MCP server

falconeye

Free self-hosted OSINT investigator's toolkit with an MCP server for Claude Code and Claude Desktop. Eighteen tools in one interface: crypto tracing, phishing fingerprinting, domain intel, Telegram OSINT, IP reputation, email header forensics with LLM scam detection, username enumeration, HIBP breach checks, ransomware victim tracking. AGPL-3.0.

• Published source
• Repository

Version

main

Analysed

11 October 2026

Last observed

11 October 2026

What the code does

• Runs shell commands Code that starts system commands on the machine it runs on.
• Sends data to outside servers Code that posts data to network addresses.
• Downloads and runs code Code that fetches a script and pipes it into a shell.
• Evaluates code at runtime Code that builds and runs code while it executes.

Having a capability is not wrongdoing; many tools need these to do their job. It tells you what to check before you install.

This is public metadata, not a safety certification or complete assessment. Static analysis cannot establish what a tool does at runtime.