LabStore
← All labs

Shodan

by docker ✓ verified ✓ Packaged by Docker

MCP server for Shodan — host/network recon, CVE and exploit lookup, InternetDB, and persistent alerts (34 tools).

MCP server installable needs setup network: on runtime: sysbox

DevOps MCP Servers

Shodan MCP Server

A Model Context Protocol server that provides access to Shodan API functionality.

What is an MCP Server?

MCP Info

Attribute Details
Docker Image mcp/cyreslab-ai-shodan
Author Cyreslab-AI
Repository https://github.com/Cyreslab-AI/shodan-mcp-server

Image Building Info

Attribute Details
Dockerfile https://github.com/Cyreslab-AI/shodan-mcp-server/blob/935f7044f60570cf2d094d94596eeea7872fb6be/Dockerfile
Commit 935f7044f60570cf2d094d94596eeea7872fb6be
Docker Image built by Docker Inc.
Docker Scout Health Score Docker Scout Health Score
Verify Signature COSIGN_REPOSITORY=mcp/signatures cosign verify mcp/cyreslab-ai-shodan --key https://raw.githubusercontent.com/docker/keyring/refs/heads/main/public/mcp/latest.pub
Licence MIT License

Available Tools (5)

Tools provided by this Server Short Description
get_host_info Get detailed information about a specific IP address
get_ssl_info Get SSL certificate information for a domain
scan_network_range Scan a network range (CIDR notation) for devices
search_iot_devices Search for specific types of IoT devices
search_shodan Search Shodan's database for devices and services

Tools Details

Tool: get_host_info

Get detailed information about a specific IP address

Parameters Type Description
ip string IP address to look up
fields array optional List of fields to include in the results (e.g., ['ip_str', 'ports', 'location.country_name'])
max_items number optional Maximum number of items to include in arrays (default: 5)

Tool: get_ssl_info

Get SSL certificate information for a domain

Parameters Type Description
domain string Domain name to look up SSL certificates for (e.g., example.com)

Tool: scan_network_range

Scan a network range (CIDR notation) for devices

Parameters Type Description
cidr string Network range in CIDR notation (e.g., 192.168.1.0/24)
fields array optional List of fields to include in the results (e.g., ['ip_str', 'ports', 'location.country_name'])
max_items number optional Maximum number of items to include in results (default: 5)

Tool: search_iot_devices

Search for specific types of IoT devices

Parameters Type Description
device_type string Type of IoT device to search for (e.g., 'webcam', 'router', 'smart tv')
country string optional Optional country code to limit search (e.g., 'US', 'DE')
max_items number optional Maximum number of items to include in results (default: 5)

Tool: search_shodan

Search Shodan's database for devices and services

Parameters Type Description
query string Shodan search query (e.g., 'apache country:US')
facets array optional List of facets to include in the search results (e.g., ['country', 'org'])
fields array optional List of fields to include in the results (e.g., ['ip_str', 'ports', 'location.country_name'])
max_items number optional Maximum number of items to include in arrays (default: 5)
page number optional Page number for results pagination (default: 1)
summarize boolean optional Whether to return a summary of the results instead of the full data (default: false)

Use this MCP Server

{
  "mcpServers": {
    "cyreslab-ai-shodan": {
      "command": "docker",
      "args": [
        "run",
        "-i",
        "--rm",
        "-e",
        "SHODAN_API_KEY",
        "mcp/cyreslab-ai-shodan"
      ],
      "env": {
        "SHODAN_API_KEY": "YOUR_SHODAN_API_KEY"
      }
    }
  }
}

Why is it safer to run MCP Servers with Docker?