security-osintlisted

# Security OSINT ## Overview Monitor Twitter/X and Reddit for security-related discussions — CVE mentions, zero-day chatter, breach reports, exploit code sharing, and emerging threats. Provides early warning intelligence often 24-48 hours before formal advisories. ## When to Use Activate when the user asks: - "Find discussions about [CVE-XXXX-XXXXX] on Twitter" - "What's the security community saying about [VULNERABILITY]?" - "Monitor social media for [SOFTWARE] vulnerabilities" - "OSINT research on [THREAT ACTOR/CAMPAIGN]" - "Are there breach reports about [COMPANY] on social media?" - "Threat intelligence from Twitter and Reddit" ## Setup & Authentication Before fetching data, ensure Xpoz access is configured. Follow these checks in order. ### Check 1: Already authenticated? **If you have MCP tools**, try calling any Xpoz tool (e.g., `checkAccessKeyStatus`). If it works → skip to Step 1. **If you have the SDK**, try: ```python from xpoz import XpozClient client = XpozClient() # reads XPOZ_API_KEY env var ``` If this succeeds without error → skip to Step 1. If neither works, you need to authenticate. Get a free access key (below). --- ### Recommended: a free access key Real analyses need a real key: [get a free access key](https://xpoz.ai/get-token) (free tier, up to 75K results, no credit card). SDK and CLI users set it as `XPOZ_API_KEY`; MCP connections sign in with the same account via OAuth on first tool call (paths below). --- ### Path A: MCP via mcporte