Let's connect
mailaccess.pro · Docs · PyPI · Changelog
Open-source email OSINT and email scraper. One email in, every account behind it: 82 modules check 5,300+ platforms, and every finding says how it was found and how sure we are. One domain in, every public email at the company. Run it on your own machine, or use it hosted at [mailaccess.pro](https://mailaccess.pro).
Built for security researchers, OSINT analysts and penetration testers working under authorization. Read [DISCLAIMER.md](https://github.com/KatrielMoses/MailAccess/blob/main/DISCLAIMER.md) before use.
## See it run
Example run with fictional data (jane@example.com). The live view, then the report it opens into.
## Install
```bash
pip install mailaccess
mailaccess investigate jane@example.com
```
Python 3.10+. The CLI starts and stops its backend for each run. Use `mailaccess serve` for a persistent server, `mailaccess[ml]` for spaCy name classification, and `mailaccess[browser]` (then `playwright install chromium`) for the optional [headless-browser checks](https://github.com/KatrielMoses/MailAccess/blob/main/docs/account-existence-platforms.md#browser-tier-optional). Docker and self-hosting: [docs/self-hosting.md](https://github.com/KatrielMoses/MailAccess/blob/main/docs/self-hosting.md).
## Quick start
```bash
mailaccess investigate jane@example.com # every account behind an email
mailaccess investigate jane@example.com -o report.html # save the report (also .pdf, .md, .json)
mailaccess harvest-emails --domain example.com # every public email at a domain
mailaccess find-email --name "Jane Doe" --domain example.com
mailaccess login # sign in for your free key
mailaccess doctor # check your setup
mailaccess keys set HIBP_API_KEY your-key # optional providers
mailaccess upgrade
```
Pipelines, stdin, JSONL and CI: [docs/integrations.md](https://github.com/KatrielMoses/MailAccess/blob/main/docs/integrations.md#pipeline-integration).
## What it does
- **Accounts behind an email.** About 340 sign-up and login checks on public, logged-out pages, plus a username sweep over the 746 strongest of 5,300+ platforms. [Full list and methods](https://github.com/KatrielMoses/MailAccess/blob/main/docs/account-existence-platforms.md).
- **Every finding shows its work.** The check that ran, what the site said back, why it counts, and a grade: Confirmed, Likely, Possible or Username match.
- **Who is behind it.** A name consensus across independent sources. With an operator credential, the Google profile name and photo; with an Oxylabs key, Instagram, Facebook and LinkedIn profiles that match the address.
- **What it means.** A Defender's Brief with the next action, an exposure score, a credential risk score and public breach records.
- **Email scraper.** `harvest-emails` finds the public addresses at a domain from Common Crawl, GitHub, certificate logs, keyservers, team pages and patterns, then grades each one.
- **Company patterns.** `find-email` turns a name and an employer domain into one graded likely address, offline, from a bundled 384K-domain pattern index.
- **Exports.** JSON, CSV, HTML, PDF, Markdown, STIX 2.1 and Maltego (CSV for graph import).
## Email scraper
Example run with fictional data (example.com).
## Sign in for the MailAccess Index
`mailaccess login` (free) saves your account key. Harvests then add the MailAccess Index, our own index of emails seen on the public web: 5 harvests a day and 30 a month on the free plan, more with Pro.
## MailAccess Pro
Your free harvest finds the addresses that are public. Pro adds the people who make the decisions: business contacts with name, role, company, email and LinkedIn, from public and third-party commercial sources.
```text
$ mailaccess harvest-emails --domain example.com
11 found · 194 available with Pro
──────────────────────────────────────────────────────────────────
Dana Reed VP Security Example dana.reed@example.com in/danareed
Sam Okoye Head of Procurement Example s.okoye@example.com in/samokoye
Priya Nair Director, Platform Example p.nair@example.com in/priyanair
… 180 more business contacts (name, role, company, email, LinkedIn)
```
- **See the gap first.** Every free harvest prints how many contacts Pro would add for that domain.
- **Company names work too.** `--company "Example Corp"` resolves the domain for you.
- **The hosted app too.** Photos, location and every export on any report at [mailaccess.pro](https://mailaccess.pro), 30 investigations and 10 scrapes a day.
- **$5 a month, locked for life, for the first 100 subscribers. Then $9.** Run `mailaccess pro` for seats left.
Pro contacts stay in their own view. They never enter your exports, local database or history. Without a key, nothing changes.
[Get Pro](https://mailaccess.pro/pricing?src=readme) · [How it works](https://github.com/KatrielMoses/MailAccess/blob/main/docs/modules.md#mailaccess-pro-corpus-lead-enrichment)
## Modules and API keys
82 modules, and 70 of them need no API key. Investigations probe a bounded, evidence-first set of the highest-signal platforms rather than the whole corpus. Optional keys (HIBP, Netlas, ipgeolocation.io, WhoisFreaks, Oxylabs and others) add coverage: set them with `mailaccess keys set`.
[Module reference](https://github.com/KatrielMoses/MailAccess/blob/main/docs/modules.md) · [API keys](https://github.com/KatrielMoses/MailAccess/blob/main/docs/api-keys.md) · [Export formats](https://github.com/KatrielMoses/MailAccess/blob/main/docs/exports.md) · [Self-hosting](https://github.com/KatrielMoses/MailAccess/blob/main/docs/self-hosting.md)
## Staying up to date
MailAccess checks PyPI for a newer release (cached, never blocking) and prints a hint when you're behind. Update with `mailaccess upgrade`. Silence it with `MAILACCESS_NO_UPDATE_CHECK=1`, or [get release notes by email](https://mailaccess.pro/updates?src=readme).
To stop the calls MailAccess makes on its own (the coverage teaser, the sponsor feed, the founder-seat counter and this update check), run `mailaccess --local-only