Back to MCP Directory

Shodan

Model Context Protocol moderate risk

Shodan

This MCP server provides access to Shodan's network intelligence, vulnerability, and device data via API, enabling reconnaissance and security analysis.

Connections & Capabilities

Connects To

GitHub

Capabilities

read

Quickstart

Install

npx -y @smithery/cli install @burtthecoder/mcp-shodan --client claude

Config

{
  "mcpServers": {
    "shodan": {
      "command": "mcp-shodan",
      "env": {
        "SHODAN_API_KEY": "your-shodan-api-key"
      }
    }
  }
}

Exposed MCP Tools (7)

safe

ip_lookup

Retrieves comprehensive information about a given IP address, including geolocation, open ports, and services.

Read-only operation; retrieves existing data.

safe

shodan_search

Searches Shodan's database of internet-connected devices based on a provided query.

Read-only operation; retrieves existing data.

safe

cve_lookup

Queries detailed vulnerability information from Shodan's CVEDB using a CVE identifier.

Read-only operation; retrieves existing data.

safe

dns_lookup

Resolves domain names to IP addresses using Shodan's DNS service.

Read-only operation; retrieves existing data.

safe

reverse_dns_lookup

Performs reverse DNS lookups to find hostnames associated with IP addresses.

Read-only operation; retrieves existing data.

safe

cpe_lookup

Searches for Common Platform Enumeration (CPE) entries by product name.

Read-only operation; retrieves existing data.

safe

cves_by_product

Searches for vulnerabilities affecting specific products or CPEs.

Read-only operation; retrieves existing data.

Safety Assessment

This server is generally safe for reconnaissance and information gathering. However, users must protect their Shodan API key and be mindful of the data they are querying to avoid unintended information disclosure. Rate limiting can impact availability.

Read-only access to network and vulnerability data.
No direct execution or system-level access.
API key authentication adds a layer of security.
Well-defined tool parameters limit potential misuse.

Exposure of Shodan API key if misconfigured.
Potential for information leakage if queries are not carefully constructed.
Reliance on Shodan's security posture.
Rate limits could impact availability.