Shodan

Shodan Streaming API

The Streaming API from Shodan — 5 operation(s) for streaming.

Documentation GitHub OpenAPI

Operations 5

GET /shodan/banners Stream All Banners #

GET /shodan/asn/{asn} Stream Banners By ASN #

GET /shodan/countries/{countries} Stream Banners By Country #

GET /shodan/ports/{ports} Stream Banners By Port #

GET /shodan/vulns/{vulns} Stream Banners By Vulnerability #

Work with this as data

Every API here is available over the APIs.io API and to AI agents over MCP.

MCP server

One button, every client — Claude, Cursor, VS Code and the rest.

https://apis.io/mcp

Tools for apis

7 MCP tools reach this

find_apisBrowse and filter every API in the catalog.
get_api_artifactsOne API's artifacts, grouped by type.
get_openapiThe primary OpenAPI for this API.
find_similar_apisAPIs that look like this one.
apis_io_searchSTART HERE — APIs, providers and tags for one query, each with its total.
resolveTurn a domain, URL or GitHub org into the provider it belongs to.
find_cohortsEvery scored population of providers in the catalog.

All 92 tools →

Call it yourself

curl for this page

This API

curl "https://apis.io/api/v1/apis/shodan-streaming-api"

All apis

curl "https://apis.io/api/v1/apis?limit=25"

Discovery needs no key. Ratings and market analysis are Pro.

Get an API key

Free tier, no form to fill in. Signing in shares your email address with us — we store it to create your key and to recognise you if you sign in with another provider. See our Privacy Policy and Terms.

GitHub Google LinkedIn

A second provider on the same verified email joins the account you already have.

OpenAPI Specification

openapi: 3.2.0
info:
  title: Shodan Streaming API
  description: The Shodan Streaming API delivers a real-time firehose of banner data collected by Shodan. Filtered streams are available by ASN, country, port, and CVE. Output is delivered either as newline-separated JSON or Server-Sent Events.
  version: '1.0'
  contact:
    name: Shodan Support
    email: support@shodan.io
    url: https://developer.shodan.io/api/stream
  license:
    name: Shodan API Terms of Service
    url: https://www.shodan.io/legal/tos
servers:
- url: https://stream.shodan.io
  description: Production streaming endpoint
security:
- apiKey: []
tags:
- name: Streaming
paths:
  /shodan/banners:
    get:
      tags:
      - Streaming
      summary: Stream All Banners
      operationId: streamBanners
      description: Stream every banner Shodan collects in real time. Intended for accounts that need the full firehose to build a local Shodan database.
      parameters:
      - $ref: '#/components/parameters/Format'
      - $ref: '#/components/parameters/Debug'
      responses:
        '200':
          description: Newline-separated JSON or SSE stream.
          content:
            application/x-ndjson:
              schema:
                $ref: '#/components/schemas/Banner'
            text/event-stream:
              schema:
                $ref: '#/components/schemas/Banner'
  /shodan/asn/{asn}:
    get:
      tags:
      - Streaming
      summary: Stream Banners By ASN
      operationId: streamBannersByAsn
      description: Stream banners limited to one or more Autonomous System Numbers.
      parameters:
      - name: asn
        in: path
        required: true
        schema:
          type: string
        description: Comma-separated ASN list (e.g. `3303,32475`).
      - $ref: '#/components/parameters/Format'
      responses:
        '200':
          description: Filtered banner stream.
          content:
            application/x-ndjson:
              schema:
                $ref: '#/components/schemas/Banner'
  /shodan/countries/{countries}:
    get:
      tags:
      - Streaming
      summary: Stream Banners By Country
      operationId: streamBannersByCountry
      description: Stream banners limited to one or more two-letter country codes.
      parameters:
      - name: countries
        in: path
        required: true
        schema:
          type: string
        description: Comma-separated ISO 3166-1 alpha-2 codes (e.g. `DE,US`).
      - $ref: '#/components/parameters/Format'
      responses:
        '200':
          description: Filtered banner stream.
          content:
            application/x-ndjson:
              schema:
                $ref: '#/components/schemas/Banner'
  /shodan/ports/{ports}:
    get:
      tags:
      - Streaming
      summary: Stream Banners By Port
      operationId: streamBannersByPort
      description: Stream banners limited to one or more ports.
      parameters:
      - name: ports
        in: path
        required: true
        schema:
          type: string
        description: Comma-separated list of ports (e.g. `22,443`).
      - $ref: '#/components/parameters/Format'
      responses:
        '200':
          description: Filtered banner stream.
          content:
            application/x-ndjson:
              schema:
                $ref: '#/components/schemas/Banner'
  /shodan/vulns/{vulns}:
    get:
      tags:
      - Streaming
      summary: Stream Banners By Vulnerability
      operationId: streamBannersByVuln
      description: Stream banners limited to one or more CVE identifiers.
      parameters:
      - name: vulns
        in: path
        required: true
        schema:
          type: string
        description: Comma-separated CVE identifiers (e.g. `CVE-2017-7679`).
      - $ref: '#/components/parameters/Format'
      responses:
        '200':
          description: Filtered banner stream.
          content:
            application/x-ndjson:
              schema:
                $ref: '#/components/schemas/Banner'
components:
  schemas:
    Banner:
      type: object
      properties:
        ip_str:
          type: string
        port:
          type: integer
        transport:
          type: string
          enum:
          - tcp
          - udp
        product:
          type: string
        version:
          type: string
        data:
          type: string
        timestamp:
          type: string
          format: date-time
        hash:
          type: integer
        org:
          type: string
        isp:
          type: string
        asn:
          type: string
        hostnames:
          type: array
          items:
            type: string
        domains:
          type: array
          items:
            type: string
        location:
          type: object
          properties:
            city:
              type: string
            country_code:
              type: string
            country_name:
              type: string
            latitude:
              type: number
            longitude:
              type: number
        ssl:
          type: object
          additionalProperties: true
        http:
          type: object
          additionalProperties: true
        cpe23:
          type: array
          items:
            type: string
        vulns:
          type: object
          additionalProperties: true
  parameters:
    Debug:
      name: debug
      in: query
      schema:
        type: integer
        enum:
        - 0
        - 1
      description: Set to 1 to include discarded message counts.
    Format:
      name: t
      in: query
      schema:
        type: string
        enum:
        - json
        - sse
      description: Output format. `json` returns newline-separated JSON; `sse` returns Server-Sent Events.
  securitySchemes:
    apiKey:
      type: apiKey
      in: query
      name: key

Shodan Streaming API

Operations 5

Documentation

Specifications

Schemas & Data

Other Resources