MCP server

Shodan

io.github.w0h1v/shodan

Checked 26 Oct 2026, 08:31 UTC · Still published on its registry; checked against OSV.dev; never run by us

MCP server for Shodan API — device search, IP and domain recon, DNS, and CVE/CPE queries.

Source

At a glance

Type

MCP server

Publisher

Not verified

Status

Runs on your computer

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code

Last checked

26 Oct 2026, 08:31 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. It then runs the package on your computer with your permissions. For other apps, copy the setup below.

Claude Code

claude mcp add shodan --env SHODAN_API_KEY=YOUR_VALUE -- npx -y @burtthecoder/mcp-shodan@1.0.34

Claude Desktop

{"mcpServers":{"shodan":{"command":"npx","args":["-y","@burtthecoder/mcp-shodan@1.0.34"],"env":{"SHODAN_API_KEY":"YOUR_VALUE"}}}}

Codex (config.toml)

[mcp_servers.shodan]
command = "npx"
args = ["-y","@burtthecoder/mcp-shodan@1.0.34"]
env = { SHODAN_API_KEY = "YOUR_VALUE" }

Gemini CLI

{"mcpServers":{"shodan":{"command":"npx","args":["-y","@burtthecoder/mcp-shodan@1.0.34"],"env":{"SHODAN_API_KEY":"YOUR_VALUE"}}}}

Cursor

{"mcpServers":{"shodan":{"command":"npx","args":["-y","@burtthecoder/mcp-shodan@1.0.34"],"env":{"SHODAN_API_KEY":"YOUR_VALUE"}}}}

VS Code

{"servers":{"shodan":{"type":"stdio","command":"npx","args":["-y","@burtthecoder/mcp-shodan@1.0.34"],"env":{"SHODAN_API_KEY":"YOUR_VALUE"}}}}

Runs on your computer with your permissions: check the package and its source before installing. Replace YOUR_VALUE with your own SHODAN_API_KEY.

Browse

• GitHub tools
• Domains and DNS
• GitHub and code hosting
• Security scanning

Related MCP servers

• Shodan
  Shodan MCP — wraps the full Shodan REST API (api.shodan.io)
• Cognita
  Passive OSINT and security recon: DNS, TLS, email posture, IP reputation, CVE/KEV, CT logs.
• EchelonGraph CVE & Exposure
  CVE, KEV, EPSS, SBOM and advisory lookups; per-CVE exposure from Shodan data (© Shodan). Keyless.
• ContrastAPI
  55 tools, 7 Resources, Sigma rules, email SPF/DMARC, MITRE, CVE/KEV, risk_score. No key.
• BlackVeil DNS & Email Security Scanner
  DNS and email security scanner with 81 MCP tools for SPF, DMARC, DNSSEC, SSL, and brand audits.
• AgentDiet Domain OSINT, TLS Certificate & Security Headers Recon
  Inspects live IPv4/IPv6 DNS resolution, TLS certificate issuer/expiry, and HTTP security grade.
• openFDA MCP by usefulapi
  Search openFDA drug, device, food and adverse-event datasets.
• Domain & Company Intel MCP
  Domain intel for AI agents: RDAP registration, DNS, email deliverability, tech stack.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/io.github.w0h1v/shodan.svg)](https://aptlynx.net/servers/io.github.w0h1v/shodan)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents