Shodan MCP Server
@BurtTheCoder
About Shodan MCP Server
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.
Basic information
Config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"mcp-shodan": {
"command": "npx",
"args": [
"-y",
"@smithery/cli",
"install",
"@burtthecoder/mcp-shodan",
"--client",
"claude"
]
}
}
}Tools
No tools detected
We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.
Overview
What is Shodan MCP Server?
A Model Context Protocol server for querying the Shodan API and Shodan CVEDB. It provides network intelligence and security services including IP reconnaissance, DNS operations, vulnerability tracking, and device discovery, delivering structured output for easy integration. Designed for security professionals and developers.
How to use Shodan MCP Server?
Install via npm (npm install -g @burtthecoder/mcp-shodan) or run with npx. Add the server to your MCP client (e.g., Claude Desktop, Claude Code, Codex CLI, Gemini CLI) with the SHODAN_API_KEY environment variable set to your Shodan API key. Configuration uses mcpServers entries with stdio transport.
Key features of Shodan MCP Server
- Network reconnaissance via IP lookups and Shodan search
- DNS forward and reverse resolution
- Vulnerability intelligence from Shodan CVEDB
- Device discovery across internet-connected devices
- CPE and CVE-by-product search with advanced filtering
- Structured, formatted output for all queries
Use cases of Shodan MCP Server
- Investigate IP addresses for open ports, services, and vulnerabilities
- Resolve domains to IPs or map IPs back to hostnames
- Search for known vulnerabilities (CVE) and assess severity
- Discover internet-connected devices using custom search queries
- Track CVEs affecting specific products or CPE identifiers
FAQ from Shodan MCP Server
What do I need to use Shodan MCP Server?
A valid Shodan API key from your Shodan account and Node.js v20 or later.
How do I obtain an API key?
Sign in to your Shodan account at account.shodan.io to find your API key.
What common errors can occur?
401 Unauthorized (invalid or missing API key), 402 Payment Required (out of query credits), and 429 Too Many Requests (rate limit exceeded).
How can I test my API key?
Use curl to verify: curl "https://api.shodan.io/dns/resolve?hostnames=google.com&key=your-api-key". Or start with a simple DNS lookup via the server.
Where does the data come from?
All data is retrieved live from Shodan’s public API and Shodan CVEDB. The server does not store or cache data locally.
More Developer Tools MCP servers
Unity MCP (Server + Plugin)
IvanMurzakAI Skills, MCP Tools, and CLI for Unity Engine. Full AI develop and test loop. Use cli for quick setup. Efficient token usage, advanced tools. Any C# method may be turned into a tool by a single line. Works with Claude Code, Gemini, Copilot, Cursor and any other absolutely for fr
MCP Containers
metorialConnect any AI model to 1200+ integrations (MCP, CLI, API)
Test
x1xhlolFULL Augment Code, Claude Code, Cluely, CodeBuddy, Comet, Cursor, Devin AI, Junie, Kiro, Leap.new, Lovable, Manus, NotionAI, Orchids.app, Perplexity, Poke, Qoder, Replit, Same.dev, Trae, Traycer AI, VSCode Agent, Warp.dev, Windsurf, Xcode, Z.ai Code, Dia & v0. (And other Open Sou
TalkToFigma
sonnylazuardiTalkToFigma: MCP integration between AI Agent (Cursor, Claude Code, Codex) and Figma, allowing Agentic AI to communicate with Figma for reading designs and modifying them programmatically.
MCP Inspector
modelcontextprotocolVisual testing tool for MCP servers
Comments