MCP.so
Sign In

Shodan MCP Server

@BurtTheCoder

Basic information

Category

Developer Tools

License

MIT

Transports

stdio

Author

BurtTheCoder

About Shodan MCP Server

MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.

Shodan MCP Server config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-shodan": {
      "command": "npx",
      "args": [
        "-y",
        "@smithery/cli",
        "install",
        "@burtthecoder/mcp-shodan",
        "--client",
        "claude"
      ]
    }
  }
}

Shodan MCP Server tools

Tool list not available yet

This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Shodan MCP Server?

A Model Context Protocol server for querying the Shodan API and Shodan CVEDB. It provides network intelligence and security services including IP reconnaissance, DNS operations, vulnerability tracking, and device discovery, delivering structured output for easy integration. Designed for security professionals and developers.

How to use Shodan MCP Server?

Install via npm (npm install -g @burtthecoder/mcp-shodan) or run with npx. Add the server to your MCP client (e.g., Claude Desktop, Claude Code, Codex CLI, Gemini CLI) with the SHODAN_API_KEY environment variable set to your Shodan API key. Configuration uses mcpServers entries with stdio transport.

Key features of Shodan MCP Server

  • Network reconnaissance via IP lookups and Shodan search
  • DNS forward and reverse resolution
  • Vulnerability intelligence from Shodan CVEDB
  • Device discovery across internet-connected devices
  • CPE and CVE-by-product search with advanced filtering
  • Structured, formatted output for all queries

Use cases of Shodan MCP Server

  • Investigate IP addresses for open ports, services, and vulnerabilities
  • Resolve domains to IPs or map IPs back to hostnames
  • Search for known vulnerabilities (CVE) and assess severity
  • Discover internet-connected devices using custom search queries
  • Track CVEs affecting specific products or CPE identifiers

Frequently asked questions

1

What do I need to use Shodan MCP Server?

A valid Shodan API key from your Shodan account and Node.js v20 or later.

2

How do I obtain an API key?

Sign in to your Shodan account at [account.shodan.io](https://account.shodan.io/) to find your API key.

3

What common errors can occur?

401 Unauthorized (invalid or missing API key), 402 Payment Required (out of query credits), and 429 Too Many Requests (rate limit exceeded).

4

How can I test my API key?

Use `curl` to verify: `curl "https://api.shodan.io/dns/resolve?hostnames=google.com&key=your-api-key"`. Or start with a simple DNS lookup via the server.

5

Where does the data come from?

All data is retrieved live from Shodan’s public API and Shodan CVEDB. The server does not store or cache data locally.

Comments

More Developer Tools MCP servers