Mcp Shodan
Expose Shodan Internet-wide scan data to your agent for exposure checks and recon during security hardening.
Overview
io.github.daedalus/mcp-shodan is an MCP server for the Ship phase that exposes Shodan API capabilities to agents for internet exposure and recon workflows.
What is this MCP server?
- Stdio MCP transport with PyPI package mcp-shodan (v0.1.0)
- Wraps Shodan API functionality for agent-driven host and service lookup
- Supports internet exposure research without custom Shodan client scripts
- Useful for pre-launch external footprint checks on domains and IPs
- Requires a Shodan API key from your Shodan account
- Server version 0.1.0 with PyPI identifier mcp-shodan
- Stdio transport only in published server manifest
- Repository GitHub daedalus/mcp-shodan
Community signal: 1 GitHub stars.
What problem does it solve?
Checking what Shodan sees about your stack means juggling the web UI or custom scripts instead of asking your agent in one security pass.
Who is it for?
Builders hardening a public-facing app who already pay for Shodan and want agent-assisted exposure lookups before launch.
Skip if: Anyone without a Shodan API key, purely internal apps with no internet surface, or teams that need certified pen-test deliverables only.
What do I get? / Deliverables
After registration, your agent can call Shodan-backed MCP tools so external footprint questions stay inside the security review conversation.
- Shodan API operations available as MCP tools in the agent
- Faster external recon during ship-phase security reviews
- Reduced one-off Shodan scripting during hardening sprints
Recommended MCP Servers
Journey fit
How it compares
Shodan API MCP wrapper, not an on-prem vulnerability scanner or WAF replacement.
Common Questions / FAQ
Who is io.github.daedalus/mcp-shodan for?
Solo builders and small teams doing security review on internet-facing products who use Shodan and want those lookups available as MCP tools in their agent.
When should I use io.github.daedalus/mcp-shodan?
Use it in the ship security subphase when validating external exposure, investigating unexpected open ports, or correlating assets before go-live.
How do I add io.github.daedalus/mcp-shodan to my agent?
Install mcp-shodan from PyPI, add a stdio MCP server block with your Shodan API key in environment or config per the repo README, and reload the agent.