Shodan MCP. Scan exposed services & map attack surfaces.

Shodan isn't your average search engine. It’s a scanner built to find exposed services across the internet—the kind of stuff people forget to lock down. You use this server to map out digital infrastructure, spot misconfigurations, or just figure out what hardware is talking to the outside world. Your AI client runs these tools for you; you just tell it where to look.

Scanning and Discovery
You want to know what's running on a specific IP range? Use search_hosts. This tool runs a broad scan against Shodan’s massive database, letting you filter results by product name (like 'apache'), operating system ('Linux'), country code, port number, or even known vulnerabilities. It finds internet-connected devices using powerful parameters so you can zero in on targets.

To get an idea of how big the haystack is before running an expensive search, run get_host_count; this calculates the total number of devices matching your filter without doing the full scan. For advanced planning, check out get_facets, which lists every available search filter—you'll know exactly what you can build into a complex query.

Resolving Network Addresses
You often start with names, not numbers. Use dns_resolve to take one or more domain names (hostnames) and get the corresponding IP address mapping. If you only have an IP and need to know what name it belongs to, run reverse_dns. This tool takes those IP addresses and returns any associated domain names.

To see the full range of ports Shodan tracks globally for reference, use get_ports.

Deep Dive Analysis on Specific Hosts
When you zero in on a specific IP address, you need more than just confirmation it exists. You'll run get_host_info. This is your deep-dive tool; it pulls every available detail for one single IP, listing all open ports, the service banners running there, the geographical location, and the detected OS type.

If you only know your own public-facing address, use get_my_ip to check your agent’s current external IP. For a complete picture of an IP's potential attack surface, this single tool gives you everything.

Account Management and Utility Checks
Before running any major scan, you gotta know if you've got credits left or if the API plan is gonna trip up. Run get_account_info to check your remaining usage credits and overall account status for Shodan. You can also use get_api_info to retrieve specific details about the current API plan, which helps you monitor limits and prevents run-time failures.

Finally, if you need a simple name-to-IP lookup without complex filtering, you can still rely on dns_resolve or reverse_dns.