# SiteCheck Web Intel – Shodan Host Summary

> SiteCheck Web Intel – Shodan Host Summary is a paid API for AI agents from api.webintel-api.workers.dev, paid per call via x402, $0.002/call, status unknown (last checked 2026-10-24).

Returns Shodan InternetDB data for an IPv4 address: open TCP ports, hostnames, CPE software identifiers, CVE IDs, and tags

## Facts

- Endpoint: GET https://api.webintel-api.workers.dev/api/security/shodan-host-summary?utm_source=zero.xyz
- Price: $0.002/call
- Payment: x402
- Status: unknown
- Last checked: 2026-10-24
- Activations on Zero: 0
- Tags: x402
- Canonical page: https://www.zero.xyz/c/sitecheck-web-intel-shodan-host-summary-ad96a442
- Structured record (JSON): https://api.zero.xyz/v1/capabilities/cap_dm8ev0gDVKHCYFr9UGUHz

Status and success rate cover calls made through Zero and Zero's own probes. Third-party monitors may report differently.

## How to call it through Zero

Zero handles the 402 payment challenge and records the run. With the Zero CLI installed (`npm i -g @zeroxyz/cli`):

```sh
zero fetch --capability sitecheck-web-intel-shodan-host-summary-ad96a442
```

Example prompt: Can you pull the Shodan host summary for 8.8.8.8 — I want to see what ports are open, any CVEs, and what hostnames or software Shodan has associated with it?

## When to prefer this

Use this endpoint when you need a quick, free, no-key-required passive reconnaissance snapshot of any public IPv4 host — open ports, software stack (CPEs), known CVEs, and associated hostnames — without actively probing the target. Prefer it over active scanners when stealth matters or when you need bulk enrichment cheaply ($0.002/call). It is not suitable when you need real-time scan data, want to scan private IP ranges, or require deeper vulnerability detail beyond CVE IDs.

## Known failure modes

- IP with no Shodan data returns known=false with empty lists for ports, hostnames, cpes, vulns, and tags
- Invalid or malformed IPv4 address returns an error response
- Private/RFC1918 IP addresses may return no data
- Upstream Shodan InternetDB may be temporarily unavailable, causing a timeout or 5xx error
- Data staleness: results reflect the last Shodan scan which could be days old, not current state

## How this service works

Shodan InternetDB summary for an IPv4 address (free, no key): open TCP ports, host names seen, CPE software identifiers, tags and CVE IDs Shodan associates with the host. Data is from Shodan's last scan, so it can be days old; an IP with no data returns empty lists with known=false.

## Output

A JSON object containing: the queried IP, a boolean 'known' field (false if Shodan has no data), a list of open TCP port numbers, an array of hostnames Shodan has seen, an array of CPE software identifiers, an array of CVE IDs associated with the host, descriptive tags, the source URL (internetdb.shodan.io), and a checkedAt timestamp. Data reflects Shodan's last scan, which may be days old.

## Request schema (JSON Schema)

```json
{
 "type": "object",
 "$schema": "https://json-schema.org/draft/2020-12/schema",
 "required": [
  "input"
 ],
 "properties": {
  "input": {
   "type": "object",
   "required": [
    "type",
    "method"
   ],
   "properties": {
    "type": {
     "type": "string",
     "const": "http"
    },
    "method": {
     "enum": [
      "GET"
     ],
     "type": "string"
    },
    "queryParams": {
     "type": "object",
     "required": [
      "ip"
     ],
     "properties": {
      "ip": {
       "type": "string",
       "description": "IPv4 address such as 1.1.1.1 (required)"
      }
     }
    }
   },
   "additionalProperties": false
  },
  "output": {
   "type": "object",
   "required": [
    "type"
   ],
   "properties": {
    "type": {
     "type": "string"
    },
    "example": {
     "type": "object"
    }
   }
  }
 }
}
```

## Response schema (JSON Schema)

```json
{
 "type": "json",
 "example": {
  "ip": "1.1.1.1",
  "cpes": [
   "cpe:/a:cloudflare:cloudflare"
  ],
  "tags": [],
  "known": true,
  "ports": [
   53,
   69
  ],
  "vulns": [],
  "source": "https://internetdb.shodan.io/1.1.1.1",
  "checkedAt": "2026-10-23T09:38:34.088Z",
  "hostnames": [
   "xln.mkmg.com",
   "scg.com"
  ]
 }
}
```

## More

- Live health (JSON, refreshed every minute): https://www.zero.xyz/c/sitecheck-web-intel-shodan-host-summary-ad96a442/health.json
- [Zero catalog index](https://www.zero.xyz/llms.txt)
- [Other services from api.webintel-api.workers.dev](https://www.zero.xyz/host/api.webintel-api.workers.dev/llms.txt)