Overview
SHODAN-MCP is a Python-based MCP server that provides a convenient interface to the Shodan API, enabling discovery, host intelligence, vulnerability research, and network mapping via the MCP protocol. It exposes a rich set of commands for searching and filtering the Shodan database, analyzing results with geographic and organizational breakdowns, and counting results without consuming API credits. The server offers deep host intelligence, including detailed information about IPs, open ports, banners, and configurations, along with banner grabbing capabilities. In addition, it supports security research workflows with CVE information, vulnerability discovery, and exploitation risk assessment. For network intelligence, it covers DNS information, domain insights, and reverse DNS mapping. The project emphasizes asynchronous, high-performance interactions using FastMCP, the official Shodan Python client, HTTPX, and python-dotenv, with API keys managed via a .env file. SHODAN-MCP is designed to be used through AI assistants and IDEs that support MCP (examples include Claude, Cursor, and VSCode integrations). It includes installation guidance, usage notes, security considerations, and planning for future enhancements.
Features
Advanced Search
Query the Shodan database using powerful filtering capabilities and multiple parameters.
Result Analysis
Detailed breakdowns of search results with geographic distribution and organization insights.
Count Function
Get total numbers and statistical breakdowns without consuming API credits.
Detailed Host Information
Comprehensive data about any IP address including all services, banners and configurations.
Port Scanning
View all open ports and running services on target systems.
Banner Grabbing
Access complete service banners and headers for in-depth analysis.
Vulnerability Discovery
Find devices affected by specific CVEs or with particular vulnerabilities.
CVE Information
Get detailed intelligence on Common Vulnerabilities and Exposures.
Who Is This For?
- Security Researchers:Research security posture, analyze exposures, monitor internet-facing assets, and correlate findings with threat intelligence.
- Penetration Testers:Identify exposure, validate findings, and measure risk across networks and systems.
- Cybersecurity Professionals:Monitor global internet landscape, assess vulnerabilities, and inform defense strategies.
