How do I install the mcp mcp server?

Use a recorded configuration for your client, replace example credential values and paths, and verify the documented runtime. Restart or reconnect the client, then inspect the available tools.

What credentials does it need?

The recorded environment keys are `SHODAN_API_KEY`, `SHODAN_BASE_URL`, `SHODAN_AUTH_TOKEN`, `SHODAN_CVEDB_URL`, `MCP_HTTP_HOST`. Keep credentials outside committed files and confirm the configuration required by your installed version.

SSyncDev

Start a project

MCP Server — TocharianOU/mcp-shodan

Shodan MCP Server – network reconnaissance, DNS operations, and vulnerability intelligence

Local serverstdio

What is the MCP Server?

Shodan MCP Server – network reconnaissance, DNS operations, and vulnerability intelligence

The short version

Get your API key at account.shodan.io.

IP reconnaissance — — open ports, running services, banners, SSL certificates, cloud provider detection
Device search — — query Shodan's internet-wide scan database with advanced filters and geographic distribution
DNS operations — — forward and reverse DNS lookups for domains and IP addresses
Vulnerability intelligence — — CVE details (CVSS v2/v3, EPSS, KEV status), CPE lookups, and product-specific CVE tracking via CVEDB

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
ip_lookup	IP address analysis: ports, services, banners, cloud provider, hostnames
shodan_search	Search internet-connected devices with country distribution stats
dns_lookup	Batch forward DNS resolution (hostnames → IPs)
reverse_dns_lookup	Batch reverse DNS lookup (IPs → hostnames)
cve_lookup	CVE details: CVSS v2/v3, EPSS, KEV status, ransomware associations
cpe_lookup	Search CPE entries by product name with pagination
cves_by_product	All CVEs for a product or CPE 2.3 identifier with filtering

How to install the MCP Server

{
  "mcpServers": {
    "shodan": {
      "command": "npx",
      "args": ["-y", "@tocharianou/mcp-shodan"],
      "env": {
        "SHODAN_API_KEY": "<your-api-key>"
      }
    }
  }
}

Configuration as documented by the project. Restart the client after saving.

Configuration

Variable	Description	Required
SHODAN_API_KEY	Credential the server authenticates with.	Yes
SHODAN_BASE_URL	Endpoint or connection string the server talks to.	Yes
SHODAN_AUTH_TOKEN	Credential the server authenticates with.	Yes
SHODAN_CVEDB_URL	Endpoint or connection string the server talks to.	Yes
MCP_HTTP_HOST	Endpoint or connection string the server talks to.	Optional

Example prompts to try

“Use MCP to ip lookup.”
“Use MCP to shodan search.”
“Use MCP to dns lookup.”

Frequently asked questions

Shodan MCP Server – network reconnaissance, DNS operations, and vulnerability intelligence Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.