mcpField
E

Eleion Scanner Mcp

Local
github.com/hernaninversoSecurity0Updated 17w ago
Repository

About Eleion Scanner Mcp

Eleion Scanner Mcp lets AI agents run the hosted Eleion security scanner on domains registered and verified by their owner. It queues scans, reports status, and returns findings including severity and CVE details.

Key features

  1. 01Register domain targets
  2. 02Verify domain ownership
  3. 03Queue basic, full, or deep scans
  4. 04Check scan status and finding count
  5. 05Retrieve findings and CVE details

Use cases

  1. 01Scan an owned domain for security issues
  2. 02Review scan findings and priorities

MCP support

It exposes tools for registering and verifying targets, starting scans, checking scan status, and retrieving findings from the hosted Eleion Scanner API.

Configuration

Local server config is the same for every client. Copy it into your client’s MCP config file.

mcp.json · Universal config
{
  "mcpServers": {
    "eleion-scanner": {
      "command": "npx",
      "args": [
        "-y",
        "eleion-scanner-mcp"
      ],
      "env": {
        "SCANNER_API_KEY": "<SCANNER_API_KEY>"
      }
    }
  }
}
Run commandnpx -y eleion-scanner-mcp
Environment variables to set
SCANNER_API_KEYSecretTenant API key from https://scan.eleion.io (you can only scan domains you own and have verified)

Local servers need a runtime on your machine (e.g. Node.js 18+). Config file locations differ by client; see your client’s docs.

Packages
npmeleion-scanner-mcp0.1.1

Tools

5

Saved tool list · updated 3w ago

ParameterTypeRequiredDescription
target_urlstringYesThe http(s) URL/domain to register (must be a public host you control).

Details

From the project README

Eleion Scanner — MCP server

Drive the Eleion security scanner from an AI agent: register one of your own domains, prove ownership, queue a security scan (headers, TLS, DNS, ports, tech-fingerprint, plus AI-specific checks), and read the findings — severity, CVE, title, priority. Wraps the hosted Eleion Scanner API (https://scanner-api.eleion.io).

Tools

ToolWhat it does
scanner_register_target(target_url)Register one of your domains; returns the DNS TXT / well-known record to publish for ownership proof.
scanner_verify_target(target_id)Verify the ownership record you published.
scanner_start_scan(target_id, scan_profile?)Queue a scan (basic/full/deep) over a verified target.
scanner_get_scan_status(scan_id)Poll a scan's status and finding count.
scanner_get_findings(scan_id)List the findings (severity, CVE, template, title, priority).

Setup

{
  "mcpServers": {
    "eleion-scanner": {
      "command": "npx",
      "args": ["-y", "eleion-scanner-mcp"],
      "env": { "SCANNER_API_KEY": "your_tenant_key" }
    }
  }
}

Get a tenant key at https://scan.eleion.io. You can only scan domains you have registered and verified ownership of — this is not an arbitrary-target scanner.

The scan worker runs the analysis server-side; large scans take time, so poll scanner_get_scan_status until completed. Your registered domains and findings are processed by the hosted API. MIT licensed.

Comments

Markdown supported

New to MCP?

From what the protocol is to installing your first server, these answers cover most first questions.

An open protocol that defines how AI applications connect to external tools and data in a uniform way. Clients talk to the model; MCP servers provide tools, resources and prompt templates. They exchange standard messages, so one server can be reused by many clients.