Shodan MCP Server

Q: How do I obtain an API key?

Sign in to your Shodan account at [account.shodan.io](https://account.shodan.io/) to find your API key.

@BurtTheCoder

About Shodan MCP Server

MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "mcp-shodan": {
      "command": "npx",
      "args": [
        "-y",
        "@smithery/cli",
        "install",
        "@burtthecoder/mcp-shodan",
        "--client",
        "claude"
      ]
    }
  }
}

Tools

No tools detected

Fetch the live tool list by running this server in a temporary sandbox using the button above.

Overview

What is Shodan MCP Server?

A Model Context Protocol server for querying the Shodan API and Shodan CVEDB. It provides network intelligence and security services including IP reconnaissance, DNS operations, vulnerability tracking, and device discovery, delivering structured output for easy integration. Designed for security professionals and developers.

How to use Shodan MCP Server?

Install via npm (npm install -g @burtthecoder/mcp-shodan) or run with npx. Add the server to your MCP client (e.g., Claude Desktop, Claude Code, Codex CLI, Gemini CLI) with the SHODAN_API_KEY environment variable set to your Shodan API key. Configuration uses mcpServers entries with stdio transport.

Key features of Shodan MCP Server

Network reconnaissance via IP lookups and Shodan search
DNS forward and reverse resolution
Vulnerability intelligence from Shodan CVEDB
Device discovery across internet-connected devices
CPE and CVE-by-product search with advanced filtering
Structured, formatted output for all queries

Use cases of Shodan MCP Server

Investigate IP addresses for open ports, services, and vulnerabilities
Resolve domains to IPs or map IPs back to hostnames
Search for known vulnerabilities (CVE) and assess severity
Discover internet-connected devices using custom search queries
Track CVEs affecting specific products or CPE identifiers

FAQ from Shodan MCP Server

What do I need to use Shodan MCP Server?

A valid Shodan API key from your Shodan account and Node.js v20 or later.

How do I obtain an API key?

What common errors can occur?

401 Unauthorized (invalid or missing API key), 402 Payment Required (out of query credits), and 429 Too Many Requests (rate limit exceeded).

How can I test my API key?

Use curl to verify: curl "https://api.shodan.io/dns/resolve?hostnames=google.com&key=your-api-key". Or start with a simple DNS lookup via the server.

Where does the data come from?

All data is retrieved live from Shodan’s public API and Shodan CVEDB. The server does not store or cache data locally.

Frequently asked questions

What do I need to use Shodan MCP Server?

A valid Shodan API key from your Shodan account and Node.js v20 or later.

How do I obtain an API key?

What common errors can occur?

401 Unauthorized (invalid or missing API key), 402 Payment Required (out of query credits), and 429 Too Many Requests (rate limit exceeded).

How can I test my API key?

Use `curl` to verify: `curl "https://api.shodan.io/dns/resolve?hostnames=google.com&key=your-api-key"`. Or start with a simple DNS lookup via the server.

Where does the data come from?

All data is retrieved live from Shodan’s public API and Shodan CVEDB. The server does not store or cache data locally.

Comments

Basic information

More Developer Tools MCP servers

Termany

thinkany-ai

Agent-Native Terminal

174

Reelier

Maxime Houle

Agents make claims. Reelier writes receipts — record an agent's tool-call workflow once, replay it deterministically at 0 tokens, and diff runs to catch drift.

Raccha AI

Shree Mandadi

MCP-first toolbox for agents: namespaced key-value storage, a FIFO queue, auth, and a handful of stateless utility tools (JWT decode, hashing, cert inspection, CIDR math). Free while in early access. This repository is a

TaskerArmy Agent

TaskerArmy

Ask Claude or ChatGPT what Shopify theme optimization tasks are pending on your store, a remote MCP server for TaskerArmy Agent accounts.

Skilder.ai

skilder.ai

Run skills and MCP tools like production software: versioned, composed into roles, distributed to every agent from one governed library.