# Navigator

> One product and account connection. Navigator finds OSINT tools, assesses structured-data capability, and runs supported public-record operations.

**OSINT mode** — semantic search over thousands of OSINT tools from Bellingcat, Aware Online, OSINT Framework, and others. Ask in plain English, get ranked tool recommendations.

**Data mode** — catalogue and executor for explicitly supported operations on individual structured public-record sources. It is not a general answer engine or arbitrary join system; most full questions are unsupported.

Both modes share the same membership token. Database is crawled weekly; tools and sources are community-curated.

## Agent Skill

Navigator publishes one portable skill for both modes. It is the preferred
agent entry point and is bundled with each compatible `navigator-cli` release.

- [Navigator skill](https://navigator.indicator.media/data/static/navigator-skill.md) — routes OSINT tool discovery and structured-data research through the CLI

Standalone CLI users can locate the installed copy with `navigator skill path`.
The earlier OSINT- and Data-specific skill URLs remain compatibility pointers.

## OSINT Mode

### REST API

Base URL: `https://navigator.indicator.media`. Bearer token with `on_` prefix. Get yours at https://navigator.indicator.media → account settings.

- `POST /api/query` — natural language query, returns ranked tool recommendations
- `POST /api/tools/search` — keyword/filter search across the tool database
- `GET /api/categories` — list all tool categories
- `GET /api/health` — service health check
- [OpenAPI spec](https://navigator.indicator.media/api/openapi.json)

### MCP Server

Remote MCP at `https://navigator.indicator.media/mcp` (pro subscribers). OAuth 2.0. Exposes `query`, `search_tools`, and `search_tool_documentation`.

```bash
claude mcp add-json osint-navigator '{"type":"http","url":"https://navigator.indicator.media/mcp/"}'
```

## Data Mode

Base URL: `https://navigator.indicator.media/data`. Same Bearer token.

### CLI (primary agent interface)

```bash
pip install navigator-cli
navigator auth login

# Assess a full question before querying
navigator data assess "Find Norwegian companies named Equinor" --json

# Read the exact operation contract
navigator data show no/brreg/enheter:search-companies

# Execute only a fully supported operation
navigator query no/brreg/enheter --operation search-companies --input '{"navn":"Equinor","size":5}' --out companies.json
```

### REST API

- `GET /api/capabilities` — compact operation registry and live generated counts
- `GET /api/capabilities/find?q=...` — ranked capability discovery
- `POST /api/capabilities/assess` — non-executing full-question assessment
- `GET /api/registry` — full versioned source and operation catalogue
- `GET /api/sources/{id}` — one source's meta + skill file
- `POST /api/query/{id}` — execute a query against a source
- `GET /api/meta-skill` — public canonical parent skill
- `GET /api/meta-skill/cowork.zip` — public Cowork upload archive

### Current catalogue

Do not infer capability from a provider name. Read the generated operation
registry at `GET /data/api/capabilities` or the full schemas at
`GET /data/api/registry`. Each operation separates current wrapped scope from
provider and roadmap scope.

### Auth Models

- Each operation declares its current authentication, quota, disclosure, and availability contract.
- BYO keys are configured with `navigator keys set <name>` when the selected operation requests one.
- All keys live in the OS keychain. Agents never see them.

## Optional

- [OSINT OpenAPI spec](https://navigator.indicator.media/api/openapi.json)
- [Data OpenAPI spec](https://navigator.indicator.media/data/openapi.json)