get_ip_infoLABSCO SUMMARY
Reconnaissance queries, in the order you actually run them.
The tool set maps onto a real investigation: resolve the name, look up the host, list its vulnerabilities, then read the CVE that matters. Search is the wide end of that — Shodan's syntax passes through untouched, so an existing query works as written. Everything here counts against your Shodan plan's query allowance, and the results describe internet-exposed infrastructure, so scope what you point it at.
What it is
An MCP server over the Shodan API covering five queries: what Shodan knows about an IP, which vulnerabilities are associated with it, what a specific CVE is, what a hostname resolves to, and a full search across Shodan's database using its own query syntax.
What you get
get_ip_info— everything Shodan holds about a givenipget_vulnerabilities— the vulnerabilities associated with an IP addresscve_info— details for a specific CVE iddns_lookup— resolve ahostnameto its addresssearch— Shodan's database with aqueryin its own search syntax, returning matching devices
Requirements
A Shodan API key from your Shodan account, supplied as SHODAN_API_KEY in the server's env block. Node.js — installation is a clone plus npm install and npm run build, then pointing the client at build/index.js. The package is shodan-mcp-server (0.1.0 in package.json). MIT licensed.
Setup effort
Build from source — git clone https://github.com/X3r0K/shodan-mcp-server.git
USE CASES
01
Investigating an address that turned up in logs
Pull what Shodan knows about the host, then list the vulnerabilities associated with it.
02
Understanding a CVE you were just handed
Look the identifier up directly rather than searching the web for a summary.
03
Checking your own external footprint
Resolve your hostnames and inspect what Shodan reports as exposed on those addresses.
04
Running a saved Shodan query
Pass an existing Shodan search string through and read the matching devices without leaving the conversation.
5 tools
Listed in project docs. Your client may show a different list.
dns_lookupget_vulnerabilitiescve_infosearchBEFORE YOU INSTALL
What to know first
Tools you get
5 tools named in the project's documentation.
Requires
SHODAN_API_KEY in your environment
INSTALLATION
Connect your client
You clone and build this one yourself.
Server setup
From source
TERMINAL
git clone https://github.com/X3r0K/shodan-mcp-server.git
cd shodan-mcp-server
npm install
npm run buildConfiguration file
JSON
{
"mcpServers": {
"shodan": {
"command": "node",
"args": [
"<YOUR_PATH_TO_SHODAN_MCP_SERVER>/build/index.js"
],
"env": {
"SHODAN_API_KEY": "<YOUR_SHODAN_API_KEY>"
},
"disabled": false,
"autoApprove": []
}
}
}
