ADEOSec/mcp-shodan

> Developed by ADEO Cybersecurity Services
A Model Context Protocol (MCP) server that provides access to both Shodan and VirusTotal APIs for comprehensive security analysis and threat intelligence. This server, developed and maintained by ADEO Cybersecurity Services, enables cybersecurity analysts to perform network intelligence operations including host information lookup, DNS operations, vulnerability analysis, network scanning, and alerts management through a collection of tools and prompt templates.
## About ADEO Cybersecurity Services
ADEO Cybersecurity Services specializes in providing advanced security solutions and tools for cybersecurity professionals. This ADEO CTI MCP Server is part of our commitment to enhancing cybersecurity capabilities through innovative tools and integrations with industry-leading security data sources.
## Features
### Shodan Capabilities
Detailed information about IP addresses including open ports, services, and location data
DNS lookup and reverse DNS operations
Domain information retrieval including subdomains
Advanced search capabilities with facets and filters
On-demand network scanning
Network alerts and monitoring
Vulnerability analysis and CVE tracking
Account and API management
Historical data access
### VirusTotal Integration
Malware analysis and detection
URL scanning and reputation checking
IP address reputation analysis
Domain threat intelligence
File hash analysis
Comprehensive threat reports
### Combined Analysis Features
Unified security analysis using both platforms
Correlated threat intelligence
Integrated vulnerability assessment
Cross-platform data enrichment
### Enhanced Functionality
Rich data formatting and presentation
Intelligent workflow automation
Pre-built analysis templates
Custom search filters
Batch processing capabilities
Real-time monitoring
## Tools
### Shodan Tools
#### Host Information
1. host-info
Get detailed information about a host from Shodan
Parameters:
ip (required): IP address to look up
history (optional): Include historical information
minify (optional): Return only basic host information
Example:
@shodan host-info ip="8.8.8.8" history=true
#### DNS Operations
2. dns-lookup
Resolve hostnames to IP addresses
Parameters:
hostnames (required): Comma-separated list of hostnames to resolve
Example:
@shodan dns-lookup hostnames="google.com,facebook.com"
3. reverse-dns
Look up hostnames for IP addresses
Parameters:
ips (required): Comma-separated list of IP addresses
Example:
@shodan reverse-dns ips="8.8.8.8,1.1.1.1"
4. domain-info
Get DNS entries and subdomains for a domain
Parameters:
domain (required): Domain name to look up
Example:
@shodan domain-info domain="example.com"
#### Search Operations
5. search-host
Search Shodan for hosts matching specific criteria
Parameters:
query (required): Shodan search query
facets (optional): Comma-separated list of properties for summary information
page (optional): Page number for results
Example:
@shodan search-host query="apache country:DE" facets="org,port"
6. search-host-count
Get count of matching results without full details
Parameters:
query (required): Shodan search query
facets (optional): Comma-separated list of facets