mcp-shodan

Overview

The mcp-shodan server is a comprehensive implementation that bridges the Model Context Protocol with Shodan's extensive network intelligence database. It allows AI models to access real-time information about internet-connected devices, including IP details, DNS data, and vulnerability intelligence from Shodan's CVEDB. The server offers multiple tools including IP lookups, device searches, CVE and CPE lookups, and DNS operations, all returning structured, formatted output suitable for AI analysis and decision-making.

Try asking AI

After installing, here are 6 things you can ask your AI assistant:

• ip_lookup

  Retrieve comprehensive information about an IP address

  Try:What information do you have for IP 8.8.8.8?Try:Find details about 1.1.1.1
• shodan_search

  Search Shodan's database of internet-connected devices

  Try:Search for webcams in JapanTry:Find devices running Apache in the US
• cve_lookup

  Query detailed vulnerability information from Shodan's CVEDB

  Try:What do you know about CVE-2021-44228?Try:Get details for CVE-2023-23397
• dns_lookup

  Resolve domain names to IP addresses using Shodan's DNS service

  Try:What IP addresses resolve to google.com?Try:Find IPs for github.com and stackoverflow.com
• reverse_dns_lookup

  Perform reverse DNS lookups to find hostnames associated with IP addresses

  Try:What hostnames are associated with 8.8.8.8?Try:Find hostnames for 1.1.1.1 and 208.67.222.222
• cpe_lookup

  Search for Common Platform Enumeration (CPE) entries by product name

  Try:Find CPE entries for nginxTry:Search for CPEs related to Apache HTTP Server
• cves_by_product

  Search for vulnerabilities affecting specific products or CPEs

  Try:Find vulnerabilities affecting Apache HTTP ServerTry:Show me CVEs for cpe:2.3:a:nginx:nginx

Comparable tools

Installation

{
  "mcpServers": {
    "shodan": {
      "command": "mcp-shodan",
      "env": {
        "SHODAN_API_KEY": "your-shodan-api-key"
      }
    }
  }
}

claude mcp add --transport stdio --env SHODAN_API_KEY=your-shodan-api-key shodan -- npx -y @burtthecoder/mcp-shodan

codex mcp add shodan --env SHODAN_API_KEY=your-shodan-api-key -- npx -y @burtthecoder/mcp-shodan

gemini mcp add -e SHODAN_API_KEY=your-shodan-api-key shodan npx -y @burtthecoder/mcp-shodan

npm install -g @burtthecoder/mcp-shodan

FAQ

What API key do I need for mcp-shodan?

You need a valid API key from Shodan. You can obtain one by creating an account at https://account.shodan.io/.

What error code indicates I'm out of API credits?

HTTP status code 402 'Payment Required' means you've run out of query credits on your Shodan account.

How do I test if my MCP server is working correctly?

Try a simple DNS lookup for a well-known domain like 'google.com' using the dns_lookup tool. If it returns IP addresses, your server is working properly.

Compare mcp-shodan with