shodan_search

What shodan_search does on UnClick

AI agents call shodan_search to retrieve information from UnClick without modifying anything. It is typically the context-gathering step in research, monitoring, and reporting workflows, before the agent takes action elsewhere.

Parameters from the server's own tool schema.

Why shodan_search is rated Low

Shodan is an internet search engine for finding internet-connected devices and their metadata (IP addresses, open ports, banners, vulnerabilities, etc.). While this is a read-only retrieval operation (placing it in the Read category), the severity is high because an AI agent with unrestricted access could use this tool to enumerate vulnerable systems, gather reconnaissance data for attacks, or identify targets for…

From the tool's definition The tool description states "Search Shodan for internet-connected devices." This is a query/search operation that retrieves data about internet-connected devices without modifying, executing, or deleting anything.

Risk signalsAccepts freeform code/query input (query) · Handles credentials or secrets (api_key)

The rule that runs shodan_search safely

PolicyLayer is an MCP gateway: it sits between your AI agents and UnClick, and checks every tool call against a rule you set before the call runs. Nothing changes on the server itself. For shodan_search, this is the rule to start with:

{
  "version": "1",
  "default": "deny",
  "tools": {
    "shodan_search": {}
  }
}

Questions about shodan_search