pywhat
v5.1.0Verified publisherIdentifies what a string is: email, IP, URL, crypto address, hash, phone number, API key and hundreds more
Community-packaged from github.com/bee-san/pyWhat: the registry's community pins the upstream release; the tool is its authors' work. Maintain that project? Claim this package.
Run
Through ot mcp, an agent calls run_tool with this; ot asks you before anything that goes online or touches a target. Set it up: ot mcp install claude (or cursor, vscode, codex, gemini).
{"tool":"osintverse-community/pywhat","target":"example@example.com","input_type":"string"}Or just say: "Run osintverse-community/pywhat on example@example.com with OTInstaller." The registry's read-only MCP server at api.otinstaller.com/mcp can find tools without installing anything.
ot run osintverse-community/pywhat --text example@example.com --format tableot install osintverse-community/pywhatPython wheel, run in a read-only container (Docker optional with --native) · no network · no key · up to 2 min. The first ot run installs the tool after asking once. The example value is the registry's own test input, so this command has run. Drop --format table for JSON.
Don't have ot? Install it in one line
curl -fsSL https://get.otinstaller.com/ot | shWhat this script does
- Downloads the latest
otrelease for your machine from GitHub Releases. - Checks its SHA-256 against
checksums.txt, and the Ed25519 signature on that file against the key built into the script. - Puts
otin /usr/local/bin or ~/.local/bin. Nothing else is written. Read the script.
irm https://get.otinstaller.com/ot.ps1 | iexWhat this script does
- Downloads the latest
otrelease for your machine from GitHub Releases. - Checks its SHA-256 against
checksums.txt, and the Ed25519 signature on that file against the key built into the script. - Puts
otin %LOCALAPPDATA%\Programs\ot, and adds it to your PATH. Nothing else is written. Read the script.
Evidence
Security tab →- Pinnedwheel
sha256:4f790aa4…ab6e12from PyPI.otre-hashes the file after download and refuses a mismatch. - Not signedthis release carries no signature the registry could verify.
otwarns before installing. - Scanned22 Oct 2026: 0 critical, 0 high, 5 medium, 1 low vulnerabilities; 0 embedded secrets, 0 malware heuristics; SBOM with 7 packages.
- Workssmoke test passed on 22 Oct 2026 (exit 0 in 3.4 s, offline sandbox); the nightly health check has not run yet.
- Backed upa copy of this wheel is kept by the registry. If PyPI removes it,
otdownloads the copy and checks the same hash. - Reviewedosintverse-community is a verified publisher: the registry confirmed who runs it, and a person reviewed its first release against the acceptable-use rules.
What you get back
Result envelope →{
"envelope": 1,
"tool": "osintverse-community/pywhat@5.1.0",
"runtime": "pipx",
"input": {
"text": "example@example.com"
},
"started_at": "2026-10-21T09:00:00Z",
"duration_ms": 4100,
"exit_code": 0,
"entities": [
{
"type": "email",
"value": "ada@example.com",
"confidence": "high"
},
{
"type": "ip",
"value": "192.0.2.1"
},
{
"type": "url",
"value": "https://example.com/page"
}
],
"warnings": []
}Every tool returns this shape, shaped here from what this tool declares it finds. --format table to read it; ot extract and ot auto to continue.
pywhat (community package)
This repository packages github.com/bee-san/pyWhat for the OTInstaller Registry as osintverse-community/pywhat. The tool is the work of its authors, under the MIT license; this repository only holds the manifest and release workflow.
Report problems with the tool upstream, and problems with the packaging here. If you maintain the upstream project and want to publish it yourself, open an issue or run ot claim osintverse-community/pywhat: the package is transferred to you.
It installs the upstream project's own release from PyPI, pinned by version and hash; nothing here is rebuilt.
The wrapper passes --only-text so the input is always treated as text, never as a file or folder path, and works fully offline.
ot run osintverse-community/pywhat --text …
Packaged version: 5.1.0.
What next
pywhat finds email, ip, url, crypto address, other. Tools that take those:
email → 10 toolsip → 6 toolsurl → 10 toolscrypto address → 2 toolsot auto, with a saved result