Shodan

{
  "mcpServers": {
    "shodan": {
      "command": "npx",
      "args": [
        "-y",
        "@burtthecoder/mcp-shodan"
      ],
      "env": {
        "SHODAN_API_KEY": "your-value"
      }
    }
  }
}

claude mcp add --env SHODAN_API_KEY=your-value --transport stdio shodan -- npx -y @burtthecoder/mcp-shodan

{
  "mcpServers": {
    "shodan": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@burtthecoder/mcp-shodan"
      ],
      "env": {
        "SHODAN_API_KEY": "your-value"
      }
    }
  }
}

{
  "inputs": [
    {
      "type": "promptString",
      "id": "shodan_api_key",
      "description": "SHODAN_API_KEY",
      "password": true
    }
  ],
  "servers": {
    "shodan": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@burtthecoder/mcp-shodan"
      ],
      "env": {
        "SHODAN_API_KEY": "${input:shodan_api_key}"
      }
    }
  }
}

Config formats checked against the official docs on Oct 7, 2026: modelcontextprotocol.io (opens in a new tab), code.claude.com (opens in a new tab), cursor.com (opens in a new tab), code.visualstudio.com (opens in a new tab).

• query

  Shodan search query

• max_results

  Number of results to return

• hostnames

  Array of hostnames to resolve

• product

  Name of the product to search for

• count

  If true, returns only the count of matching CPEs

• skip

  Number of CPEs to skip (for pagination)

• limit

  Maximum number of CPEs to return

• cpe23

  CPE 2.3 identifier (format: cpe:2.3:part:vendor:product:version)

• is_kev

  If true, returns only CVEs with KEV flag set

• sort_by_epss

  If true, sorts CVEs by EPSS score

• start_date

  Start date for filtering CVEs (format: YYYY-MM-DDTHH:MM:SS)

• end_date

  End date for filtering CVEs (format: YYYY-MM-DDTHH:MM:SS)

A Model Context Protocol (MCP) server for querying the Shodan API and Shodan CVEDB. This server provides comprehensive access to Shodan's network intelligence and security services, including IP reconnaissance, DNS operations, vulnerability tracking, and device discovery. All tools provide structured, formatted output for easy analysis and integration.

• mcp
• osint
• reconnaissance
• security
• shodan
• ai-tools
• claude
• cpe
• cve
• cybersecurity