A
licenseNot graded
qualityC
maintenanceEnables to search and analyze internet-connected devices using the Shodan API, with tools for host search, DNS, scanning, exploits, alerts, and more.
MIT
sec-shodan-mcp
by schwarztim
Related Servers
Alternatives to sec-shodan-mcp
No user-submitted related servers found.
Related Servers
- AlicenseBqualityBmaintenanceProvides access to Shodan API functionality, enabling AI assistants to query information about internet-connected devices for cybersecurity research and threat intelligence.2353MIT
- FlicenseAqualityDmaintenanceEnables searching Shodan for devices and services, and looking up host details, through natural language.21-
- AlicenseNot gradedqualityBmaintenanceWraps the full Shodan REST API to allow AI agents to search and retrieve Shodan data through natural language.202 npmMIT
- AlicenseAqualityDmaintenanceEnables comprehensive security reconnaissance, vulnerability assessment, and threat intelligence gathering by integrating Shodan's API. It provides tools for searching internet-connected devices, performing DNS operations, and querying the Shodan exploit database.11Apache 2.0
- AlicenseNot gradedqualityAmaintenanceEnables AI agents to query Shodan for host reconnaissance, device searches, DNS lookups, and CVE/CPE vulnerability intelligence, including CVSS, EPSS, and KEV data.MIT
TDQS
B3.4/5.0
Scored across 32 tools
Disambiguation4/5
Most tools target distinct resources (DNS, search, host, scan, alerts, exploits, CVE, account) and descriptions clarify boundaries. However, pairs like shodan_cve_search vs. shodan_exploits_search and shodan_saved_queries vs. shodan_search_queries could cause minor misselection.
Naming Consistency3/5
Naming follows a loose shodan_<resource>_<action> pattern, but there are deviations: shodan_list_scans uses verb-first (list_scans) while shodan_alert_list uses resource-first (alert_list), and several tools are bare nouns (ports, filters, host). Terms like myip and cves_kev also break the convention.
Tool Count2/5
With 32 tools, the server feels bloated. Many are low-level utilities (shodan_myip, shodan_honeyscore, shodan_ports, shodan_protocols) that could be consolidated. The number exceeds the 25-tool threshold for 'too many' and makes the toolset harder for agents to navigate.
Completeness4/5
The toolset covers Shodan's core API well: search, host details, DNS, on-demand scans, alerts, exploits, CVEs, and account info. Minor gaps exist (e.g., no update alert, no cancel scan), but most workflows can be completed without dead ends.
Maintenance
ActivityInactive
ResponsivenessNo issues