Shodan Mcp Server — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited Shodan Mcp Server (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
An MCP (Model Context Protocol) server that exposes the Shodan API as MCP tools. Built with FastMCP and the official shodan-python library.
cp .env.example .env # add your SHODAN_API_KEY
pip install -r requirements.txt
python server.py30 tools across 9 categories:
| Tool | Description |
|---|---|
shodan_search | Search Shodan hosts (query, page, limit, offset, facets, fields) |
shodan_host | Get all info on an IP address |
shodan_count | Get result count for a query |
shodan_search_filters | List available search filters |
shodan_search_tokens | Parse and analyze a search query |
shodan_search_facets | List available search facets |
shodan_ports | List ports Shodan crawls |
shodan_protocols | List on-demand scan protocols |
shodan_services | List service name to port mappings |
shodan_api_info | Get API key info and credits |
| Tool | Description |
|---|---|
shodan_domain_info | Get DNS records for a domain |
| Tool | Description |
|---|---|
shodan_my_ip | Get your current public IP |
shodan_honeyscore | Honeypot probability (0.0–1.0) |
| Tool | Description |
|---|---|
shodan_queries | List shared community queries |
shodan_queries_search | Search community queries |
shodan_queries_tags | List query tags |
| Tool | Description |
|---|---|
shodan_scan | Submit IPs/netblocks for scanning |
shodan_scan_status | Check scan status |
shodan_scans | List previous scans |
shodan_scan_internet | Scan the internet for a port/protocol |
| Tool | Description |
|---|---|
shodan_create_alert | Create a network alert |
shodan_list_alerts | List or get alert details |
shodan_delete_alert | Delete an alert |
shodan_alert_triggers | List available alert triggers |
| Tool | Description |
|---|---|
shodan_exploit_search | Search the exploit archive |
shodan_exploit_count | Count exploit results |
| Tool | Description |
|---|---|
shodan_datasets | List available datasets |
shodan_dataset_files | List files in a dataset |
| Tool | Description |
|---|---|
shodan_notifiers | List configured notifiers |
shodan_notifier_providers | List supported providers |
All tools catch shodan.APIError and return {"error": "<message>"} instead of raising.
docker compose up -d --build├── server.py # Entry point — creates FastMCP app, wires up tools
├── tools/
│ └── shodan.py # All 30 tool implementations + Shodan client wrapper
├── AGENTS.md # Context for AI coding assistants
├── requirements.txt
├── .env.example
├── Dockerfile
└── docker-compose.ymlSee AGENTS.md for conventions, architecture, and tool registration patterns used in this project.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.