BurtTheCoder/mcp-shodan

Overview

This MCP server provides a bridge between AI coding assistants and Shodan's search engine for internet-connected devices. It enables IP reconnaissance, DNS lookups, and vulnerability intelligence via CVE/CPE queries. The server works with Claude Code, Codex, Gemini CLI, and Claude Desktop.

Best for

Best for
Developers and security researchers needing Shodan data in AI coding assistants

Use cases

• IP reconnaissance and device discovery
• DNS lookups and geolocation of network infrastructure
• CVE/CPE vulnerability lookup for exposed services

How to use

Install

npm install -g @burtthecoder/mcp-shodan

Tools exposed

• ip_lookup
• shodan_search
• cve_lookup
• dns_lookup
• reverse_dns_lookup
• cpe_lookup
• cves_by_product

Tested with

Claude Desktop, Claude Code

Example client config

{\n  "mcpServers": {\n    "shodan": {\n      "command": "mcp-shodan",\n      "env": {\n        "SHODAN_API_KEY": "your-shodan-api-key"\n      }\n    }\n  }\n}

Notes

This MCP server provides a bridge between AI coding assistants and Shodan’s search engine for internet-connected devices. It enables IP reconnaissance, DNS lookups, and vulnerability intelligence via CVE/CPE queries. The server works with Claude Code, Codex, Gemini CLI, and Claude Desktop.

133 stars on GitHub. Last updated 2026-03-31. Licensed MIT.

Use cases

• IP reconnaissance and device discovery
• DNS lookups and geolocation of network infrastructure
• CVE/CPE vulnerability lookup for exposed services

Pros

• Works with multiple AI assistant CLIs (Claude Code, Codex, Gemini CLI, Claude Desktop)
• Accesses Shodan’s comprehensive internet device search and vulnerability data
• Lightweight TypeScript MCP server easy to integrate

Cons

• Requires a paid Shodan API key for full functionality
• Limited to internet-exposed devices indexed by Shodan
• Depends on MCP protocol compatibility (requires supporting client)

Indexed from awesome-mcp-servers-punkpeye and enriched against its public facts.