OTInstaller
Sign in

nerva

v1.77.0Verified publisher

Identifies the service running on an open port across 170+ protocols and reports its version and metadata

Community-packaged from github.com/praetorian-inc/nerva: the registry's community pins the upstream release; the tool is its authors' work. Maintain that project? Claim this package.

Run

Through ot mcp, an agent calls run_tool with this; ot asks you before anything that goes online or touches a target. Set it up: ot mcp install claude (or cursor, vscode, codex, gemini).

{"tool":"osintverse-community/nerva","target":"scanme.nmap.org:22","input_type":"string"}

Or just say: "Run osintverse-community/nerva on scanme.nmap.org:22 with OTInstaller." The registry's read-only MCP server at api.otinstaller.com/mcp can find tools without installing anything.

ot run osintverse-community/nerva --target scanme.nmap.org:22 --format table
ot install osintverse-community/nerva

Docker image in a read-only container · network allowed · no key · up to 10 min. The first ot run installs the tool after asking once. The example value is the registry's own test input, so this command has run. Drop --format table for JSON.

Don't have ot? Install it in one line
curl -fsSL https://get.otinstaller.com/ot | sh
What this script does
  1. Downloads the latest ot release for your machine from GitHub Releases.
  2. Checks its SHA-256 against checksums.txt, and the Ed25519 signature on that file against the key built into the script.
  3. Puts ot in /usr/local/bin or ~/.local/bin. Nothing else is written. Read the script.
irm https://get.otinstaller.com/ot.ps1 | iex
What this script does
  1. Downloads the latest ot release for your machine from GitHub Releases.
  2. Checks its SHA-256 against checksums.txt, and the Ed25519 signature on that file against the key built into the script.
  3. Puts ot in %LOCALAPPDATA%\Programs\ot, and adds it to your PATH. Nothing else is written. Read the script.

Evidence

Security tab →
  • Pinnedimage sha256:fe5506ea…debfb2. The same bytes on every install; ot pulls by digest, never by tag.
  • Signedby https://github.com/osintverse-community/nerva/.github/workflows/otinstaller-release.yml@refs/heads/main via token.actions.githubusercontent.com, verified by the registry on 22 Oct 2026. ot checks the same identity before every install and refuses another signer.
  • Scan warnings22 Oct 2026: 1 critical, 16 high, 11 medium, 0 low vulnerabilities (17 high or critical with a fix available); 0 embedded secrets, 0 malware heuristics; SBOM with 36 packages.
  • Workssmoke test passed on 22 Oct 2026 (exit 0 in 9.3 s, offline sandbox); the nightly health check has not run yet.
  • Backed upa copy of this image is on the registry's mirror. If the original registry refuses it, ot pulls the same digest from the mirror and checks the same signature.
  • Reviewedosintverse-community is a verified publisher: the registry confirmed who runs it, and a person reviewed its first release against the acceptable-use rules.

What you get back

Result envelope →
{
  "envelope": 1,
  "tool": "osintverse-community/nerva@1.77.0",
  "runtime": "docker",
  "input": {
    "target": "scanme.nmap.org:22"
  },
  "started_at": "2026-10-21T09:00:00Z",
  "duration_ms": 4100,
  "exit_code": 0,
  "entities": [
    {
      "type": "ip",
      "value": "192.0.2.1"
    },
    {
      "type": "url",
      "value": "https://example.com/page"
    },
    {
      "type": "other",
      "value": "…"
    }
  ],
  "warnings": []
}

Every tool returns this shape, shaped here from what this tool declares it finds. --format table to read it; ot extract and ot auto to continue.

nerva (community package)

This repository packages github.com/praetorian-inc/nerva for the OTInstaller Registry as osintverse-community/nerva. The tool is the work of its authors, under the Apache-2.0 license; this repository only holds the manifest and release workflow.

Report problems with the tool upstream, and problems with the packaging here. If you maintain the upstream project and want to publish it yourself, open an issue or run ot claim osintverse-community/nerva: the package is transferred to you.

The Dockerfile here builds the upstream release at a pinned version, and the otinstaller release workflow builds, signs and publishes the image.

Nerva's go.mod needs Go 1.27, so the build uses golang:1.27-alpine. The optional --deep and --misconfigs probes are not enabled.

ot run osintverse-community/nerva --target …

Packaged version: 1.77.0.

What next

nerva finds ip, url, other. Tools that take those:

ip → 6 toolsurl → 10 toolsot auto, with a saved result

Esc

Try

↑ ↓ to move↵ to open