Can VS Code & GitHub Copilot Use Shodan? MCP Setup (2026)

Q: Can VS Code & GitHub Copilot use Shodan?

Yes. Add a remote URL in VS Code’s mcp.json ("type": "http"). We found no official Shodan server; the highest-rated live remote community server is EchelonGraph CVE & Exposure (trust grade B). Checked live on 2026-10-27.

Updated October 27, 2026 · from live checks of 50,180 MCP servers · Methodology

Remote Shodan servers

Server	Publisher	Status	Sign-in	Tools	Trust
EchelonGraph CVE & Exposure Yours? Claim it	Registry domain	Live	No auth	16	B
Shodan Internetdb Yours? Claim it	Community	Live	No auth	—	B
Shodan Yours? Claim it	Community	Live	No auth	—	B
Shodan Search MCP Yours? Claim it	Registry domain	Live · sign-in	OAuth sign-in	—	C

Local Shodan servers

Server	Publisher	Status	Sign-in	Tools	Trust
OpenOSINT Yours? Claim it	Community	Local install	API key	—	B
OpenOSINT Yours? Claim it	Community	Local install	API key	—	B
Shodan Yours? Claim it	Community	Local install	API key	—	B
Shodan Yours? Claim it	Community	Local install	API key	—	B
Osint Agent Skills Yours? Claim it	Community	Local install	No auth	—	C
Attack Surface MCP Server Yours? Claim it	Community	Local install	API key	—	C
Eidolon Yours? Claim it	Community	Local install	Unknown	—	C
MCP Shodan Yours? Claim it	Community	Local install	No auth	—	D

How to add Shodan to VS Code & GitHub Copilot

Open the Command Palette and run MCP: Add Server. Choose HTTP for a server URL or Command (stdio) for a local install command.
Or edit .vscode/mcp.json in your workspace: VS Code’s format puts servers under a top-level "servers" object (remote: "type": "http" + "url"; local: "type": "stdio" + "command"). Portable Copilot files (.mcp.json, ~/.copilot/mcp-config.json) use "mcpServers" instead, so don’t copy between them unchecked.
Sign in if the server asks, then use its tools in Copilot agent chat.

Example for EchelonGraph CVE & Exposure (from the table above), in .vscode/mcp.json:

{
  "servers": {
    "shodan": {
      "type": "http",
      "url": "https://mcp.echelongraph.io/mcp"
    }
  }
}

Menus change, so check the VS Code MCP configuration reference. Every server page has a copy-paste config for VS Code & GitHub Copilot.

Is it safe to connect Shodan to VS Code & GitHub Copilot?

Check the publisher and trust grade first. Shodan doesn't run an official MCP server we can verify, so every server here comes from a third party and can see whatever your account can.

Can ChatGPT or Claude connect to Shodan?

See https://canmyaiuse.pages.dev/can/chatgpt/shodan/ and https://canmyaiuse.pages.dev/can/claude/shodan/

Does Shodan have an official MCP server?

Not that we can verify: it isn't in the official MCP Registry as of 2026-10-27, and we haven't found a server hosted by Shodan itself. Full list: https://canmyaiuse.pages.dev/apps/shodan/

Can VS Code & GitHub Copilot use Shodan?