Slash lookups, dossier analysis, and Investigations boards in one chat.
The OsintX AI Assistant is a chat in the dashboard that runs lookups, reads the results and suggests the next step. You type a slash command or a plain sentence, and it searches, merges what it finds and answers in English.
Slash commands
- /breach <email|username|domain|ip>: breach sources for the identifier
- /social <username>: the same handle across platforms
- /discord <snowflake>: Discord intel bundle (Basic plan or higher)
- /fivem <join code|id|discord:...>: FiveM and CFX lookup
- /investigation create <case name>: save your latest lookup to Investigations
- /help lists the commands for your plan, /clear resets the conversation
A Discord-first pivot
Start with the most stable identifier. A Discord snowflake does not change when a user renames the account, so it makes a good seed.
- /discord 1163586699490762872 for the profile bundle
- /fivem discord:1163586699490762872 for servers, Steam and license identifiers
- /breach on any email the earlier steps return
- /investigation create Case 42 to pin the result on a board
Follow-up questions work without repeating the identifier. Ask which of the returned accounts share a username, or which source is the oldest, and the assistant answers from the earlier messages.
Summary: Three stealer rows tie analyst@example.com to Discord and PayPal. Discord snowflake 1163586699490762872 appears in two logins; recommend Roblox discord-id and FiveM pivots.
Identifiers: 2 emails · 1 Discord ID · 1 gaming handle · passwords remain masked in UI.
Paste a dossier
If you already have notes (emails, usernames, Holehe output, Google Maps links), paste them and ask the assistant to find more information. It runs breach and social lookups one source at a time, merges the results and analyzes them against your subject.
Where Roblox, IntelX and stealer logs fit
The assistant itself covers breach, social, Discord and FiveM. Roblox lookups and IntelX exports run from the dashboard search, and stealer or victim-log searches are not available in the assistant on purpose.
- Roblox: run discord-id, username or user-id mode in Dashboard, Search, then paste the result into the chat for analysis
- IntelX: parse the export in the IntelX workspace, then use AI Analyzer on the JSON
- Stealer logs: use the stealer search and the victim file explorer in the dashboard
Quota
Each assistant reply costs 3 daily searches. The OsintX lookups it runs also use your daily search quota. /help costs nothing through MCP.
Good follow-up questions
- Which of these accounts share the same username
- Which breach source is the oldest
- Which identifiers have I not searched yet
- Summarize this case in five lines for a handover
Use it from your IDE
Enterprise accounts can call the same assistant from Cursor, Claude or Gemini CLI through the MCP tool osintx_assistant_turn. The guide to the MCP server covers setup and limits.
