MailAccess

_{Let's connect}

mailaccess.pro  ·  Docs  ·  PyPI  ·  Changelog

Self-hostable OSINT platform for investigating email addresses. Fan out across breach databases, social networks, DNS records, and the open web, then get back a unified exposure score and structured findings you can export or pipe into Maltego.

Built for security researchers, OSINT analysts, and penetration testers operating under authorization. Read DISCLAIMER.md before use.

Install

pip install mailaccess
mailaccess investigate [email protected]

The CLI auto-starts and stops the backend for each investigation. Use mailaccess serve when you want a persistent server, install mailaccess[ml] for optional spaCy-based name classification, or mailaccess[browser] (then playwright install chromium) for the optional headless-browser account-existence oracles.

Full install options (Docker, persistent server, self-hosting) in docs/self-hosting.md.

Quick Start

mailaccess investigate [email protected]
mailaccess investigate [email protected] -o report.pdf
mailaccess harvest-emails --domain company.com
mailaccess harvest-emails --domain company.com --export harvest.csv
mailaccess find-email --name "Jane Doe" --domain company.com
mailaccess keys set HIBP_API_KEY your-key
mailaccess pro
mailaccess upgrade
mailaccess serve

Pipeline, stdin, JSONL, and CI examples in docs/integrations.md.

What It Does

• Identity graph: cross-platform correlation of accounts, usernames, names, avatars, breach data, and profile links. View it at /investigation/:id/graph or export with GET /api/report/{id}/graph.
• Name Consensus Engine: synthesizes independent name signals into confirmed, probable, possible, or unknown identity bands.
• Defender's Brief: security-manager-ready risk summary with prioritized findings and a concrete next action.
• Credential Risk Score: separate 0-100 credential exposure band with top drivers and recommended next steps.
• Domain email harvesting: harvest-emails discovers organization addresses across Common Crawl, GitHub, CT logs, registries, keyservers, dorks, employee pages, and patterns. (Pro adds the decision-makers behind the domain.)
• Company email patterns: find-email turns a name plus an employer domain into one honestly-graded likely address, offline from a bundled 384K-domain pattern index. Microsoft 365 mailboxes are verified where the provider allows.
• 5,300+ platform corpus: a native username-platform engine over a MailAccess-verified corpus of 5,300+ platform definitions, with two-marker detection and zero runtime dependencies. Plus a native account-existence engine covering 357 email-checkable services — consumer apps, SaaS, and community forums, checked non-intrusively (full platform list & methods) — and native Google-account intelligence.
• Deep breach mode: probes the highest-severity breach corpus for account-existence risk.
• 6 export formats: JSON, CSV, PDF, Markdown, STIX 2.1, and Maltego XML.

MailAccess Pro