mcp-shodanMCP server for querying the Shodan API

— (0)

Reviewed by Daniel Nikulshyn·Updated July 2026

Overview

This is a Model Context Protocol (MCP) server for querying the Shodan API and Shodan CVEDB. It provides comprehensive access to Shodan's network intelligence and security services, including IP reconnaissance, DNS operations, vulnerability tracking, and device discovery. The server offers tools for various tasks such as IP lookups, Shodan searches, and CVE lookups. Users can install the server via various methods including Claude Code, Codex CLI, Gemini CLI, and Smithery, or manually via npm. The server requires a Shodan API key for operation and returns structured, formatted output for easy analysis and integration. It also supports querying detailed information about IP addresses, conducting forward and reverse DNS lookups, and accessing vulnerability intelligence from Shodan's CVEDB.

Key features

Network Reconnaissance: Query detailed information about IP addresses
DNS Operations: Forward and reverse DNS lookups
Vulnerability Intelligence: Access to Shodan's CVEDB
Device Discovery: Search Shodan's database of internet-connected devices
IP Lookup Tool: Retrieve comprehensive information about an IP address
Shodan Search Tool: Search Shodan's database of internet-connected devices

Pricing

Model: Free
Category: MCP Servers
Rating: No reviews yet

Use cases

IP Address Investigation

Use the IP Lookup Tool to retrieve comprehensive information about an IP address, including geolocation, open ports, and running services.

Vulnerability Research

Utilize the CVE Lookup Tool to access detailed vulnerability information from Shodan's CVEDB and perform CPE lookups.

Network Device Discovery

Leverage the Shodan Search Tool to search Shodan's database of internet-connected devices with advanced filtering.

Pros & Cons

Pros

Provides comprehensive access to Shodan's network intelligence and security services
Offers structured, formatted output for easy analysis and integration
Supports multiple installation methods, including Claude Code, Codex CLI, Gemini CLI, and manual installation via npm

Cons

Requires a Shodan API key for installation and usage
May require manual configuration for advanced use cases or custom integrations

Reviews

No reviews yet. Be the first!

Q&A

Are there any limitations on using mcp-shodan?

The tool relies on Shodan’s API, so usage is subject to Shodan’s rate limits and pricing. Advanced use cases may need manual configuration for custom integrations.

Asked by Noor Siddiqui · Jun 6, 2025

What types of queries can I perform with mcp-shodan?

The server supports IP lookups, forward and reverse DNS queries, device discovery searches, general Shodan searches, and CVE lookups from Shodan’s CVEDB, returning structured and formatted results for easy analysis.

Asked by Yaw Owusu · May 25, 2025

What credentials are needed to use the server?

A valid Shodan API key is required for both installation and every query, as the server acts as a wrapper around Shodan’s API and CVEDB.

Asked by Farah Rahimi · May 15, 2025

How do I install mcp-shodan?

You can install it via Claude Code, Codex CLI, Gemini CLI, Smithery, or manually using npm. Follow the corresponding installation guide for your preferred method.

Asked by Kwabena Asante · Apr 19, 2025