Shodan MCP Server
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
| SHODAN_API_KEY | Yes | Your Shodan API key, obtained from https://account.shodan.io/ |
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
This server publishes no instructions, or was last inspected before Glama recorded them.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| shodan_host_searchA | Search Shodan for hosts matching a query. Returns detailed information about discovered hosts including IP addresses, ports, services, and vulnerabilities. Use for asset discovery and reconnaissance. ICS/SCADA Examples:
Effective Patterns:
|
| shodan_host_infoB | Get detailed information about a specific host by IP address. Returns all services, open ports, vulnerabilities, and historical data. |
| shodan_dns_lookupC | Perform DNS lookups to resolve domain names to IP addresses. |
| shodan_dns_reverseB | Reverse DNS lookup to find hostnames associated with IP addresses. |
| shodan_api_infoB | Get information about the current API plan including query credits remaining and scan credits. |
| shodan_exploits_searchB | Search for exploits in the Shodan Exploits database. Useful for finding known exploits for specific CVEs or software. Critical for ICS/SCADA security assessments. ICS/SCADA Exploit Examples:
Common ICS CVE Searches:
|
| shodan_portsA | Get a list of port numbers that Shodan crawls on the Internet. Useful for discovering what protocols are monitored. Key ICS/SCADA Ports in Shodan:
Use this to verify Shodan monitors your target protocol. |
| shodan_protocolsB | Get information about the protocols that Shodan supports for querying. |
| shodan_countA | Get the total number of results for a search query without returning the actual results. Useful for scoping searches before running full queries to avoid wasting API credits. Best Practice: Always use count first for large ICS/SCADA queries. Example Workflow:
Use with facets to see distribution without burning credits on full results. |
| shodan_query_searchB | Search for saved Shodan queries shared by the community. Useful for discovering popular query patterns and learning effective search techniques. Popular ICS/SCADA Query Topics:
Use community queries to:
|
| shodan_query_tagsA | Get a list of popular tags for saved Shodan queries. Tags help discover trending search topics and common query categories. Common ICS/SCADA Related Tags:
Use to browse popular query categories and discover new search angles. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
No prompts | |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
No resources | |
TDQS
Scored across 11 tools
Most tools have distinct purposes, such as shodan_count for result counts and shodan_host_search for detailed host searches. However, shodan_query_search and shodan_query_tags both relate to saved queries and could be slightly confusing, as they overlap in functionality for discovering community query patterns.
All tool names follow a consistent snake_case pattern with a 'shodan_' prefix and descriptive verb_noun combinations, such as shodan_api_info and shodan_dns_lookup. This uniformity makes the tool set predictable and easy to navigate.
With 11 tools, the server is well-scoped for Shodan's domain, covering API info, searches, DNS lookups, exploits, and query discovery. Each tool serves a clear purpose without redundancy, fitting typical server tool counts of 3-15.
The tool set provides comprehensive coverage for Shodan's core functionalities, including host and exploit searches, DNS operations, and query exploration. A minor gap is the lack of tools for managing saved searches or alerts, but agents can work around this with existing tools.