NewThe useOSINT MCP server is live: connect any agent in one line
// Real-time OSINT for AI

Tell your agent
to useOSINT.

One command gives an autonomous agent a real-time line into the open web, resolving the person behind a phone number, email, or username across thousands of sources.

Request Access
SOCIAL MEDIA · MESSENGERSBREACHES · PUBLIC RECORDS
10 platforms2,317 signals~10 per sec

useOSINT resolves identity at machine speed. Hand an agent a single selector and it sweeps thousands of live sources, links the accounts back to one person, and returns structured, source-cited intelligence, in the moment a decision is made.

// The platform

An intelligence engine built for agents, not analysts

useOSINT collapses the open-source intelligence workflow (collection, correlation, and enrichment) into one programmable interface a model can call inside its reasoning loop.

// Resolution01

Resolution

Give it one selector (a phone, email, or handle) and it returns every account, profile, and breach record tied to it.

// Correlation02

Correlation

Scattered accounts are linked into a single entity by avatar hash, reused handle, recovery hint, and writing style.

// Presence03

Presence

See where a person operates: the forums, channels, and communities they post in, and how often they appear.

// Throughput04

Throughput

A distributed fetch layer runs sources in parallel with rotating egress. A full sweep resolves in seconds.

// Provenance05

Provenance

Every finding carries its source, retrieval time, and confidence. Every query is logged for chain of custody.

// Coverage06

Coverage

Social platforms, forums, breach indexes, gravatars, paste sites, messaging directories, and public records.

// Coverage

useOSINT any identifier

One input is enough. The agent takes a single selector and expands it into a complete picture: the accounts, the network around them, and the places they show up.

Phone+1 415 ··· ····
Emailname@domain.com
Username@handle
Full namefirst last
Domainexample.com
Imageavatar / face hash
  • Thousands of live sources, queried in parallel, every result timestamped.
  • Structured output: normalized JSON with entities, edges, sources, and confidence your model can reason over.
useosint resolve · result.json
{
  "entity": {
    "name": "J. Okonkwo",
    "confidence": 0.94,
    "accounts": [
      { "site": "github", "handle": "@nightjar" },
      { "site": "telegram", "handle": "@nj_dev" }
    ],
    "hangouts": ["r/netsec", "hn"],
    "last_seen": "2026-06-19T08:14Z"
  }
}
// How it works

From identifier to intelligence in one call

01

Submit a selector

Send one identifier through the CLI, the API, or an MCP tool call inside your agent loop.

02

Sweep the source graph

The fetch layer hits thousands of live sources in parallel, then correlates the hits into entities and edges.

03

Reason over the result

Structured, source-cited intelligence returns to your model, ready to drive the next decision.

// For developers

Built to live inside the agent loop

useOSINT is infrastructure, not a portal. It speaks the protocols your stack already uses, so an autonomous agent calls it as naturally as any other tool.

  • CLI & MCP server: drop it into Claude, Cursor, or any MCP runtime with zero glue code.
  • Streaming results: findings arrive as they resolve, so long sweeps never block the loop.
  • Scoped & auditable: per-key rate limits, query logs, and source allowlists keep every investigation accountable.
agent.ts
import { useOSINT } from "useosint";

// one call, the agent does the legwork
const intel = await useOSINT("+1 415 555 0123", {
  depth: "full",
  live: true
});

model.reason(intel.entities);
// Use cases

Where useOSINT goes to work

The same engine powers a trust & safety queue, a fraud check, and an autonomous research agent. The work is identical: find the person, map the network, return the evidence.

// Trust & Safety

Unmask coordinated abuse

Tie throwaway accounts back to a single operator across platforms, and surface the networks running fraud, harassment, or spam.

// Fraud & Risk

Verify who you are dealing with

Confirm a counterparty, applicant, or seller is a real, consistent identity before money or access changes hands.

// Threat Intelligence

Attribute the actor

Pivot from a leaked handle or address to the full footprint behind an intrusion, and track where the actor regroups.

// Investigations

Compress the casework

Replace days of manual pivoting with a single sweep, and let analysts spend their time on judgment, not collection.

3,000+Live sources
~10/sQueries per target
6Identifier types
<5sMedian sweep
// FAQ

Common questions about useOSINT

Answer-first explanations of what useOSINT does, how it connects to an agent, and how it stays accountable.

What is useOSINT?

useOSINT is a real-time open-source intelligence (OSINT) layer built for AI agents. Given a single identifier (a phone number, email, username, name, domain, or image), it sweeps thousands of live public sources in parallel, correlates the scattered accounts back to one person, and returns structured, source-cited JSON your model can reason over inside its loop.

How do I connect useOSINT to an AI agent?

useOSINT ships as a CLI and an MCP (Model Context Protocol) server, so it drops into Claude, Cursor, or any MCP runtime with no glue code. Run "npx useosint" to use the CLI, or point your agent at the MCP server to expose useOSINT as a callable tool. Results stream back as they resolve so long sweeps never block the agent loop.

What identifiers can useOSINT resolve?

useOSINT accepts six selector types: phone number, email address, username/handle, full name, domain, and image (avatar or face hash). From any one selector it expands to the full footprint: linked accounts, the network around them, and the communities where the person is active.

How is useOSINT different from a traditional OSINT tool?

Traditional OSINT tools are portals built for human analysts to click through. useOSINT is infrastructure built for autonomous agents: one programmable call returns normalized JSON with entities, edges, sources, and confidence scores, so a model can call it inside its reasoning loop the same way it calls any other tool.

Does useOSINT cite its sources?

Yes. Every finding carries its originating source, retrieval timestamp, and a confidence score, and every query is logged for chain of custody. Results are auditable, rate-limited per key, and constrained by source allowlists so every investigation stays accountable.

Is useOSINT legal to use?

useOSINT only queries publicly available open-source information. It is designed for authorized use cases (trust and safety, fraud and risk, threat intelligence, and investigations), and users must operate within the law and their own authorization. The platform is SOC 2 aligned, audit-logged, and rate-limited.

Figures reflect typical platform performance across public-source sweeps; live throughput varies by selector type and source availability.

// Talk to us

Put useOSINT in front of your team

See a live resolution on your own data, and scope an engagement with our team.

// Start building

Ship it into your agent today

Install the CLI, point it at an identifier, and watch the intelligence resolve. One command, structured results.

Read the docs