Mcp Shodan

io.github.daedalusPublished by GitHub account daedalusv0.1.0Updated Oct 27, 2026

MCP server exposing all Shodan API functionality

VerifiedSTDIODesktop onlyWeb Search & Scraping Security & Monitoring

Server details

Identifier: io.github.daedalus/mcp-shodan
Transport: STDIO
Runtime: Desktop only
Trust: Verified
Published: Sep 16, 2026

Security note

MCP servers receive tool arguments from a conversation and may perform external actions. Review what a server can do before you enable it, and give it only the access it needs.

The registry verified the GitHub account daedalus for this listing. That does not show the account is the product's maker.

SourceWeft's checks cover whether the listing is complete and the endpoint answered; they do not review the server's code or what its tools do.

Add a badge to your README

Show readers this MCP server is listed on SourceWeft. The badge links to this page.

[![Listed on SourceWeft](https://sourceweft.com/badge/mcp/io.github.daedalus%2Fmcp-shodan.svg)](https://sourceweft.com/mcp/io.github.daedalus%2Fmcp-shodan?utm_source=readme&utm_medium=badge)

Overview

AI-generated overview

Local MCP server that exposes Shodan's internet-device search API, letting an assistant look up hosts, run searches, manage alerts and start scans.

What you can do: Look up hosts and search Shodan: host details for an IP, database searches, cursor iteration, result counts and query token info
Manage alerts: list, create and delete Shodan alerts
Run scans: scan a network, scan the internet on a port, and check scan status
Browse saved queries: list shared queries, search them and get popular tags
Search the exploits archive and count exploit results
Read API utilities: key information, crawled ports, supported protocols and services
When to use it: Useful for security research, exposure assessment and reconnaissance work where the assistant should query Shodan data about IPs, services and exploits, or manage Shodan alerts and scans without leaving the chat.
Requirements: Runs as a local process installed from PyPI with pip, so Python is needed. Requires a Shodan API key supplied through the SHODAN_API_KEY environment variable, and network access to the Shodan API. Desktop only.

Before you install

The API key is passed in plain text through SHODAN_API_KEY and grants access to your Shodan account and its plan limits. Tools can create and delete alerts and start network or internet scans, which change account state and may consume paid query or scan credits. Queries and target addresses are sent to Shodan's servers.

Installation

In SourceWeft

Open Mcp Shodan in the dashboard and add it to a workspace.
Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

mcp-shodan

MCP server exposing Shodan API functionality via the Model Context Protocol.

[PyPI] [Python] [Coverage] [Ruff]

Install

Usage

Or add to your MCP configuration:

json

{  "mcpServers": {    "shodan": {      "command": "mcp-shodan",      "env": {        "SHODAN_API_KEY": "your_api_key"      }    }  }}

{  "mcpServers": {    "shodan": {      "command": "mcp-shodan",      "env": {        "SHODAN_API_KEY": "your_api_key"      }    }  }}

Available Tools

Host Information

shodan_host - Get all available information on an IP address

Search

shodan_search - Search the Shodan database
shodan_search_cursor - Search and return an iterator
shodan_count - Get total number of search results
shodan_search_tokens - Get information about a search query

Alerts

shodan_alerts - List all active alerts
shodan_create_alert - Create a new alert
shodan_delete_alert - Delete an alert

Scanning

shodan_scan - Scan a network
shodan_scan_internet - Scan the internet on a port
shodan_scan_status - Get scan status

Saved Queries

shodan_queries - List shared search queries
shodan_queries_search - Search saved queries
shodan_queries_tags - Get popular query tags

Exploits

shodan_exploits_search - Search the Shodan Exploits archive
shodan_exploits_count - Get total exploit count

Utilities

shodan_info - Get API key information
shodan_ports - Get list of ports Shodan crawls
shodan_protocols - Get supported protocols
shodan_services - Get list of services

Example

python

# Get information about a hostshodan_host("1.1.1.1")
# Search for specific servicesshodan_search("apache", limit=10)
# Count results for a queryshodan_count("nginx")
# Check your API planshodan_info()

# Get information about a hostshodan_host("1.1.1.1")
# Search for specific servicesshodan_search("apache", limit=10)
# Count results for a queryshodan_count("nginx")
# Check your API planshodan_info()

mcp-name: io.github.daedalus/mcp-shodan

Source: README.md at commit f276d75

Tools

SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

v0.1.0LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

Reached in the last 30 days25 pts
Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.
Auth declared10 pts
Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.
Tools listed15 pts
Answer tools/list without a credential, or ship a package that starts in a sandbox without one.
DescriptionRequired15 pts
Logo10 pts
Documentation15 pts
License10 pts