What does Shodan MCP Server require to run?
It requires Node.js, npm, and a valid Shodan API key. The API key must be set as the `SHODAN_API_KEY` environment variable.
Shodan MCP Server
@Cyreslab-AI
Basic information
About Shodan MCP Server
A Model Context Protocol server that provides access to Shodan API functionality
Shodan MCP Server config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"shodan": {
"command": "node",
"args": [
"/path/to/shodan-mcp-server/build/index.js"
],
"env": {
"SHODAN_API_KEY": ""
}
}
}
}Shodan MCP Server tools
Tool list not available yet
This listing does not currently have a tool list to display. This does not mean the server has no tools; check its documentation for supported capabilities.
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is Shodan MCP Server?
A Model Context Protocol (MCP) server that provides access to Shodan API functionality and CVE database, allowing AI assistants to query information about internet-connected devices, services, and vulnerabilities. It integrates with Claude or other MCP-compatible AI assistants.
How to use Shodan MCP Server?
Clone the repository, run npm install and npm run build, set the SHODAN_API_KEY environment variable, then start with npm start. For Claude integration, add the server to MCP settings with the command node and the path to build/index.js, providing the API key via env.SHODAN_API_KEY.
Key features of Shodan MCP Server
- Host information lookup for specific IP addresses
- Search Shodan’s database for devices and services
- Network range scanning using CIDR notation
- SSL certificate details for domains
- IoT device search by device type and country
- CVE lookup, search, and exploit prediction
Use cases of Shodan MCP Server
- Investigate a suspicious IP address for open ports and services.
- Find all internet-facing Apache servers in a given country.
- Identify known vulnerabilities affecting a specific software product.
- Enumerate subdomains and DNS records for a domain.
- Retrieve the latest Known Exploited Vulnerabilities from CISA.
Frequently asked questions
Are all features free?
No. Search, network scanning, SSL certificate lookup, IoT device search, and domain info require a paid Shodan API key. CVE database functionality (CVE lookup, search, CPE info, newest CVEs, KEV, EPSS) is completely free.
How is authentication handled?
The server authenticates with Shodan via the API key provided in the `SHODAN_API_KEY` environment variable. No additional authentication is used for the MCP transport.
Can I use this server with other MCP clients besides Claude?
Yes — it is built on the MCP standard and can be used with any MCP-compatible AI assistant. The README specifically mentions Claude Desktop and Claude.app.
What data does Shodan MCP Server access?
It accesses the Shodan API (internet device data, SSL certificates, DNS, etc.) and a CVE database. No data is stored locally; all queries go to Shodan and the CVE source.
More Other MCP servers
MCP Toolbox for Databases
googleapisMCP Toolbox for Databases is an open source MCP server for databases.
15.9K
Glasswarp
GlasswarpSee and control a real Windows PC you own — from any MCP client, locally or remotely. Observe (UIA + screenshots), click/type/drag/scroll, launch apps, owner Live View. BYOH: your machine, your key.
Hindsight
vectorize-ioHindsight: Agent Memory That Learns
50.4K
Figs, Relationship Expert
Figs O'Sullivan, LMFTCouples therapist Figs O'Sullivan (LMFT, 17 years, endorsed by Sue Johnson, creator of EFT) inside your AI. Ask relationship questions answered from his clinical writing, name the pattern in a fight, get a three-step rep
Blender
ahujasidOpen-source MCP to use Blender with any LLM
23.6K
Comments