BurtTheCoder/mcp-shodan
Free用于查询 Shodan API 和 Shodan CVEDB 的 MCP 服务器。提供 IP 查找、设备搜索、DNS 查找、漏洞查询等工具。
FreeFree tier
About BurtTheCoder/mcp-shodan
MCP server for Shodan — a Model Context Protocol server that provides comprehensive access to Shodan's network intelligence and security services. It enables IP reconnaissance, DNS operations, vulnerability tracking via Shodan CVEDB, and device discovery. Outputs structured, formatted data for integration with Claude Code, Codex, Gemini CLI, and Claude Desktop. Supports tools including IP lookup (geolocation, open ports, services, SSL certs, cloud provider), Shodan search (internet-connected devices with advanced filtering), DNS forward/reverse lookups, and CVE/CPE vulnerability lookups.
Key Features
IP reconnaissance with geolocation, open ports, running services, SSL certificates, hostnames, and cloud provider details
Shodan search across internet-connected devices with advanced filtering
Forward and reverse DNS lookups for domains and IP addresses
CVE lookup for detailed vulnerability information via Shodan CVEDB
CPE lookup to find CVEs for specific products
Structured, formatted output for easy analysis and integration
Compatible with Claude Code, Codex, Gemini CLI, and Claude Desktop
Easy installation via npm or npx with environment variable configuration
Supports Docker deployment and automatic setup via Smithery
Open source under MIT License
Pros & Cons
Pros
- Free and open-source with MIT license
- Comprehensive access to Shodan's network intelligence and CVEDB
- Works with multiple popular AI coding assistants (Claude Code, Codex, Gemini CLI)
- Structured output for easy analysis and automation
- Easy setup via npm or npx with clear documentation
Cons
- Requires a Shodan API key, which may have usage limits depending on Shodan plan
- Dependent on Shodan's data availability and update frequency
- Setup requires manual configuration of API key in environment variables
- Documentation could be more detailed for advanced use cases
Best For
Security research and threat intelligence gatheringNetwork reconnaissance and asset discoveryVulnerability assessment and CVE trackingDNS troubleshooting and domain analysisPenetration testing and attack surface mappingIntegrating Shodan data into AI-assisted development workflows
FAQ
What is mcp-shodan?
It is a Model Context Protocol (MCP) server that provides tools to query the Shodan API and Shodan CVEDB for IP reconnaissance, DNS lookups, vulnerability intelligence, and device discovery.
How do I install mcp-shodan?
You can install it globally via npm (`npm install -g @burtthecoder/mcp-shodan`) or run it on the fly with npx (`npx -y @burtthecoder/mcp-shodan`). It can also be installed via Smithery for Claude Desktop.
Do I need an API key?
Yes, a Shodan API key is required. Set it as the environment variable `SHODAN_API_KEY` when adding the server to your MCP client configuration.
Which tools are provided?
Tools include `ip_lookup` (IP details), `shodan_search` (device search), `dns_lookup` (forward DNS), `dns_reverse_lookup` (reverse DNS), `cve_lookup` (CVE details), and `cpe_lookup` (product-specific CVEs).
Which clients are supported?
It works with Claude Code, Codex CLI, Gemini CLI, and Claude Desktop via the Model Context Protocol.