streamable-httpupdated 2mo ago
Shodan MCP — wraps the full Shodan REST API (api.shodan.io)
What can you do with Shodan?
mcp-shodan
Shodan MCP — wraps the full Shodan REST API (api.shodan.io)
Part of Pipeworx — an MCP gateway connecting AI agents to 1476+ live data sources.
Tools
| Tool | Description |
|---|---|
shodan_host |
What's exposed on IP — open ports, services, and CVEs. Returns the full Shodan host profile: ports, hostnames, org/ISP, geolocation, OS, known vulnerabilities, and a per-service banner sample. Example: shodan_host({ ip: "8.8.8.8", _apiKey: "your-key" }) |
shodan_host_search |
Search Shodan for hosts matching using Shodan search syntax (e.g. "apache country:US", "port:22 org:"Google""). Returns matching hosts with IP, port, org, hostnames, product, and location. Example: shodan_host_search({ query: "apache country:US", _apiKey: "your-key" }) |
shodan_host_count |
Count hosts matching with facet breakdown (free — this endpoint does not consume query credits). Returns the total match count plus optional facet aggregations (e.g. top countries, orgs, ports). Example: shodan_host_count({ query: "apache", facets: "country:10", _apiKey: "your-key" }) |
Quick Start
Add to your MCP client (Claude Desktop, Cursor, Windsurf, etc.):
{
"mcpServers": {
"shodan": {
"url": "https://gateway.pipeworx.io/shodan/mcp"
}
}
}
What this endpoint actually serves
tools/list at https://gateway.pipeworx.io/shodan/mcp returns the tools in the table
above plus the shared Pipeworx meta-tools — ask_pipeworx,
discover_tools, search_within, remember/recall and the rest of the
gateway-wide set. So the tool count you see is larger than this table: a
single-pack endpoint currently lists roughly 30 shared tools alongside the
pack's own. The connection's initialize response states its exact scope, and
is the authoritative answer for a given day.
This is deliberate, not multiplexing by accident. The meta-tools are what let a
scoped connection answer a question this pack does not cover — via
ask_pipeworx, which routes across the whole catalog — without you adding a
second MCP server. There is currently no way to mount a pack endpoint without
them; if the extra schemas cost you more context than the routing is worth,
connect to the full gateway once rather than to several pack endpoints.
Or connect to the full Pipeworx gateway to get every pack's tools listed directly, instead of just this one's:
{
"mcpServers": {
"pipeworx": {
"url": "https://gateway.pipeworx.io/mcp"
}
}
}
Both URLs reach the same gateway and the same 1476+ data sources. The
only difference is which pack's tools are listed directly; ask_pipeworx
reaches all of them from either one.
Using with ask_pipeworx
Instead of calling tools directly, you can ask questions in plain English — this works on the pack endpoint above as well as on the full gateway:
ask_pipeworx({ question: "your question about Shodan data" })
The gateway picks the right tool and fills the arguments automatically.
More
License
MIT
Install
Add Shodan to your client. Pick the one you use.
claude mcp add --transport http shodan https://gateway.pipeworx.io/shodan/mcpcodex mcp add shodan --url https://gateway.pipeworx.io/shodan/mcp{
"mcpServers": {
"shodan": {
"url": "https://gateway.pipeworx.io/shodan/mcp"
}
}
}Add to `~/.cursor/mcp.json`, or `.cursor/mcp.json` for a single project.
{
"servers": {
"shodan": {
"type": "http",
"url": "https://gateway.pipeworx.io/shodan/mcp"
}
}
}Add to `.vscode/mcp.json` in your workspace.
{
"mcpServers": {
"shodan": {
"url": "https://gateway.pipeworx.io/shodan/mcp"
}
}
}Add to `claude_desktop_config.json`, then restart Claude Desktop.
{
"mcpServers": {
"shodan": {
"serverUrl": "https://gateway.pipeworx.io/shodan/mcp"
}
}
}Add to `~/.codeium/windsurf/mcp_config.json`.
3 tools
Shodan exposes 3 tools to a connected agent.
- shodan_host
- What's exposed on IP <ip> — open ports, services, and CVEs. Returns the full Shodan host profile: ports, hostnames, org/ISP, geolocation, OS, known vulnerabilities, and a per-service banner sample. Example: shodan_host({ ip: "8.8.8.8", _apiKey: "your-key" })
- shodan_host_search
- Search Shodan for hosts matching <query> using Shodan search syntax (e.g. "apache country:US", "port:22 org:\"Google\""). Returns matching hosts with IP, port, org, hostnames, product, and location. Example: shodan_host_search({ query: "apache country:US", _apiKey: "your-key" })
- shodan_host_count
- Count hosts matching <query> with facet breakdown (free — this endpoint does not consume query credits). Returns the total match count plus optional facet aggregations (e.g. top countries, orgs, ports). Example: shodan_host_count({ query: "apache", facets: "country:10", _apiKey: "your-key" })
Score
60 / 100
Good
- Documentation22/25
- Maintenance16/25
- Trust6/20
- Capability4/15
- Install experience12/15
- Documents what it does and how to connect
- Has a resolvable package or endpoint
- Exposes at least one tool, prompt or resource
- README has substantive content
- Includes a code example
- Documents its configuration
- Mentions credentials or security posture
- Last commit 61 days ago
- Has a release history
- Repository is not archived
- No licence detected
- Namespace verified in the official MCP registry
- Claimed by its owner
- Published under an organisation
- 3 tool(s) documented
- Provides prompt templates
- Provides resources
- 6 documented install method(s)
- Published to a package registry
- Offers a hosted endpoint — no local install
Version history
| Versions | Published |
|---|---|
| 0.1.0Latest | Jul 2, 2026 |