censys-host

v0.1.0Verified publisher

Shows what Censys has seen on an IP address: open ports, services and software, network, location, host names

Run

TerminalAgent

Through ot mcp, an agent calls run_tool with this; ot asks you before anything that goes online or touches a target. Set it up: ot mcp install claude (or cursor, vscode, codex, gemini).

{"tool":"osintverse-community/censys-host","target":"8.8.8.8","input_type":"ip"}

Or just say: "Run osintverse-community/censys-host on 8.8.8.8 with OTInstaller." The registry's read-only MCP server at api.otinstaller.com/mcp can find tools without installing anything.

ot run osintverse-community/censys-host ip:8.8.8.8 --format table

ot install osintverse-community/censys-host

Docker image in a read-only container · talks to api.platform.censys.io · needs CENSYS_API_TOKEN · up to 1 min. The first ot run installs the tool after asking once. The example value is the registry's own test input, so this command has run. Drop --format table for JSON.

Don't have ot? Install it in one line

macOS / LinuxWindows

curl -fsSL https://get.otinstaller.com/ot | sh

What this script does

Downloads the latest ot release for your machine from GitHub Releases.
Checks its SHA-256 against checksums.txt, and the Ed25519 signature on that file against the key built into the script.
Puts ot in /usr/local/bin or ~/.local/bin. Nothing else is written. Read the script.

irm https://get.otinstaller.com/ot.ps1 | iex

What this script does

Downloads the latest ot release for your machine from GitHub Releases.
Checks its SHA-256 against checksums.txt, and the Ed25519 signature on that file against the key built into the script.
Puts ot in %LOCALAPPDATA%\Programs\ot, and adds it to your PATH. Nothing else is written. Read the script.

Evidence

Security tab →

Pinnedimage sha256:5cb90b21…6bc4b7. The same bytes on every install; ot pulls by digest, never by tag.
Signedby https://github.com/osintverse-community/censys-host/.github/workflows/otinstaller-release.yml@refs/heads/main via token.actions.githubusercontent.com, verified by the registry on 24 Oct 2026. ot checks the same identity before every install and refuses another signer.
Scanned24 Oct 2026: 0 critical, 44 high, 63 medium, 62 low vulnerabilities; 0 embedded secrets, 0 malware heuristics; SBOM with 101 packages.
Workssmoke test passed on 24 Oct 2026 (exit 3 in 5.9 s, offline sandbox); the nightly health check has not run yet.
Backed upa copy of this image is on the registry's mirror. If the original registry refuses it, ot pulls the same digest from the mirror and checks the same signature.
Reviewedosintverse-community is a verified publisher: the registry confirmed who runs it, and a person reviewed its first release against the acceptable-use rules.

From the community

Issues →

Not health-checked yet; 0.1.0 came out today; nobody has said yet whether it works.

0.1.0 is in its first week. Nobody has said whether it works yet.

Used 0.1.0?It's broken for me

What you get back

Result envelope →

{
  "envelope": 1,
  "tool": "osintverse-community/censys-host@0.1.0",
  "runtime": "docker",
  "input": {
    "ip": "8.8.8.8"
  },
  "started_at": "2026-10-21T09:00:00Z",
  "duration_ms": 4100,
  "exit_code": 0,
  "entities": [
    {
      "type": "ip",
      "value": "192.0.2.1"
    },
    {
      "type": "other",
      "value": "…"
    },
    {
      "type": "organization",
      "value": "Example Ltd"
    }
  ],
  "warnings": []
}

Every tool returns this shape, shaped here from what this tool declares it finds. --format table to read it; ot extract and ot auto to continue.

censys-host

Shows what Censys has seen on an IP address: each open port with its service, transport and the software Censys recognised, the network that announces the address and its owner, its location, the host names that point at it, and the labels Censys gives the host. Uses Censys's official Python client for the Censys Platform API, which replaced Censys Search when Censys switched the legacy API off on 30 September 2026. Censys scans the internet on its own schedule; this only reads what it has, so the target is not contacted.

ot run osintverse-community/censys-host --ip 8.8.8.8

Inputs

Input	Required
`ip`	yes

Keys

CENSYS_API_TOKEN, set with ot keys set CENSYS_API_TOKEN: a personal access token from https://accounts.censys.io/settings/personal-access-tokens. Free accounts get a monthly allowance of credits, and each lookup spends some. CENSYS_ORG_ID is optional: set it to spend your organisation's credits instead. Without the token the tool exits with code 3.

Notes

An address Censys has no record of gives no entities and a note on stderr. Host names come from forward and reverse DNS as Censys last saw them; the tool lists at most 50.

Next steps

Look the address up in osintverse-community/virustotal or osintverse-community/greynoise, and resolve the host names with osintverse-community/dns-records.

Development

pip install censys-platform==0.16.5
python -m unittest
ot validate

Releases are built, signed and published by the otinstaller release workflow (Actions tab, with the version to release).

License

MIT

What next

censys-host finds ip, other, organization, location, domain. Tools that take those:

ip → 10 tools organization → 6 tools domain → 10 tools ot auto, with a saved result

Other ip address tools

All ip address tools →

Alternatives to censys-host that also take an ip address; ot auto runs every installed one on the same value.