Shodan MCP Server

A Model Context Protocol (MCP) server for querying the Shodan API and Shodan CVEDB. This server provides comprehensive access to Shodan's network intelligence and security services, including IP reconnaissance, DNS…

Local serverstdioMIT

What is the Shodan MCP Server?

Shodan source profile. From the maintainer documentation: “A Model Context Protocol (MCP) server for querying the Shodan API and Shodan CVEDB. This server provides comprehensive access to Shodan's network intelligence and security services, including IP reconnaissance, DNS operations, vulnerability tracking, and device discovery. All tools provide structured, formatted output for easy analysis and integration.”

Local setup

The project provides a local client configuration using mcp-shodan. Follow the repository’s build and installation steps before copying it, and replace example paths with the paths on your own computer.

Configuration values

The example declares SHODAN_API_KEY. Secret-looking values have been replaced with placeholders. Required and optional labels are shown only when the documentation states them.

Source

Project documentation · Repository · Discovery listing. This profile records the public documentation checked on 2026-10-08.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

ToolWhat it does
Parameterscpe23 (optional): CPE 2.3 identifier (format: cpe:2.3:part:vendor:product:version)
ReturnsQuery information
Locationcountry, city, coordinates)
Servicesports, protocols, banners)
max_resultsoptional, default: 10): Number of results to return
Countrybased distribution statistics
countoptional, default: false): If true, returns only the count of matching CVEs
skipoptional, default: 0): Number of CVEs to skip (for pagination)
limitoptional, default: 1000): Maximum number of CVEs to return
productoptional): Name of the product to search for CVEs
is_kevoptional, default: false): If true, returns only CVEs with KEV flag set
sort_by_epssoptional, default: false): If true, sorts CVEs by EPSS score
start_dateoptional): Start date for filtering CVEs (format: YYYY-MM-DDTHH:MM:SS)
end_dateoptional): End date for filtering CVEs (format: YYYY-MM-DDTHH:MM:SS)
NotesMust provide either cpe23 or product, but not both

How to install the Shodan MCP Server

{
  "mcpServers": {
    "shodan": {
      "command": "mcp-shodan",
      "env": {
        "SHODAN_API_KEY": "YOUR_SHODAN_API_KEY"
      }
    }
  }
}

From the project documentation. Replace placeholders and example paths before connecting.

Configuration

VariableDescriptionRequired
SHODAN_API_KEYDeclared in the maintainer’s client configuration.Check documentation