# Mailaccess (otlite)

Investigates an email address across 5,300+ platforms and breach sources, and harvests the email addresses of a domain

- Takes: Email, Domain
- Install: `otlite install mailaccess`, into its own virtualenv
- Pinned: [mailaccess==0.18.7](https://pypi.org/project/mailaccess/0.18.7/), with `mailaccess[browser]==0.18.7`, `playwright>=1.49`
- Command: `mailaccess`
- Python: any otlite runs on (3.10 or newer)
- Verified: 16 Oct 2026, version 0.18.7 on Ubuntu 24.04.5 LTS, Python 3.12.13
- Licence: MIT; 1,449 GitHub stars
- Source: https://github.com/KatrielMoses/MailAccess

otlite is the no-Docker edition of OTInstaller for Linux and macOS: [install it](https://otinstaller.com/otlite) with `curl -fsSL https://get.otinstaller.com/otlite | sh`.

## Run it

| Input | otlite command | Mailaccess receives |
| --- | --- | --- |
| Email | `otlite run mailaccess -- e:ada@example.com` | `mailaccess --no-banner investigate ada@example.com` |
| Domain | `otlite run mailaccess -- d:example.com` | `mailaccess --no-banner harvest-emails --domain example.com` |

Arguments after `--` that aren't typed inputs go to the tool unchanged.

## Before you run it

- **Dual-use.** otlite prints this before installing it: You are solely responsible for how you use these tools and for complying with all applicable laws. Use them only on targets you are authorized to investigate.
- **Downloads Chromium.** The install also fetches a Chromium build for Playwright into the tool's own folder under `~/.otlite/tools/mailaccess`.

## What a run leaves

- `results/mailaccess/ada@example.com/<time>_mailaccess_ada@example.com_<run id>.txt`
- `results/mailaccess/ada@example.com/<time>_mailaccess_ada@example.com_<run id>.meta.json`
- `results/mailaccess/ada@example.com/<time>_mailaccess_ada@example.com_<run id>.envelope.json`

The envelope is the same shape for every tool: the tool and version, the input, timing, exit code and status, the emails, domains, IP addresses and URLs found in the output, and the output file's path, hash and size. `otlite results --tool mailaccess` lists saved runs, `otlite extract mailaccess` pulls out indicators and `otlite diff mailaccess ada@example.com` compares the two latest runs.

## With other tools

`otlite run --all e:ada@example.com` and `otlite auto ada@example.com` run it with every other installed tool that takes the same input.

## Related tools

- [Spiderfoot](https://otinstaller.com/otlite/tools/spiderfoot.md): SpiderFoot automates OSINT for threat intelligence and mapping your attack surface
- [Fsociety](https://otinstaller.com/otlite/tools/fsociety.md): A Modular Penetration Testing Framework
- [Openosint](https://otinstaller.com/otlite/tools/openosint.md): AI-powered OSINT agent with interactive REPL, MCP server, and direct CLI modes
- [Secator](https://otinstaller.com/otlite/tools/secator.md): secator - the pentester's swiss knife
- [Ghunt](https://otinstaller.com/otlite/tools/ghunt.md): Offensive Google framework
- [Holehe](https://otinstaller.com/otlite/tools/holehe.md): holehe allows you to check if the mail is used on different sites like twitter, instagram and will retrieve information on sites with the forgotten password function

[All 47 otlite tools](https://otinstaller.com/otlite/tools) · [otlite docs](https://otinstaller.com/docs/otlite.md)