What is the Censys MCP Server?

The Censys MCP Server gives AI agents like Claude, ChatGPT, and Cursor direct access to Censys. Search internet-connected hosts, SSL certificates and attack surface — discover exposed services and vulnerabilities. Powered by the Vinkius AI Gateway — no API keys, no infrastructure, connect in under 2 minutes.

Censys MCP Server: see your AI Agent in action

AI Agent→Vinkius→Censys
You

Vinkius AI Gateway
GDPR·High Security·Kill Switch·Ultra-Low Latency·Plug and Play

Built-in capabilities (9)

aggregate_hosts

Groups results by a specified field (e.g. "services.port", "location.country", "autonomous_system.name") and returns bucket counts. Useful for understanding the distribution of services, countries or ASNs matching a query. Aggregate host search results by a specific field

get_account_info

Useful for checking remaining API quota and account limits. Get your Censys account information

get_certificate

Returns the full parsed certificate including subject, issuer, validity, key info, extensions, CT logs and raw PEM data. Get detailed info for a specific certificate by fingerprint

get_certificate_hosts

Useful for finding all domains sharing a certificate (SANs). Returns IP addresses, ports and timestamps. Pagination via cursor. Get hosts using a specific certificate

get_host

Returns all open ports, service banners, TLS certificates, operating system detection, geolocation, autonomous system info and last updated timestamps. Get detailed info for a specific IP address

get_host_history

Shows how the host's services, ports and certificates have changed over time. Returns timestamps, services observed and changes detected. Pagination via cursor. Get historical scan data for a specific IP

search_certificates

Supports query syntax: issuer names, subject fields, serial numbers, validity dates, key algorithms, certificate transparency logs and more. Returns fingerprints, subjects, issuers, validity periods and key info. Search for SSL/TLS certificates

search_hosts

Supports powerful query syntax: service names (e.g. "nginx"), ports (e.g. "services.port:443"), protocols, operating systems, autonomous systems, geographic locations and more. Returns IP addresses, open ports, services, banners and locations. Pagination via cursor. Search for internet-connected hosts

view_host_diff

Useful for identifying changes between hosts or finding similar infrastructure. Compare two hosts to see differences

What this connector unlocks

Connect to Censys and explore the world's largest internet scanning platform through natural conversation.

What you can do

  • Host Search — Search internet-facing hosts by service, port, OS, location and more
  • Host Details — Get comprehensive info on any IP including all services and certificates
  • Host History — View how a host's services and ports have changed over time
  • Certificate Search — Find SSL/TLS certificates by issuer, subject, validity and more
  • Certificate Details — Get full parsed certificate data by fingerprint
  • Certificate Hosts — Find all hosts using a specific certificate
  • Aggregation — Analyze distributions of services, countries and ASNs
  • Host Diff — Compare two hosts to identify infrastructure differences

How it works

1. Subscribe to this server
2. Enter your Censys API ID and Secret
3. Start exploring internet exposure data from Claude, Cursor, or any MCP-compatible client

Who is this for?

  • Security Researchers — discover exposed services, track vulnerabilities and analyze attack surfaces
  • Sysadmins — monitor their organization's external exposure and identify misconfigurations
  • Threat Hunters — track certificate usage, find related infrastructure and identify suspicious hosts

Frequently asked questions

Give your AI agents the power of Censys

Access Censys and 2,500+ MCP servers — ready for your agents to use, right now. No glue code. No custom integrations. Just plug Vinkius AI Gateway and let your agents work.