BurtTheCoder/mcp-shodan

MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.

64
/ 100
Established

This tool helps cybersecurity analysts and IT professionals gather intelligence about internet-connected devices, IP addresses, and potential vulnerabilities. You input an IP address, domain name, product name, or a CVE identifier, and it provides structured data on network services, open ports, geographical location, and vulnerability details. It's designed for security researchers, network administrators, and incident response teams.

115 stars. Available on npm.

Use this if you need to quickly investigate a suspicious IP address, identify internet-facing assets, perform network reconnaissance, or research known vulnerabilities (CVEs) affecting specific products.

Not ideal if you are looking for a tool to actively scan your internal network for vulnerabilities or require real-time threat detection beyond Shodan's database.

cybersecurity network-intelligence vulnerability-management threat-intelligence incident-response
Maintenance 10 / 25
Adoption 10 / 25
Maturity 25 / 25
Community 19 / 25

How are scores calculated?

Stars

115

Forks

22

Language

TypeScript

License

MIT

Last pushed

Mar 03, 2026

Commits (30d)

0

Dependencies

4

Get this data via API

curl "https://pt-edge.onrender.com/api/v1/quality/mcp/BurtTheCoder/mcp-shodan"

Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.