MailAccess

Open-source email OSINT and email scraper. One email in, every account behind it: 82 modules check 5,300+ platforms, and every finding says how it was found and how sure we are. One domain in, every public email at the company. Run it on your own machine, or use it hosted at mailaccess.pro.

Built for security researchers, OSINT analysts and penetration testers working under authorization. Read DISCLAIMER.md before use.

See it run

Example run with fictional data ([email protected]). The live view, then the report it opens into.

Install

pip install mailaccess
mailaccess investigate [email protected]

Python 3.10+. The CLI starts and stops its backend for each run. Use mailaccess serve for a persistent server, mailaccess[ml] for spaCy name classification, and mailaccess[browser] (then playwright install chromium) for the optional headless-browser checks. Docker and self-hosting: docs/self-hosting.md.

Quick start

mailaccess investigate [email protected]                  # every account behind an email
mailaccess investigate [email protected] -o report.html   # save the report (also .pdf, .md, .json)
mailaccess harvest-emails --domain example.com           # every public email at a domain
mailaccess find-email --name "Jane Doe" --domain example.com
mailaccess login                                         # sign in for your free key
mailaccess doctor                                        # check your setup
mailaccess keys set HIBP_API_KEY your-key                # optional providers
mailaccess upgrade

Pipelines, stdin, JSONL and CI: docs/integrations.md.

What it does

• Accounts behind an email. About 340 sign-up and login checks on public, logged-out pages, plus a username sweep over the 746 strongest of 5,300+ platforms. Full list and methods.
• Every finding shows its work. The check that ran, what the site said back, why it counts, and a grade: Confirmed, Likely, Possible or Username match.
• Who is behind it. A name consensus across independent sources. With an operator credential, the Google profile name and photo; with an Oxylabs key, Instagram, Facebook and LinkedIn profiles that match the address.
• What it means. A Defender's Brief with the next action, an exposure score, a credential risk score and public breach records.
• Email scraper. harvest-emails finds the public addresses at a domain from Common Crawl, GitHub, certificate logs, keyservers, team pages and patterns, then grades each one.
• Company patterns. find-email turns a name and an employer domain into one graded likely address, offline, from a bundled 384K-domain pattern index.
• Exports. JSON, CSV, HTML, PDF, Markdown, STIX 2.1 and Maltego (CSV for graph import).

Email scraper

Example run with fictional data (example.com).

Sign in for the MailAccess Index

mailaccess login (free) saves your account key. Harvests then add the MailAccess Index, our own index of emails seen on the public web: 5 harvests a day and 30 a month on the free plan, more with Pro.

MailAccess Pro

Your free harvest finds the addresses that are public. Pro adds the people who make the decisions: business contacts with name, role, company, email and LinkedIn, from public and third-party commercial sources.

$ mailaccess harvest-emails --domain example.com
  11 found · 194 available with Pro
  ──────────────────────────────────────────────────────────────────
  Dana Reed    VP Security           Example   [email protected]   in/danareed
  Sam Okoye    Head of Procurement   Example   [email protected]     in/samokoye
  Priya Nair   Director, Platform    Example   [email protected]      in/priyanair
  … 180 more business contacts (name, role, company, email, LinkedIn)

• See the gap first. Every free harvest prints how many contacts Pro would add for that domain.
• Company names work too. --company "Example Corp" resolves the domain for you.
• The hosted app too. Photos, location and every export on any report at mailaccess.pro, 30 investigations and 10 scrapes a day.
• $5 a month, locked for life, for the first 100 subscribers. Then $9. Run mailaccess pro for seats left.

Pro contacts stay in their own view. They never enter your exports, local database or history. Without a key, nothing changes.

Get Pro · How it works

Modules and API keys

82 modules, and 70 of them need no API key. Investigations probe a bounded, evidence-first set of the highest-signal platforms rather than the whole corpus. Optional keys (HIBP, Netlas, ipgeolocation.io, WhoisFreaks, Oxylabs and others) add coverage: set them with mailaccess keys set.

Module reference · API keys · Export formats · Self-hosting

Staying up to date

MailAccess checks PyPI for a newer release (cached, never blocking) and prints a hint when you're behind. Update with mailaccess upgrade. Silence it with MAILACCESS_NO_UPDATE_CHECK=1, or get release notes by email.

To stop the calls MailAccess makes on its own (the coverage teaser, the sponsor feed, the founder-seat counter and this update check), run mailaccess --local-only <command>, or turn it on for good with mailaccess local-only enable. OSINT checks still run. With a Pro key set, Pro enrichment still runs, and the CLI tells you before it sends anything.

Sponsors

MailAccess is free and MIT licensed. Sponsors keep the corpus and the infrastructure running. Sponsor this project.

Links

Self-hosting guide	Docker Compose, .env reference, PostgreSQL, proxy and Tor, Maltego setup
Module reference	Every module, the findings schema, adding a module
False-positive controls	Common names, disposable domains, clustering, platform health, scoring
API reference	REST endpoints, live run events, authentication
Export formats	Formats, MIME types, file names
Integrations	Maltego, Slack, Discord, webhooks
Brand assets	Logo, palette, type, downloadable SVGs
Contributing	Adding modules and exporters, code style, PR checklist

License

MIT. By default MailAccess reads public, logged-out sources; optional providers you configure, and Pro, bring their own data. See DISCLAIMER.md for authorized use and legal responsibility.

---

If MailAccess saved you time, a ⭐ helps other researchers find it.