Cyreslab-AI/shodan-mcp-server

A Model Context Protocol (MCP) server that provides access to Shodan API functionality and CVE database, allowing AI assistants to query information about internet-connected devices, services, and vulnerabilities.
## Features
### Network Intelligence
Host Information: Get detailed information about specific IP addresses
Search Capabilities: Search Shodan's database for devices and services
Network Scanning: Scan network ranges (CIDR notation) for devices
SSL Certificate Information: Get SSL certificate details for domains
IoT Device Search: Find specific types of IoT devices
### Vulnerability Intelligence
CVE Lookup: Get detailed information about specific vulnerabilities
Vulnerability Search: Search CVEs with advanced filters (product, KEV status, EPSS scores)
CPE Information: Get Common Platform Enumeration data for products
Latest Vulnerabilities: Access newest CVEs and Known Exploited Vulnerabilities
Exploit Prediction: Get CVEs sorted by EPSS exploit prediction scores
Exploit Search: Search Shodan's Exploits database for CVE-linked exploits
InternetDB Lookup: Free, no-API-key host lookup (open ports, hostnames, CPEs, vulns, tags)
### Network Monitoring
Network Alerts: Create, list, inspect, and delete persistent alerts that monitor IPs/ranges for changes
Notifiers: List available notifier providers and manage notifiers (Slack, email, webhook, etc.) that alerts can send events to
## Installation
1. Clone the repository:
bash
git clone https://github.com/Cyreslab-AI/shodan-mcp-server.git
cd shodan-mcp-server
2. Install dependencies:
bash
npm install
3. Build the server:
bash
npm run build
4. Set up your Shodan API key:
bash
export SHODAN_API_KEY="your-api-key-here"
5. Start the server:
bash
npm start
## MCP Integration
This server can be integrated with Claude or other MCP-compatible AI assistants. To add it to Claude Desktop or Claude.app:
1. Add the server to your MCP settings:
json
"mcpServers": {
"shodan": {
"command": "node",
"args": ["/path/to/shodan-mcp-server/build/index.js"],
"env": {
"SHODAN_API_KEY": "your-api-key-here"
2. Restart Claude to load the new MCP server.
## Available Tools
### Search & Host Information Tools
#### get_host_info
Get detailed information about a specific IP address.
Parameters:
ip (required): IP address to look up
max_items (optional): Maximum number of items to include in arrays (default: 5)
fields (optional): List of fields to include in the results (e.g., ['ip_str', 'ports', 'location.country_name'])
#### search_shodan
Search Shodan's database for devices and services.
Parameters:
query (required): Shodan search query (e.g., 'apache country:US')
page (optional): Page number for results pagination (default: 1)
facets (optional): List of facets to include in the search results (e.g., ['country', 'org'])
max_items (optional): Maximum number of items to include in arrays (default: 5)
fields (optional): List of fields to include in the results (e.g., ['ip_str', 'ports', 'location.country_name'])
summarize (optional): Whether to return a summary of the results instead of the full data (default: false)
#### get_host_count
Get the count of hosts matching a search query without consuming query credits.