BurtTheCoder/mcp-shodan
MCP server for querying the Shodan API and Shodan CVEDB.
🛡️ AgentReady threat assessment
MAESTRO 7-layer threat model + OWASP AIVSS risk score for BurtTheCoder/mcp-shodan, derived from its capabilities.
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology — every score is re-derived by the same automated method as an agent's public evidence changes.
Overview
This MCP server queries Shodan and its CVEDB, providing tools for IP lookups, device searches, DNS lookups, vulnerability queries, and CPE lookups. It gives agents internet-wide reconnaissance data. The Shodan API key governs cost and scope, and returned recon data is the security-intelligence surface.
Key features and capabilities
- IP and device lookups
- Shodan CVEDB queries
- DNS and CPE lookups
- Vulnerability search
Use cases
- Attack-surface reconnaissance
- Vulnerability intelligence for agents