How do I use Shodan MCP Server?

1. Click on "Deploy Server". 2. Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state. 3. In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Shodan MCP Server search for exposed SSH servers in 192.168.1.0/24" That's it! The server will respond to your query, and you can continue using it as needed. Here is a step-by-step guide with screenshots.

Shodan MCP Server

by null-create

Overview Schema Source Related Servers Discussions Admin

Python

Remote

Shodan MCP Server

An MCP (Model Context Protocol) server that exposes the Shodan API as MCP tools. Built with FastMCP and the official shodan-python library.

Setup

cp .env.example .env   # add your SHODAN_API_KEY
pip install -r requirements.txt
python server.py

Related MCP server: Shodan MCP Server

Tools

30 tools across 9 categories:

Core Search

Tool	Description
`shodan_search`	Search Shodan hosts (query, page, limit, offset, facets, fields)
`shodan_host`	Get all info on an IP address
`shodan_count`	Get result count for a query
`shodan_search_filters`	List available search filters
`shodan_search_tokens`	Parse and analyze a search query
`shodan_search_facets`	List available search facets
`shodan_ports`	List ports Shodan crawls
`shodan_protocols`	List on-demand scan protocols
`shodan_services`	List service name to port mappings
`shodan_api_info`	Get API key info and credits

DNS

Tool	Description
`shodan_domain_info`	Get DNS records for a domain

IP Tools

Tool	Description
`shodan_my_ip`	Get your current public IP
`shodan_honeyscore`	Honeypot probability (0.0–1.0)

Community Queries

Tool	Description
`shodan_queries`	List shared community queries
`shodan_queries_search`	Search community queries
`shodan_queries_tags`	List query tags

Scanning

Tool	Description
`shodan_scan`	Submit IPs/netblocks for scanning
`shodan_scan_status`	Check scan status
`shodan_scans`	List previous scans
`shodan_scan_internet`	Scan the internet for a port/protocol

Alerts / Monitoring

Tool	Description
`shodan_create_alert`	Create a network alert
`shodan_list_alerts`	List or get alert details
`shodan_delete_alert`	Delete an alert
`shodan_alert_triggers`	List available alert triggers

Exploits

Tool	Description
`shodan_exploit_search`	Search the exploit archive
`shodan_exploit_count`	Count exploit results

Bulk Data

Tool	Description
`shodan_datasets`	List available datasets
`shodan_dataset_files`	List files in a dataset

Notifiers

Tool	Description
`shodan_notifiers`	List configured notifiers
`shodan_notifier_providers`	List supported providers

Error Handling

All tools catch shodan.APIError and return {"error": "<message>"} instead of raising.

Docker

docker compose up -d --build

Project Structure

├── server.py          # Entry point — creates FastMCP app, wires up tools
├── tools/
│   └── shodan.py      # All 30 tool implementations + Shodan client wrapper
├── AGENTS.md          # Context for AI coding assistants
├── requirements.txt
├── .env.example
├── Dockerfile
└── docker-compose.yml

Agent Context

See AGENTS.md for conventions, architecture, and tool registration patterns used in this project.

This server cannot be deployed

One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

Maintenance

ActivityStale

ResponsivenessNo issues

Resources

GitHub Repository

Need Help?

Related Servers

Related MCP Connectors

Shodan Search MCPOAuth
net.nexlab
Defensive Shodan search and host intelligence MCP using customer-provided SHODAN_API_KEY for
Security Networking & Infrastructure Search
1
Shodan A
io.github.pipeworx-io
Shodan MCP — wraps the full Shodan REST API (api.shodan.io)
Security Networking & Infrastructure
342
Shodan Internetdb A
io.github.pipeworx-io
Shodan InternetDB MCP — wraps Shodan InternetDB (internetdb.shodan.io)
Search Networking & Infrastructure Security
322
Censys A
io.github.pipeworx-io
Censys MCP — internet-scan search over the Censys Platform API (censys.com)
Search Networking & Infrastructure Security
391

Related MCP Servers

Shodan MCP Server
Security Penetration Testing
Cyreslab-AI
A
license
B
quality
D
maintenance
Provides access to Shodan API functionality, enabling AI assistants to query information about internet-connected devices for cybersecurity research and threat intelligence.
Updated a year ago (2025-06-29 07:08 UTC)
23
47
MIT
Shodan MCP Server
Search Security
irootsec
F
license
Not graded
quality
D
maintenance
Integrates Shodan search capabilities into MCP-compatible applications for discovering internet-connected devices. Enables domain searches, IP lookups, and advanced queries to identify exposed services, infrastructure mapping, and security analysis.
Updated a year ago (2025-09-01 13:45 UTC)
3
-
Shodan MCP Server
Security Search Penetration Testing
GangGreenTemperTatum
A
license
A
quality
D
maintenance
Enables comprehensive security reconnaissance, vulnerability assessment, and threat intelligence gathering by integrating Shodan's API. It provides tools for searching internet-connected devices, performing DNS operations, and querying the Shodan exploit database.
Updated 8 months ago (2026-01-17 18:13 UTC)
11
Apache 2.0
Shodan MCP Server
Penetration Testing Networking & Infrastructure
Vorota-ai
A
license
A
quality
D
maintenance
Enables AI agents to perform passive reconnaissance, vulnerability intelligence, DNS analysis, and device search using Shodan's database of internet-connected devices, all from within your IDE.
Updated 7 months ago (2026-02-12 02:17 UTC)
20
22
Apache 2.0