Shodan
Shodan is an MCP server that adds tools to AI assistants such as Claude Desktop, Claude Code and Cursor. MCP server for Shodan API — device search, IP lookup, DNS, and CVE/CPE queries. It has 178 GitHub stars, is released under the MIT license and runs locally with npx -y @burtthecoder/mcp-shodan.
github.com/w0h1v/mcp-shodan (opens in a new tab)
Data as of from the GitHub API and the official MCP registry; description from the project's repository. Report an error
Install Shodan
Generated from the server's MCP registry entry. Replace your-value with your own values.
Claude Desktop
{
"mcpServers": {
"shodan": {
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-shodan"
],
"env": {
"SHODAN_API_KEY": "your-value"
}
}
}
}Settings > Developer > Edit Config. macOS: ~/Library/Application Support/Claude/, Windows: %APPDATA%\Claude\. Restart Claude Desktop afterwards.
Claude Code
claude mcp add --env SHODAN_API_KEY=your-value --transport stdio shodan -- npx -y @burtthecoder/mcp-shodanCursor
{
"mcpServers": {
"shodan": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-shodan"
],
"env": {
"SHODAN_API_KEY": "your-value"
}
}
}
}Project file; use ~/.cursor/mcp.json to enable it in every project.
VS Code
{
"inputs": [
{
"type": "promptString",
"id": "shodan_api_key",
"description": "SHODAN_API_KEY",
"password": true
}
],
"servers": {
"shodan": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@burtthecoder/mcp-shodan"
],
"env": {
"SHODAN_API_KEY": "${input:shodan_api_key}"
}
}
}
}Config formats checked against the official docs on Oct 7, 2026: modelcontextprotocol.io (opens in a new tab), code.claude.com (opens in a new tab), cursor.com (opens in a new tab), code.visualstudio.com (opens in a new tab).
Environment variables
Variables the server reads at startup.
| Name | Required | Description |
|---|---|---|
SHODAN_API_KEYsecret | Yes | Your Shodan API key |
About Shodan
Quickstart · Tools · HTTP · Security · Troubleshooting · Docs mcp-shodan is an MCP server that gives AI agents access to the Shodan API and Shodan CVEDB. Hand your agent an IP, hostname, search query, product or CVE and get back what an analyst would look at: open ports and banners, TLS certificates, DNS, and vulnerability severity with EPSS and KEV status.
- mcp
- osint
- reconnaissance
- security
- shodan
- ai-tools
- claude
- cpe
- cve
- cybersecurity
Similar MCP servers
More other MCP servers
Agentql MCP
tinyfish-io/agentql-mcp
Model Context Protocol server that integrates AgentQL's data extraction capabilities.
Maintained · last commit Oct 22, 2026
OtherTypeScriptHostinger API MCP
hostinger/api-mcp-server
Model Context Protocol (MCP) server for Hostinger API.
Active · last commit Oct 26, 2026
OfficialOtherTypeScriptMCP Slim Guard
lennney/mcp-slim-guard
76% fewer MCP tokens in our standard benchmark.
Too new to judge · created Jul 31, 2026
OtherTypeScriptPubmed MCP Server
cyanheads/pubmed-mcp-server
Search PubMed/Europe PMC, fetch articles and full text (PMC/EPMC/Unpaywall), citations, MeSH terms.
Active · last commit Oct 26, 2026
OtherTypeScriptIllustrator MCP Server
ie3jp/illustrator-mcp-server
Adobe Illustrator MCP with 66 tools — more than the official Illustrator MCP.
Active · last commit Sep 26, 2026
OtherTypeScriptZotero MCP
kujenga/zotero-mcp
Search your Zotero library, retrieve item metadata, and read full text from AI assistants.
Active · last commit Aug 7, 2026
OtherPython
How do I install the Shodan MCP server?
Add the command npx -y @burtthecoder/mcp-shodan to your MCP client: put it in claude_desktop_config.json for Claude Desktop, run claude mcp add for Claude Code, or add it to .cursor/mcp.json (Cursor) or .vscode/mcp.json (VS Code). The snippets on this page are ready to paste.
Is Shodan free?
The server is open source under the MIT license, so running it is free. It needs credentials (SHODAN_API_KEY) for the service it connects to, which may require a paid account.
Is Shodan actively maintained?
The most recent commit was on Oct 12, 2026. The latest release is v1.0.30, published Sep 8, 2026. appsgit only lists MCP servers with a commit in the last six months.