Shodan MCP Server

get_host_info

Get detailed information about a specific IP address.

search_shodan

Search Shodan's database for devices and services.

get_host_count

Get the count of hosts matching a search query without consuming query credits.

scan_network_range

Scan a network range (CIDR notation) for devices.

search_iot_devices

Search for specific types of IoT devices.

get_ssl_info

Get SSL certificate information for a domain.

dns_lookup

Resolve hostnames to IP addresses using DNS lookup.

reverse_dns_lookup

Get hostnames for IP addresses using reverse DNS lookup.

get_domain_info

Get comprehensive domain information including subdomains and DNS records.

list_search_facets

List all available search facets that can be used with Shodan queries.

list_search_filters

List all available search filters that can be used in Shodan queries.

parse_search_tokens

Parse a search query to understand which filters and parameters are being used.

list_ports

List all ports that Shodan crawls on the Internet.

list_protocols

List all protocols that can be used when performing on-demand Internet scans.

get_cve_info

Get detailed information about a specific CVE.

search_cves

Search for vulnerabilities with various filters.

get_cpes

Get Common Platform Enumeration (CPE) information for products.

get_newest_cves

Get the newest vulnerabilities from the CVE database.

get_kev_cves

Get Known Exploited Vulnerabilities (KEV) from CISA.

get_cves_by_epss

Get CVEs sorted by EPSS score (Exploit Prediction Scoring System).

get_internetdb_host

Get a free, lightweight lookup of an IP address using Shodan's InternetDB (open ports, hostnames, CPEs, vulnerabilities, tags).

search_exploits

Search Shodan's Exploits database (Exploit-DB, Metasploit, CVE-linked exploits) for known exploits.

count_exploits

Get the count of exploits matching a search query without returning the full exploit records.

create_alert

Create a persistent Shodan network alert that monitors one or more IPs/ranges and reports changes over time.

list_alerts

List all configured Shodan network alerts on the account.

get_alert

Get details about a specific Shodan network alert by ID.

delete_alert

Permanently delete a Shodan network alert by ID.

list_notifier_providers

List available Shodan notifier providers (e.g. slack, email, webhook, telegram) and the arguments each one requires.

list_notifiers

List all configured Shodan notifiers on the account.

create_notifier

Create a new Shodan notifier (e.g.

delete_notifier

Permanently delete a Shodan notifier by ID.

get_api_info

Get information about your API plan including credits and limits.

get_account_profile

Get account profile information including membership status and credits.

get_my_ip

Get your current IP address as seen from the Internet.