Shodan MCP Server
@X3r0K
About Shodan MCP Server
This is a Model Context Protocol (MCP) server that provides access to the Shodan API. It allows you to programmatically query Shodan for information about devices, vulnerabilities, and more.
Config
Add this server to your MCP-compatible client using the configuration below.
{
"mcpServers": {
"Shodan-MCP-Server-Inspector": {
"command": "node",
"args": [
"build/index.js"
]
}
}
}Tools
9Search for devices and services using Shodan's search syntax
`log4j country:US city:Atlanta`
List of matching devices with detailed information
Domain name to resolve
`example.com`
DNS records and related information
CVE identifier
`CVE-2021-44228`
Detailed vulnerability information
Overview
What is Shodan MCP Server?
The Shodan MCP Server is a Model Context Protocol server that exposes Shodan’s internet scanning and reconnaissance capabilities through a standardized interface. It allows querying Shodan’s database of internet-connected devices, services, and vulnerabilities. It is intended for developers using AI models or tools that implement the MCP standard.
How to use Shodan MCP Server?
Clone the repository, install dependencies with npm install, create a .env.local file with SHODAN_API_KEY=your_api_key_here, build the server with npm run build, then start it with node build/index.js. The server exposes three tools: Search, DNS Lookup, and CVE Info, which can be tested via the MCP inspector.
Key features of Shodan MCP Server
- Search capabilities using advanced Shodan filters
- DNS lookup for domain resolution and records
- CVE information retrieval for vulnerabilities
- Get vulnerabilities related to an IP address
- Standardized interface via the MCP protocol
- Environment variable support for secure API key management
Use cases of Shodan MCP Server
- Search for internet-connected devices using Shodan’s search syntax
- Resolve domain names and get detailed DNS records
- Retrieve detailed information about specific CVEs
- Get vulnerabilities associated with a given IP address
FAQ from Shodan MCP Server
What are the prerequisites for using Shodan MCP Server?
Node.js (v14 or higher), npm (v6 or higher), and a Shodan API key are required.
How do I install and configure the server?
Clone the repository, run npm install, create a .env.local file with SHODAN_API_KEY=your_api_key_here, then build with npm run build and start with node build/index.js.
What tools does the server provide?
The server provides a Search tool for querying Shodan’s database, a DNS Lookup tool, and a CVE Info tool.
How do I protect my API key?
Never commit API keys to version control; use environment variables for sensitive data and rotate keys regularly.
What error handling is implemented?
The server handles invalid API keys, rate limiting, network issues, invalid queries, and server errors.
Frequently asked questions
What are the prerequisites for using Shodan MCP Server?
Node.js (v14 or higher), npm (v6 or higher), and a Shodan API key are required.
How do I install and configure the server?
Clone the repository, run `npm install`, create a `.env.local` file with `SHODAN_API_KEY=your_api_key_here`, then build with `npm run build` and start with `node build/index.js`.
What tools does the server provide?
The server provides a Search tool for querying Shodan’s database, a DNS Lookup tool, and a CVE Info tool.
How do I protect my API key?
Never commit API keys to version control; use environment variables for sensitive data and rotate keys regularly.
What error handling is implemented?
The server handles invalid API keys, rate limiting, network issues, invalid queries, and server errors.
Basic information
More Developer Tools MCP servers

Skilder.ai
skilder.aiRun skills and MCP tools like production software: versioned, composed into roles, distributed to every agent from one governed library.
AptiBuild AI — Career Intelligence
ParklandBuildsAptiBuild AI — Career Intelligence MCP Server Structured career decision scaffolding for AI agents. Provides personality-conditioned business idea generation, official BLS OEWS wage data, FRED labor market signals, and

Routebase
RoutebaseRoutebase keeps your API's design, docs, contract tests, mocks and monitoring in one living OpenAPI spec so they can't drift apart. Agents work on that same source of truth, under your team's permissions.
OrangePro
Aamir SiddiquiOrangePro local-first CLI + MCP server for behavior mapping, grounded test generation, and dynamic proof.

Moxie Docs
Jackalope-DevAutomated codebase documentation for GitHub: searchable docs, MCP context for AI agents, doc drift detection, and Friday Cleanup PRs.
Comments