4,000+ servers built on MCP Fusion
Vinkius
Mastra AISDK
Mastra AI
Why use Shodan MCP Server with Mastra AI?

Bring Cybersecurity
to Mastra AI

Create your Vinkius account to connect Shodan to Mastra AI and start using all 10 AI tools in minutes. Fully managed, enterprise secure, and ready to use without writing a single line of code. No hosting, no server setup — just connect and start using.

MCP Inspector GDPR Free for Subscribers
Dns ResolveGet Account InfoGet Api InfoGet FacetsGet Host CountGet Host InfoGet My IpGet PortsReverse DnsSearch Hosts
ChatGPT Claude Perplexity

Compatible with every major AI agent and IDE

ClaudeClaude
ChatGPTChatGPT
CursorCursor
GeminiGemini
WindsurfWindsurf
VS CodeVS Code
JetBrainsJetBrains
VercelVercel
+ other MCP clients
Shodan

What is the Shodan MCP Server?

Connect to Shodan, the world's first search engine for internet-connected devices, and explore the digital landscape through natural conversation.

What you can do

  • Device Search — Find internet-connected devices by product, OS, port, country, vulnerability and more
  • Host Lookup — Get comprehensive info on any IP: open ports, services, banners, location and vulnerabilities
  • DNS Lookup — Resolve hostnames to IPs and reverse DNS lookups
  • Port Discovery — See which ports Shodan actively scans across the internet
  • Account Info — Check your remaining query credits and API plan details

How it works

  1. Subscribe to this server
  2. Enter your Shodan API Key (free registration at shodan.io)
  3. Start exploring the internet's connected devices from Claude, Cursor, or any MCP-compatible client

Who is this for?

  • Security Researchers — discover exposed services, scan for vulnerabilities and analyze attack surfaces
  • Sysadmins — monitor their organization's exposed services, check for misconfigurations and track open ports
  • IoT Analysts — explore IoT device distributions, identify trends and map internet-connected infrastructure

Built-in capabilities (10)

dns_resolve

Returns a mapping of hostname to IP. Supports comma-separated hostnames. Useful for DNS lookups without leaving the terminal. Resolve hostnames to IP addresses

get_account_info

Useful for checking your remaining usage limits. Get Shodan account information

get_api_info

Useful for monitoring API usage limits. Get API plan information

get_facets

g. country, org, port, os, product). Useful for building advanced search queries with faceted analysis. Get available search facets for result aggregation

get_host_count

Useful for checking how many devices match a filter before running a full search. Get total number of results for a search query

get_host_info

Returns all open ports, hostnames, geographic location, AS/org info, operating system and service banners for every open port. Includes vulnerability data if available. This is the most detailed view of a single host. Get detailed info for a specific IP address

get_my_ip

Useful for identifying your external IP for firewall rules, access control and debugging. Get your current external IP address

get_ports

Useful for understanding which ports are monitored and for reference when building search queries. Get a list of ports that Shod is scanning

reverse_dns

Returns a mapping of IP to hostname(s). Supports comma-separated IPs. Useful for reverse DNS lookups. Resolve IP addresses to hostnames

search_hosts

Supports powerful filters: product name (e.g. "nginx", "apache"), OS (e.g. "Windows", "Linux"), port (e.g. "port:80"), country (e.g. "country:US"), city, org, hostname, vulnerability (e.g. "vuln:CVE-2021-44228"), and many more. Returns matching hosts with IP, port, product, OS, location and banners. Pagination with page parameter. Use get_host for full details on a specific IP. Search Shodan for internet-connected devices

Why Mastra AI?

Mastra's agent abstraction provides a clean separation between LLM logic and Shodan tool infrastructure. Connect 10 tools through Vinkius and use Mastra's built-in workflow engine to chain tool calls with conditional logic, retries, and parallel execution. deployable to any Node.js host in one command.

  • Mastra's agent abstraction provides a clean separation between LLM logic and tool infrastructure. add Shodan without touching business code

  • Built-in workflow engine chains MCP tool calls with conditional logic, retries, and parallel execution for complex automation

  • TypeScript-native: full type inference for every Shodan tool response with IDE autocomplete and compile-time checks

  • One-command deployment to any Node.js host. Vercel, Railway, Fly.io, or your own infrastructure

M
See it in action

Shodan in Mastra AI

AI AgentVinkius
High Security·Kill Switch·Plug and Play
Enterprise Security

Why run Shodan with Vinkius?

The Shodan connection runs on our fully managed, secure cloud infrastructure. We handle the hosting, maintenance, and security so you don't have to deal with servers or code. All 10 tools are ready to work instantly without any complex setup.

You stay in complete control of your data. Your AI only accesses the information you approve, keeping your sensitive passwords and private details completely safe. Plus, with automatic optimizations, your AI works faster and more efficiently.

View full Shodan details →
Shodan
Fully ManagedNo server setup
Plug & PlayNo coding needed
SecurePrivacy protected
PrivateYour data is safe
Cost ControlBudget limits
Control1-click disconnect
Auto-UpdatesMaintenance free
High SpeedOptimized for AI
Reliable99.9% uptime
Your credentials and connection tokens are fully encrypted

* Every connection is hosted and maintained by Vinkius. We handle the security, updates, and infrastructure so you don't have to write code or manage servers. See our infrastructure

01 / Catalog

Over 4,000 integrations ready for AI agents

Explore a vast library of pre-built integrations, optimized and ready to deploy.

02 / Credentials

Connect securely in under 30 seconds

Generate tokens to authenticate and link external services in a single step.

03 / Guardian

Complete visibility into every agent action

Audit live requests, latency, success rates, and active security compliance policies.

04 / FinOps

Optimize spending and track token ROI

Analyze real-time token consumption and cost metrics detailed by connection.

Over 4,000 integrations ready for AI agents
Connect securely in under 30 seconds
Complete visibility into every agent action
Optimize spending and track token ROI

Explore our live AI Agents Analytics dashboard to see it all working

This dashboard is included when you connect Shodan using Vinkius. You will never be left in the dark about what your AI agents are doing with your tools.

Why Vinkius

Shodan and 4,000+ other AI tools. No hosting, no code, ready to use.

Professionals who connect Shodan to Mastra AI through Vinkius don't need to write code, manage servers, or worry about security. Everything is pre-configured, secure, and runs automatically in the background.

4,000+MCP Integrations
<40msResponse time
100%Fully managed
Raw MCP
Vinkius
Ready-to-use MCPsFind and configure each manually4,000+ MCPs ready to use
Connection SetupManual coding & server setup1-click instant connection
Server HostingYou host it yourself (needs 24/7 uptime)100% hosted & managed by Vinkius
Security & PrivacyStored in plaintext config filesBank-grade encrypted vault
Activity VisibilityBlind execution (no logs or tracking)Live dashboard with real-time logs
Cost ControlRunaway AI token spend riskAutomatic budget limits
Revoking AccessMust delete files or code to stop1-click disconnect button
The Vinkius Advantage

How Vinkius secures Shodan for Mastra AI

Every request between Mastra AI and Shodan is protected by our secure gateway. We automatically keep your sensitive data private, prevent unauthorized access, and let you disconnect instantly at any time.

< 40msCold start
Ed25519Signed audit chain
60%Token savings
FAQ

Frequently asked questions

01

How do I get a Shodan API key?

Sign up for a free account at shodan.io. Your API key is displayed on your account dashboard. Free accounts get limited query credits per month.

02

What kind of devices can I find?

Shodan indexes web servers, routers, smart TVs, webcams, IoT devices, industrial control systems (ICS/SCADA), databases, Docker instances, cloud services and virtually any internet-connected device with an open port.

03

How do I search for vulnerabilities?

Use the vuln: filter in your search query. For example: 'vuln:CVE-2021-44228' for Log4Shell, 'vuln:CVE-2024-3094' for XZ backdoor. Requires a paid Shodan membership for vulnerability search.

04

What are some useful search queries?

Popular queries: 'nginx' (all nginx servers), 'port:3389 country:US' (RDP servers in US), 'apache os:Windows', 'product:"MongoDB" has_screenshot:true', 'port:21' (FTP servers), 'city:"São Paulo" port:80'.

05

How does Mastra AI connect to MCP servers?

Create an MCPClient with the server URL and pass it to your agent. Mastra discovers all tools and makes them available with full TypeScript types.

06

Can Mastra agents use tools from multiple servers?

Yes. Pass multiple MCP clients to the agent constructor. Mastra merges all tool schemas and the agent can call any tool from any server.

07

Does Mastra support workflow orchestration?

Yes. Mastra has a built-in workflow engine that lets you chain MCP tool calls with branching logic, error handling, and parallel execution.

08

createMCPClient not exported

Install: npm install @mastra/mcp

Explore More MCP Servers

View all →