MCP is one of 36 pre-configured servers in the Investigator's MCP Toolkit. One-command installer, $149 one-time.

Pricing
Back to MCP catalog
OSINT-MCP-Server (badchars) — 37 tools across 12 aggregated sources — MCP server · OSINT Tradecraft