shodan

Our take

One of the earliest security-focused MCP servers, wrapping the Shodan API and its CVEDB: IP reconnaissance, DNS lookups, internet-connected device search, and CVE/CPE vulnerability queries with structured output. Maintained since late 2024, it installs cleanly via npx across Claude, Codex, and Gemini CLIs. It requires a Shodan API key, and meaningful search access effectively needs a paid Shodan plan; note the author's account has been renamed, so the repo now lives at w0h1v/mcp-shodan. A solid pick for security researchers and defenders doing reconnaissance from an agent.

reviewed by hand · 2026-07-05

Something wrong or dead here? Report it

Verification record

last verified

8 days ago

github stars

150

last commit

5 mo ago

archived

no

license

MIT

npm

@burtthecoder/mcp-shodan

latest version

1.0.22

in registry since

2026-03-03

github.com/BurtTheCoder/mcp-shodan