# Openosint (otlite)

AI-powered OSINT agent with interactive REPL, MCP server, and direct CLI modes.

- Takes: Username, Email, Domain
- Install: `otlite install openosint`, into its own virtualenv
- Pinned: [openosint==2.30.0](https://pypi.org/project/openosint/2.30.0/), with `holehe`, `sherlock-project`
- Command: `openosint`
- Python: any otlite runs on (3.10 or newer)
- Verified: 30 Sept 2026, version 2.30.0 on Ubuntu 26.04 LTS, Python 3.12.14
- Licence: MIT; 1,630 GitHub stars
- Source: https://github.com/OpenOSINT/OpenOSINT

otlite is the no-Docker edition of OTInstaller for Linux and macOS: [install it](https://otinstaller.com/otlite) with `curl -fsSL https://get.otinstaller.com/otlite | sh`.

## Run it

| Input | otlite command | Openosint receives |
| --- | --- | --- |
| Username | `otlite run openosint -- u:johndoe` | `openosint username johndoe` |
| Email | `otlite run openosint -- e:ada@example.com` | `openosint email ada@example.com` |
| Domain | `otlite run openosint -- d:example.com` | `openosint dns example.com` |

Arguments after `--` that aren't typed inputs go to the tool unchanged.

## Before you run it

- Direct email and username scans work without ANTHROPIC_API_KEY; the AI REPL and MCP modes need it, or --api-key.
- Other features need their own keys: SHODAN_API_KEY (Shodan), VIRUSTOTAL_API_KEY (VirusTotal), CENSYS_API_ID and CENSYS_SECRET (Censys), ABUSEIPDB_API_KEY (AbuseIPDB) and IP2LOCATION_API_KEY (IP2Location).
- Bright Data tools need BRIGHTDATA_API_KEY with BRIGHTDATA_SERP_ZONE or BRIGHTDATA_UNLOCKER_ZONE; OPENAI_API_KEY selects the OpenAI provider and OPENOSINT_PROXY_URL sets a proxy.

## API keys

- `ANTHROPIC_API_KEY` (optional): `otlite keys set ANTHROPIC_API_KEY`
- `SHODAN_API_KEY` (optional): `otlite keys set SHODAN_API_KEY`
- `VIRUSTOTAL_API_KEY` (optional): `otlite keys set VIRUSTOTAL_API_KEY`
- `CENSYS_API_ID` (optional): `otlite keys set CENSYS_API_ID`
- `CENSYS_SECRET` (optional): `otlite keys set CENSYS_SECRET`
- `ABUSEIPDB_API_KEY` (optional): `otlite keys set ABUSEIPDB_API_KEY`
- `IP2LOCATION_API_KEY` (optional): `otlite keys set IP2LOCATION_API_KEY`
- `BRIGHTDATA_API_KEY` (optional): `otlite keys set BRIGHTDATA_API_KEY`
- `BRIGHTDATA_SERP_ZONE` (optional): `otlite keys set BRIGHTDATA_SERP_ZONE`
- `BRIGHTDATA_UNLOCKER_ZONE` (optional): `otlite keys set BRIGHTDATA_UNLOCKER_ZONE`
- `OPENAI_API_KEY` (optional): `otlite keys set OPENAI_API_KEY`
- `OPENOSINT_PROXY_URL` (optional): `otlite keys set OPENOSINT_PROXY_URL`

Keys live in `~/.otlite/.env`, readable only by you, and each tool receives only the keys it declares.

## What a run leaves

- `results/openosint/johndoe/<time>_openosint_johndoe_<run id>.txt`
- `results/openosint/johndoe/<time>_openosint_johndoe_<run id>.meta.json`
- `results/openosint/johndoe/<time>_openosint_johndoe_<run id>.envelope.json`

The envelope is the same shape for every tool: the tool and version, the input, timing, exit code and status, the emails, domains, IP addresses and URLs found in the output, and the output file's path, hash and size. `otlite results --tool openosint` lists saved runs, `otlite extract openosint` pulls out indicators and `otlite diff openosint johndoe` compares the two latest runs.

## With other tools

`otlite run --all u:johndoe` and `otlite auto johndoe` run it with every other installed tool that takes the same input.

## Related tools

- [Spiderfoot](https://otinstaller.com/otlite/tools/spiderfoot.md): SpiderFoot automates OSINT for threat intelligence and mapping your attack surface
- [Fsociety](https://otinstaller.com/otlite/tools/fsociety.md): A Modular Penetration Testing Framework
- [Secator](https://otinstaller.com/otlite/tools/secator.md): secator - the pentester's swiss knife
- [Blackbird](https://otinstaller.com/otlite/tools/blackbird.md): OSINT tool to search for accounts by username and email across social networks
- [User Scanner](https://otinstaller.com/otlite/tools/user-scanner.md): (2-in-1) Email & Username OSINT suite featuring native MCP support for deep data extraction just from a single Email/Username
- [Socialscan](https://otinstaller.com/otlite/tools/socialscan.md): Python library for accurately querying username and email usage on online platforms

[All 47 otlite tools](https://otinstaller.com/otlite/tools) · [otlite docs](https://otinstaller.com/docs/otlite.md)