# Navigator

> One product and account connection. Navigator finds the right OSINT tool or technique for your investigation.

**OSINT mode** — semantic search over thousands of OSINT tools from Bellingcat, Aware Online, OSINT Framework, and others. Ask in plain English, get ranked tool recommendations.

The tool database is crawled weekly; tools are community-curated.

## When to use it

Describe a reporting task or investigation question when you need to choose an OSINT tool or technique. Navigator searches its catalogue and returns recommendations with source and tool documentation. Use the documentation to check access, coverage, and suitability for the actual task.

**Input:** a plain-language question or tool-search criteria. **Output:** ranked tool recommendations and documentation to guide the next step. Navigator helps decide how to investigate; Spotlight runs casework, Anomaly supplies data context and deterministic checks, and Scoutpost monitors sources over time.

The public web interface is the human entry point. Agents can use the authenticated REST or MCP interfaces below. Account permissions and subscription access still apply; tool recommendations do not imply access to third-party services.

## REST API

Base URL: `https://navigator.indicator.media`. Bearer token with `on_` prefix. Get yours at https://navigator.indicator.media → account settings.

- `POST /api/query` — natural language query, returns ranked tool recommendations
- `POST /api/tools/search` — keyword/filter search across the tool database
- `GET /api/categories` — list all tool categories
- `GET /api/health` — service health check
- [OpenAPI spec](https://navigator.indicator.media/api/openapi.json)

## MCP Server

Remote MCP at `https://navigator.indicator.media/mcp` (pro subscribers). OAuth 2.0. Exposes `query`, `search_tools`, `search_tool_documentation`, `get_user_status`, and `list_sources`, plus the private-preview Skills tools (`skills_list`, `skills_show`).

```bash
claude mcp add-json osint-navigator '{"type":"http","url":"https://navigator.indicator.media/mcp/"}'
```

## Authentication

Members authenticate through their Indicator account. Desktop/Engine users run `bsig auth login`; the revocable membership token is stored in the OS keychain and never shown to agents.

## Optional

- [OSINT OpenAPI spec](https://navigator.indicator.media/api/openapi.json)