mcp-shodan MCP server

MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.

What mcp-shodan does

Summarised from the project README; check the repository for the latest details.

Features

• Host reconnaissance. Open ports, products and versions, known CVEs, TLS certificate details (fingerprint, JARM, JA3S), cloud provider and banner history for any IPv4 or IPv6 address.
• Device search. Shodan query syntax with paging and facet breakdowns (country, org, port, vuln and more), plus a free count-only mode for sizing a query.
• Vulnerability intelligence. CVE details with CVSS v4/v3/v2, EPSS and KEV; CVEs by product or CPE, sortable by EPSS. CVEDB is free and doesn't spend query credits.
• DNS. Subdomains and DNS records for a domain, and forward and reverse lookups for many names or IPs in one call.
• Credit-aware. Free tools are marked as free, and `apiinfo` shows the credits left on your plan.
• Two transports. stdio for desktop clients, HTTP streaming for a shared service.

Tools exposed (3)

• Group – Tool
• Network – `iplookup`
• Helpers – `searchfilters`

How to install mcp-shodan

Listed on Socketlist – add this badge to your README:

Badge markdown[](https://socketlist.pages.dev/s/w0h1v-mcp-shodan/)

Maintain this project? Get it featured for free during launch →

Compare with ida-pro-mcp →

Related Security MCP servers