Censys MCP

---
name: censys-mcp
category: osint-technical-infrastructure
cost: freemium
api_key_required: yes
repo: https://docs.censys.com/docs/platform-threat-hunting-mcp-server
paired_skills: ["ip-and-asn-attribution", "ssl-certificate-pivoting", "cdn-and-origin-discovery", "censys-investigative-queries"]
capabilities: ["internet-scan", "certificate-search", "service-intel"]
---

# Censys MCP — host + cert search, deeper certificate transparency integration

Adversary Investigation platform's official MCP. Often catches infrastructure that Shodan misses, with deeper certificate transparency integration and richer service fingerprints.

## Install

Remote MCP connector. Sign up at censys.com, generate an API token, then add as a remote MCP in Claude settings.

## Configuration

```json
{
  "mcpServers": {
    "censys": {
      "command": "npx",
      "args": ["-y", "@censys/mcp-server"],
      "env": {
        "CENSYS_API_ID": "YOUR_CENSYS_API_ID",
        "CENSYS_API_SECRET": "YOUR_CENSYS_API_SECRET"
      }
    }
  }
}
```

Check the official Censys docs for the current recommended install method — the remote connector may be preferred.

## What it adds

Complementary to Shodan (015). Censys has stronger certificate-transparency integration and finds hosts that rotate ports or use non-standard banners that Shodan's crawl misses. Run both on high-value targets for maximum coverage.

## Pairs with skills

- 042 `ip-and-asn-attribution`
- 043 `ssl-certificate-pivoting`
- 045 `cdn-and-origin-discovery`
- 384 `censys-investigative-queries`

## Cost

Free tier with rate limits. Paid tier for production volumes. Free is sufficient for spot investigations.