OSINT-MCP-Server

The server demonstrates a strong commitment to ethical and secure practices. It implements explicit timeouts for all external HTTP/DNS requests, sets a transparent User-Agent, and enforces `robots.txt` compliance for web operations. Robust input validation and sanitization (`validators.py`) are applied to all parameters. A token bucket rate limiter is built-in and actively used across tools to prevent abuse. API keys for external services are loaded from environment variables (e.g., `ABUSEIPDB_API_KEY`) and are not hardcoded. Comprehensive error handling is in place to provide structured feedback and prevent crashes. The code clearly distinguishes between publicly available information and private data access, adhering strictly to ethical OSINT principles. No `eval` or similar dangerous functions are used without justification, and there are no signs of obfuscation or malicious patterns.