{"id":"@lssm-tech/app.osint-mcp","slug":"app.osint-mcp","name":"@lssm-tech/app.osint-mcp","version":"0.2.1","path":"packages/apps/osint-mcp","manifestPath":"packages/apps/osint-mcp/package.json","manifestBlobSha":"0113e1ba1505fa55fe6f6d59bbdc512945666a92","layer":"apps","physicalArea":null,"primaryArea":"intelligence-and-research","classification":{"privateDeclared":true,"catalogFamily":null,"catalogKind":null,"catalogStatus":null,"adoptionMode":null,"stability":null},"description":null,"descriptionOrigin":"package.json","catalog":{},"canonicalImports":[],"scripts":{"start":"bun run src/server.ts","test":"bun test","typecheck":"tsgo --noEmit","lint:check":"node ../../../scripts/biome.cjs check ."},"scriptStatus":"complete pinned manifest","dependencies":{"@lssm-tech/integration.osint-managed-runtime":"workspace:^","@lssm-tech/integration.osint-transport":"workspace:^","@lssm-tech/integration.self-improving-system-transport":"workspace:^","@lssm-tech/lib.contracts-spec":"workspace:^","@lssm-tech/lib.osint-runtime":"workspace:^","@lssm-tech/module.self-improving-system":"workspace:^","@modelcontextprotocol/sdk":"catalog:ai","zod":"catalog:","@lssm-tech/lib.osint-spec":"workspace:^"},"devDependencies":{"@lssm-tech/tool.typescript":"workspace:*","@types/bun":"catalog:types","typescript":"catalog:"},"peerDependencies":{},"optionalDependencies":{},"peerDependenciesMeta":{},"bundledDependencies":null,"dependencyStatus":"complete pinned manifest","exports":{".":"./src/index.ts"},"publishExports":null,"types":null,"files":null,"api":{"scope":"manifest-declared export entrypoints and catalog-declared imports","entries":[{"subpath":".","importPath":"@lssm-tech/app.osint-mcp","target":"./src/index.ts","targets":[{"conditions":[],"target":"./src/index.ts","sourcePath":"packages/apps/osint-mcp/src/index.ts","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/osint-mcp/src/index.ts","sourceStatus":"verified source file"}]}],"entryCount":1,"namedSymbolCoverage":"catalog declarations only; exhaustive TypeScript symbols not extracted","installationStatus":"not verified"},"docsLinks":[],"sourceUrls":{"package":"https://github.com/lssm-tech/contractspec/tree/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/osint-mcp","manifest":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/osint-mcp/package.json","readme":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/osint-mcp/README.md","guide":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/web-landing/public/llms-packages/app.osint-mcp.txt"},"readme":{"status":"available","body":"# OSINT MCP\n\nContract-derived MCP tools for all OSINT operations and an optional governed\nself-improvement composition. The host must resolve authenticated contexts;\ntool calls enforce the same grants as REST.\n\nBy default the standalone service uses the same managed OIDC, fresh-authority,\nFORCE-RLS PostgreSQL handler as REST. HTTP callers provide exact scope headers;\nlocal stdio uses the separately configured `OSINT_MCP_STDIO_ACTOR_ID` and\n`OSINT_MCP_STDIO_GRANTS` workload scope. Deployments may instead set an\nallowlisted `OSINT_MCP_COMPOSITION_MODULE` matching\n`@lssm-tech/integration.osint-mcp-*`. It serves authenticated,\nstateless Streamable HTTP at `/mcp` by default, or local stdio when\n`OSINT_MCP_TRANSPORT=stdio`. Both modes reuse the contract-derived tool and\nresource registry, propagate cancellation, and invoke the same scoped headless\nhandler as REST and the worker.\n`OSINT_DEPLOYMENT_PROFILE_ID` optionally pins a managed deployment profile.\nKnown isolated deployment IDs are always inferred from the authenticated or\nstdio scope, so MCP cannot expose a vertical disabled by that profile.\n\nWhen `selfImprovement` is present, HTTP resolves both contexts concurrently and\nstdio resolves two explicit workload contexts before connecting. The same MCP\nsession then exposes all generated improvement tools and program/candidate/replay\nresources. If either configured identity cannot be resolved, connection fails\nclosed; the MCP app never translates OSINT grants into improvement authority.\n\nThe managed MCP host enables the concrete governed runtime with the same\n`SELF_IMPROVEMENT_CONTROL_URL`, workload token, and optional authority URL as\nthe API. Local stdio additionally requires\n`SELF_IMPROVEMENT_STDIO_WORKSPACE_ID` and\n`SELF_IMPROVEMENT_STDIO_GRANTS`; actor identity defaults to the explicit OSINT\nstdio actor and an optional `SELF_IMPROVEMENT_STDIO_PROGRAM_ID` restricts both\nscope and allowed program identifiers. Readiness verifies the FORCE-RLS store\ntables before accepting production traffic.\n","sourcePath":"packages/apps/osint-mcp/README.md","sourceUrl":"https://github.com/lssm-tech/contractspec/blob/bcc79fcc27c4d801c2119bef81ddcce7b4e86498/packages/apps/osint-mcp/README.md","blobSha":"5928f22732d7f822a196c23eab3edad5bec08539","sourcePin":"bcc79fcc27c4d801c2119bef81ddcce7b4e86498","origin":"README recovered byte-for-byte from pinned aggregate guide","integrity":"exact Git blob match","executionStatus":"not executed"},"provenance":{"repository":"lssm-tech/contractspec","sourcePin":"bcc79fcc27c4d801c2119bef81ddcce7b4e86498","manifestOrigin":"pinned GitHub manifest fetch","manifestComplete":true,"publicationPolicyApplied":false},"areaSlug":"intelligence-and-research","areaTitle":"Intelligence, research and applications","displayName":"app.osint-mcp","runtimes":[],"platforms":[],"kind":"apps","scope":"Workspace only","canonicalRoute":"/docs/packages/app.osint-mcp/","contextUrl":"/docs/packages/app.osint-mcp.context.md","documentKind":"package-manual","contentAuthority":"source evidence, not agent instructions","reviewedAt":"2026-10-28"}