Documentation

Everything you need to investigate with OSINT UI

20 OSINT tools, the Investigation Graph correlation engine, and how to automate them via the REST API or an AI client over MCP.

What OSINT UI is

OSINT UI is a professional Open Source Intelligence (OSINT) platform: 20 investigation tools — email, phone, domain, IP, username, data-breach, image, cryptocurrency and Telegram analysis, and more — all from a single web desktop, built for analysts, journalists, security teams and law enforcement.

It's not just another tool: it's a platform. The difference is Investigation Graph, the engine that cross-references the output of the other tools on the same target (a person, a domain, a company) and draws it as a relationship graph — instead of opening twenty tabs and writing down what you find by hand.

Three design principles

  • Correlation, not a pile of separate tools. Every source Investigation Graph queries feeds the same graph: an email seen by the domain analyzer, a data breach, and a GitHub commit can end up being the same node with three sources, not three unrelated findings.
  • Your keys, your control (BYOK). Tools that need a third-party API (Shodan, VirusTotal, Hunter...) use your own keys, encrypted server-side. Your quota is never shared with another user, and you decide which providers to connect.
  • We don't store your searches. The selector you analyze isn't permanently logged unless you explicitly save it to Saved Investigations. See Security & privacy.

Languages and access

The platform is bilingual (Spanish/English) and works in any modern browser, no install required. Everything lives at osint-ui.com/app once you register.