Shodan MCP server
MCP server exposing all Shodan API functionality
1 stars17 downloads/wk
Reviews
Write oneNobody has reviewed Shodan yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Shodan tools (20, 2 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
shodan_alertsList all of the active alerts that the user created.
shodan_countReturns the total number of search results for the query.
shodan_create_alertwrite actionCreate a new alert.
shodan_delete_alertwrite actionDelete the alert with the given ID.
shodan_exploits_countSearch the Shodan Exploits archive and return total count.
shodan_exploits_searchSearch the Shodan Exploits archive.
shodan_hostGet all available information on an IP.
shodan_infoReturns information about the current API key.
shodan_portsGet a list of ports that Shodan crawls.
shodan_protocolsGet a list of protocols that the Shodan on-demand scanning API supports.
shodan_queriesList the search queries that have been shared by other users.
shodan_queries_searchSearch the directory of saved search queries in Shodan.
shodan_queries_tagsGet popular query tags.
shodan_scanScan a network using Shodan.
shodan_scan_internetScan the internet using Shodan.
shodan_scan_statusGet the status information about a previously submitted scan.
shodan_searchSearch the SHODAN database.
shodan_search_cursorSearch the SHODAN database and return an iterator.
shodan_search_tokensReturns information about the search query itself.
shodan_servicesGet a list of services that Shodan crawls.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- Code scan4 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 159 days ago8/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
How Shodan compares
Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 82/100
- higher than 63% of 48,273 servers
- Tools
- 20
- the typical server has 7
- Tools that change things
- 10%
- typical: 0%. Fewer write tools means less an agent can break
- GitHub stars
- 1
- more than 65% of 28,534 servers
- Downloads a week
- 17
- more than 5% of 11,915 servers with a package
What its tools let an agent do: 18 read · 2 change
Install Shodan in Claude Code, Cursor or VS Code
claude mcp add mcp-shodan -- uvx mcp-shodan
What the publisher says
From the Shodan repository's README, as published. We do not edit it. Read it on GitHub
mcp-shodan
MCP server exposing Shodan API functionality via the Model Context Protocol.
Install
pip install mcp-shodanUsage
export SHODAN_API_KEY=your_api_key
mcp-shodanOr add to your MCP configuration:
{
"mcpServers": {
"shodan": {
"command": "mcp-shodan",
"env": {
"SHODAN_API_KEY": "your_api_key"
}
}
}
}Available Tools
Host Information
- shodan_host - Get all available information on an IP address
Search
- shodan_search - Search the Shodan database
- shodansearchcursor - Search and return an iterator
- shodan_count - Get total number of search results
- shodansearchtokens - Get information about a search query
Alerts
- shodan_alerts - List all active alerts
- shodancreatealert - Create a new alert
- shodandeletealert - Delete an alert
Scanning
- shodan_scan - Scan a network
- shodanscaninternet - Scan the internet on a port
- shodanscanstatus - Get scan status
Saved Queries
- shodan_queries - List shared search queries
- shodanqueriessearch - Search saved queries
- shodanqueriestags - Get popular query tags
Exploits
- shodanexploitssearch - Search the Shodan Exploits archive
- shodanexploitscount - Get total exploit count
Utilities
- shodan_info - Get API key information
- shodan_ports - Get list of ports Shodan crawls
- shodan_protocols - Get supported protocols
- shodan_services - Get list of services
Example
# Get information about a host
shodan_host("1.1.1.1")
# Search for specific services
shodan_search("apache", limit=10)
# Count results for a query
shodan_count("nginx")
# Check your API plan
shodan_info()mcp-name: io.github.daedalus/mcp-shodan
Nothing above is checked by us. What we check is on the safety report.
Shodan: common questions
- Is Shodan MCP server safe?
- Mostly: it is graded B (82/100). Read the Shodan safety report
- How do I install Shodan?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Shodan need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Shodan maintained?
- The last commit was 195 days ago (2026-04-21). The latest release is v0.1.0.
- How does Shodan compare with other MCP servers?
- safety score 82/100 (higher than 63% of 48,273 servers); tools 20 (the typical server has 7); tools that change things 10% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.