_{Let's connect}

mailaccess.pro  ·  Docs  ·  PyPI  ·  Changelog

Open-source email OSINT and email scraper. One email in, every account behind it: 82 modules check 5,300+ platforms, and every finding says how it was found and how sure we are. One domain in, every public email at the company. Run it on your own machine, or use it hosted at mailaccess.pro.

Built for security researchers, OSINT analysts and penetration testers working under authorization. Read DISCLAIMER.md before use.

_{Example run with fictional data (jane@example.com). The live view, then the report it opens into.}

pip install mailaccess
mailaccess investigate jane@example.com

Python 3.10+. The CLI starts and stops its backend for each run. Use mailaccess serve for a persistent server, mailaccess[ml] for spaCy name classification, and mailaccess[browser] (then playwright install chromium) for the optional headless-browser checks. Docker and self-hosting: docs/self-hosting.md.

mailaccess investigate jane@example.com                  # every account behind an email
mailaccess investigate jane@example.com -o report.html   # save the report (also .pdf, .md, .json)
mailaccess harvest-emails --domain example.com           # every public email at a domain
mailaccess find-email --name "Jane Doe" --domain example.com
mailaccess login                                         # sign in for your free key
mailaccess doctor                                        # check your setup
mailaccess keys set HIBP_API_KEY your-key                # optional providers
mailaccess upgrade

Pipelines, stdin, JSONL and CI: docs/integrations.md.

• Accounts behind an email. About 340 sign-up and login checks on public, logged-out pages, plus a username sweep over the 746 strongest of 5,300+ platforms. Full list and methods.
• Every finding shows its work. The check that ran, what the site said back, why it counts, and a grade: Confirmed, Likely, Possible or Username match.
• Who is behind it. A name consensus across independent sources. With an operator credential, the Google profile name and photo; with an Oxylabs key, Instagram, Facebook and LinkedIn profiles that match the address.
• What it means. A Defender's Brief with the next action, an exposure score, a credential risk score and public breach records.
• Email scraper. harvest-emails finds the public addresses at a domain from Common Crawl, GitHub, certificate logs, keyservers, team pages and patterns, then grades each one.
• Company patterns. find-email turns a name and an employer domain into one graded likely address, offline, from a bundled 384K-domain pattern index.
• Exports. JSON, CSV, HTML, PDF, Markdown, STIX 2.1 and Maltego (CSV for graph import).

_{Example run with fictional data (example.com).}

mailaccess login (free) saves your account key. Harvests then add the MailAccess Index, our own index of emails seen on the public web: 5 harvests a day and 30 a month on the free plan, more with Pro.

Your free harvest finds the addresses that are public. Pro adds the people who make the decisions: business contacts with name, role, company, email and LinkedIn, from public and third-party commercial sources.

$ mailaccess harvest-emails --domain example.com
  11 found · 194 available with Pro
  ──────────────────────────────────────────────────────────────────
  Dana Reed    VP Security           Example   dana.reed@example.com   in/danareed
  Sam Okoye    Head of Procurement   Example   s.okoye@example.com     in/samokoye
  Priya Nair   Director, Platform    Example   p.nair@example.com      in/priyanair
  … 180 more business contacts (name, role, company, email, LinkedIn)

• See the gap first. Every free harvest prints how many contacts Pro would add for that domain.
• Company names work too. --company "Example Corp" resolves the domain for you.
• The hosted app too. Photos, location and every export on any report at mailaccess.pro, 30 investigations and 10 scrapes a day.
• $5 a month, locked for life, for the first 100 subscribers. Then $9. Run mailaccess pro for seats left.

Pro contacts stay in their own view. They never enter your exports, local database or history. Without a key, nothing changes.

Get Pro · How it works

82 modules, and 70 of them need no API key. Investigations probe a bounded, evidence-first set of the highest-signal platforms rather than the whole corpus. Optional keys (HIBP, Netlas, ipgeolocation.io, WhoisFreaks, Oxylabs and others) add coverage: set them with mailaccess keys set.

Module reference · API keys · Export formats · Self-hosting

MailAccess checks PyPI for a newer release (cached, never blocking) and prints a hint when you're behind. Update with mailaccess upgrade. Silence it with MAILACCESS_NO_UPDATE_CHECK=1, or get release notes by email.

To stop the calls MailAccess makes on its own (the coverage teaser, the sponsor feed, the founder-seat counter and this update check), run mailaccess --local-only <command>, or turn it on for good with mailaccess local-only enable. OSINT checks still run. With a Pro key set, Pro enrichment still runs, and the CLI tells you before it sends anything.

MailAccess is free and MIT licensed. Sponsors keep the corpus and the infrastructure running. Sponsor this project.

MIT. By default MailAccess reads public, logged-out sources; optional providers you configure, and Pro, bring their own data. See DISCLAIMER.md for authorized use and legal responsibility.

If MailAccess saved you time, a ⭐ helps other researchers find it.