Shodan MCP Server

Name: Shodan MCP Server
Author: BurtTheCoder

@BurtTheCoder

关于 Shodan MCP Server

MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.

基本信息

分类

开发工具

许可证

MIT

运行时

node

传输方式

stdio

发布者

BurtTheCoder

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "mcp-shodan": {
      "command": "npx",
      "args": [
        "-y",
        "@smithery/cli",
        "install",
        "@burtthecoder/mcp-shodan",
        "--client",
        "claude"
      ]
    }
  }
}

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is Shodan MCP Server?

A Model Context Protocol server for querying the Shodan API and Shodan CVEDB. It provides network intelligence and security services including IP reconnaissance, DNS operations, vulnerability tracking, and device discovery, delivering structured output for easy integration. Designed for security professionals and developers.

How to use Shodan MCP Server?

Install via npm (npm install -g @burtthecoder/mcp-shodan) or run with npx. Add the server to your MCP client (e.g., Claude Desktop, Claude Code, Codex CLI, Gemini CLI) with the SHODAN_API_KEY environment variable set to your Shodan API key. Configuration uses mcpServers entries with stdio transport.

Key features of Shodan MCP Server

Network reconnaissance via IP lookups and Shodan search
DNS forward and reverse resolution
Vulnerability intelligence from Shodan CVEDB
Device discovery across internet-connected devices
CPE and CVE-by-product search with advanced filtering
Structured, formatted output for all queries

Use cases of Shodan MCP Server

Investigate IP addresses for open ports, services, and vulnerabilities
Resolve domains to IPs or map IPs back to hostnames
Search for known vulnerabilities (CVE) and assess severity
Discover internet-connected devices using custom search queries
Track CVEs affecting specific products or CPE identifiers

FAQ from Shodan MCP Server

What do I need to use Shodan MCP Server?

A valid Shodan API key from your Shodan account and Node.js v20 or later.

How do I obtain an API key?

What common errors can occur?

401 Unauthorized (invalid or missing API key), 402 Payment Required (out of query credits), and 429 Too Many Requests (rate limit exceeded).

How can I test my API key?

Use curl to verify: curl "https://api.shodan.io/dns/resolve?hostnames=google.com&key=your-api-key". Or start with a simple DNS lookup via the server.