shodan_count
Count Shodan search results to scope queries before running full searches, helping conserve API credits by previewing result volumes and distributions.
Instructions
Get the total number of results for a search query without returning the actual results. Useful for scoping searches before running full queries to avoid wasting API credits.
Best Practice: Always use count first for large ICS/SCADA queries.
Example Workflow:
Count: "port:502 tag:ics" → 50,000 results
Narrow: "port:502 tag:ics country:US" → 15,000 results
Refine: "port:502 tag:ics country:US org:"Electric"" → 500 results
Then run full search on refined query
Use with facets to see distribution without burning credits on full results.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | Shodan search query. Same syntax as shodan_host_search. Examples: "port:502 tag:ics", "port:502 country:US", "tag:ics has_vuln:true" | |
| facets | No | Optional facets for aggregated counts. Use to see distribution: "country,org,product". Shows breakdown without full results. |