mcp-shodan and mcp-virustotal
About mcp-shodan
BurtTheCoder/mcp-shodan
MCP server for Shodan — search internet-connected devices, IP reconnaissance, DNS lookups, and CVE/CPE vulnerability intelligence. Works with Claude Code, Codex, Gemini CLI, and Claude Desktop.
Implements the Model Context Protocol (MCP) via stdio transport with seven specialized tools—IP lookup, device search, CVE/CPE queries, and DNS resolution—each returning structured JSON for programmatic analysis. Built as an npm package that integrates directly into Claude Desktop, Claude Code, Codex CLI, and Gemini CLI through configuration-based server registration, leveraging Shodan's CVEDB for enriched vulnerability data including CVSS, EPSS, and KEV status tracking.
About mcp-virustotal
BurtTheCoder/mcp-virustotal
MCP server for VirusTotal API — analyze URLs, files, IPs, and domains with comprehensive security reports, relationship analysis, and pagination support.
Implements stdio and HTTP streaming transports for flexible deployment across MCP-compatible clients (Claude Desktop, VS Code Copilot, Gemini), with automatic relationship data enrichment that contextually fetches connected artifacts like contacted domains, dropped files, and threat actors in single queries. Features dedicated relationship tools supporting 17+ URL and 40+ file relationship types with cursor-based pagination for deep threat intelligence drilling. Dockerized HTTP streaming mode enables standalone service architecture accessible to multiple clients via configurable endpoints and health checks.
Related comparisons
Scores updated daily from GitHub, PyPI, and npm data. How scores work