A Model Context Protocol (MCP) server for querying the Shodan API and Shodan CVEDB. This server provides comprehensive access to Shodan's network intelligence and security services, including IP reconnaissance, DNS operations, vulnerability tracking, and device discovery. All tools provide structured, formatted output for easy analysis and integration. To install Shodan Server for Claude Desktop a
Add this skill
npx mdskills install BurtTheCoder/mcp-shodanWell-documented MCP server with comprehensive Shodan API integration and clear tool descriptions
A Model Context Protocol (MCP) server for querying the Shodan API and Shodan CVEDB. This server provides comprehensive access to Shodan's network intelligence and security services, including IP reconnaissance, DNS operations, vulnerability tracking, and device discovery. All tools provide structured, formatted output for easy analysis and integration.
To install Shodan Server for Claude Desktop automatically via Smithery:
npx -y @smithery/cli install @burtthecoder/mcp-shodan --client claude
npm install -g @burtthecoder/mcp-shodan
{
"mcpServers": {
"shodan": {
"command": "mcp-shodan",
"env": {
"SHODAN_API_KEY": "your-shodan-api-key"
}
}
}
}
Configuration file location:
~/Library/Application Support/Claude/claude_desktop_config.json%APPDATA%\Claude\claude_desktop_config.jsonIf you prefer to run from source or need to modify the code:
git clone https://github.com/BurtTheCoder/mcp-shodan.git
cd mcp-shodan
npm install
npm run build
{
"mcpServers": {
"shodan": {
"command": "node",
"args": ["/absolute/path/to/mcp-shodan/build/index.js"],
"env": {
"SHODAN_API_KEY": "your-shodan-api-key"
}
}
}
}
ip_lookupip (required): IP address to lookupshodan_searchquery (required): Shodan search querymax_results (optional, default: 10): Number of results to returncve_lookupcve (required): CVE identifier in format CVE-YYYY-NNNNN (e.g., CVE-2021-44228)dns_lookuphostnames (required): Array of hostnames to resolvereverse_dns_lookupips (required): Array of IP addresses to lookupcpe_lookupproduct (required): Name of the product to search forcount (optional, default: false): If true, returns only the count of matching CPEsskip (optional, default: 0): Number of CPEs to skip (for pagination)limit (optional, default: 1000): Maximum number of CPEs to returncves_by_productcpe23 (optional): CPE 2.3 identifier (format: cpe:2.3:part:vendor:product:version)product (optional): Name of the product to search for CVEscount (optional, default: false): If true, returns only the count of matching CVEsis_kev (optional, default: false): If true, returns only CVEs with KEV flag setsort_by_epss (optional, default: false): If true, sorts CVEs by EPSS scoreskip (optional, default: 0): Number of CVEs to skip (for pagination)limit (optional, default: 1000): Maximum number of CVEs to returnstart_date (optional): Start date for filtering CVEs (format: YYYY-MM-DDTHH:MM:SS)end_date (optional): End date for filtering CVEs (format: YYYY-MM-DDTHH:MM:SS)If you see API key related errors (e.g., "Request failed with status code 401"):
Verify your API key:
Common Error Codes:
Configuration Steps: a. Get your API key from Shodan Account b. Add it to your configuration file:
{
"mcpServers": {
"shodan": {
"command": "mcp-shodan",
"env": {
"SHODAN_API_KEY": "your-actual-api-key-here"
}
}
}
}
c. Save the config file d. Restart Claude Desktop
Testing Your Key:
curl "https://api.shodan.io/dns/resolve?hostnames=google.com&key=your-api-key"
If you see module loading errors:
Build the project:
npm install
npm run build
Test interactively with FastMCP's built-in dev tool:
npx fastmcp dev build/index.js
The server includes comprehensive error handling for:
@modelcontextprotocol/sdk to FastMCP — modular tool files, automatic schema validation, simplified error handlinggit checkout -b feature/amazing-feature)git commit -m 'Add amazing feature')git push origin feature/amazing-feature)This project is licensed under the MIT License - see the LICENSE file for details.
Install via CLI
npx mdskills install BurtTheCoder/mcp-shodanShodan MCP Server is a free, open-source AI agent skill. A Model Context Protocol (MCP) server for querying the Shodan API and Shodan CVEDB. This server provides comprehensive access to Shodan's network intelligence and security services, including IP reconnaissance, DNS operations, vulnerability tracking, and device discovery. All tools provide structured, formatted output for easy analysis and integration. To install Shodan Server for Claude Desktop a
Install Shodan MCP Server with a single command:
npx mdskills install BurtTheCoder/mcp-shodanThis downloads the skill files into your project and your AI agent picks them up automatically.
Shodan MCP Server works with Claude Code, Claude Desktop, Cursor, Vscode Copilot, Windsurf, Continue Dev, Gemini Cli, Amp, Roo Code, Goose. Skills use the open SKILL.md format which is compatible with any AI coding agent that reads markdown instructions.