
Free email OSINT tool, 2500+ platforms, identity clustering, breach detection. No API keys required. pip install mailaccess
mailaccess.pro · Docs · PyPI · Changelog
Self-hostable OSINT platform for investigating email addresses. Fan out across breach databases, social networks, DNS records, and the open web, then get back a unified exposure score and structured findings you can export or pipe into Maltego.
Built for security researchers, OSINT analysts, and penetration testers operating under authorization. Read DISCLAIMER.md before use.
pip install mailaccess
mailaccess investigate [email protected]
The CLI auto-starts and stops the backend for each investigation. Use
mailaccess serve when you want a persistent server, install
mailaccess[ml] for optional spaCy-based name classification, or
mailaccess[browser] (then playwright install chromium) for the optional
headless-browser account-existence oracles.
Full install options (Docker, persistent server, self-hosting) in docs/self-hosting.md.
mailaccess investigate [email protected]
mailaccess investigate [email protected] -o report.pdf
mailaccess harvest-emails --domain company.com
mailaccess harvest-emails --domain company.com --export harvest.csv
mailaccess find-email --name "Jane Doe" --domain company.com
mailaccess keys set HIBP_API_KEY your-key
mailaccess pro
mailaccess upgrade
mailaccess serve
Pipeline, stdin, JSONL, and CI examples in docs/integrations.md.
/investigation/:id/graph or export with GET /api/report/{id}/graph.harvest-emails discovers organization addresses across Common Crawl, GitHub, CT logs, registries, keyservers, dorks, employee pages, and patterns. (Pro adds the decision-makers behind the domain.)find-email turns a name plus an employer domain into one honestly-graded likely address, offline from a bundled 384K-domain pattern index. Microsoft 365 mailboxes are verified where the provider allows.