User Scanner

User Scanner is an open-source Python CLI tool built by kaifcodec for email and username OSINT (Open Source Intelligence) investigations. It covers 465+ actively maintained scan vectors—175+ email-integrated sites and 290+ username platforms—and is available under the MIT License via PyPI and GitHub. The project has accumulated over 3,800 GitHub stars and 430+ forks since its creation in October 2025, signaling strong community traction in the cybersecurity and ethical hacking space.

What It Is

User Scanner is a command-line OSINT suite that maps digital footprints from a single email address or username. It queries hundreds of platforms simultaneously, scrapes rich profile metadata, and can automatically pivot across secondary targets discovered during an initial scan. It is designed for security researchers, penetration testers, and investigators conducting authorized reconnaissance.

Core Capabilities

• Deep Email & Username OSINT: Queries 175+ email-integrated sites and 290+ username platforms in a single run.
• Rich Metadata Scraping: Extracts avatars, bios, follower counts, UIDs, seller statuses, and other account attributes from discovered profiles.
• Cross-Scan & Pivot Engine: Automatically mines exposed handles, profile links, and secondary email addresses from initial scan results, then pivots into multi-pass reconnaissance up to configurable hop depths.
• Hudson Rock Breach Intel: Queries infostealer malware breach logs via the --hudson flag to correlate targets with known infection records.
• Permutation & Alias Generator: Wildcard-based username variation generation to surface typosquatting or alternative aliases.
• Multi-Format Reports: Exports results to PDF (with profile photos), JSON, and CSV for downstream pipeline integration.
• Proxy Rotation: Built-in proxy support with protocol auto-detection (http, socks5) and pre-scan health validation.

MCP Server & AI Agent Integration

User Scanner ships a native Model Context Protocol (MCP) server, installable via pip install "user-scanner[mcp]". This allows AI agents running on Claude Desktop, Cursor, Antigravity, and Open-WebUI to autonomously invoke OSINT scans and recursive pivots. The MCP server exposes three tools: scan_username, scan_email, and list_available_modules, enabling LLMs to query the full platform catalog dynamically and chain multi-hop investigations without manual CLI interaction.

Architecture & Performance

The scanning engine is powered by httpx and curl_cffi for high-throughput parallel HTTP requests with automated TLS fingerprint impersonation to reduce detection and blocking. The tool also supports a Python library mode, allowing developers to call the engine programmatically from their own scripts using the user_scanner.core.engine API. Installation is supported via PyPI (recommended), virtual environments, and Nix for Linux and macOS.

Update: v1.5.1

The latest release is v1.5.1, published on August 28, 2026, with the repository last updated August 30, 2026. The README badge references version 1.5.1.1, indicating active patch-level development. The project is actively maintained with 15 open issues and a consistent push cadence, and the developer accepts GitHub Sponsors to sustain ongoing module maintenance across 465+ scan vectors.