MCP.so
登录
E

Eleion Scanner MCP Server

@hernaninverso

基本信息

分类

其他

传输方式

stdio

作者

hernaninverso

提交者

Hernán Inverso

关于 Eleion Scanner MCP Server

Eleion security scanner for AI agents: register/verify your domains,

Eleion Scanner MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "eleion-scanner": {
      "command": "npx",
      "args": [
        "-y",
        "eleion-scanner-mcp"
      ],
      "env": {
        "SCANNER_API_KEY": "your_tenant_key"
      }
    }
  }
}

Eleion Scanner MCP Server 工具

5

Register one of YOUR OWN domains/URLs to be security-scanned. Returns a verification_token plus the DNS TXT record (or /.well-known URL) you must publish to prove ownership before scanning. You can only scan domains you own.

Verify domain ownership of a previously registered target by checking the DNS TXT / .well-known record you published. Returns whether verification succeeded.

Queue a security scan over a target you have already registered AND verified. Returns a scan_id and status. Poll scanner_get_scan_status until completed, then read scanner_get_findings.

Get the status of a scan (queued|running|completed|failed) and how many findings it has.

List the security findings of a completed scan (severity, CVE, template, title, URL, priority_score), ordered by priority.

概览

What is Eleion Scanner Mcp?

Eleion Scanner Mcp is an MCP server that drives the Eleion security scanner from an AI agent. It lets you register your own domains, prove ownership, queue a security scan (headers, TLS, DNS, ports, tech-fingerprint, plus AI-specific checks), and retrieve findings with severity, CVE, title, and priority. It wraps the hosted Eleion Scanner API at https://scanner-api.eleion.io.

How to use Eleion Scanner Mcp?

Configure it in your MCP client using npx -y eleion-scanner-mcp with the environment variable SCANNER_API_KEY set to your tenant key (obtained from https://scan.eleion.io). Use the provided tools: scanner_register_target to register a domain, scanner_verify_target to prove ownership, scanner_start_scan to queue a scan, scanner_get_scan_status to poll progress, and scanner_get_findings to list results. You can only scan domains you have registered and verified.

Key features of Eleion Scanner Mcp

  • Register your own domain for scanning
  • Verify ownership via DNS TXT or well-known record
  • Queue scans with Basic, Full, or Deep profiles
  • Poll scan status until completion
  • Retrieve findings with severity, CVE, and priority
  • AI-specific security checks alongside standard tests

Use cases of Eleion Scanner Mcp

  • Automate security scanning of your owned domains
  • Integrate vulnerability discovery into AI agent workflows
  • Continuously monitor domain security posture (headers, TLS, DNS)
  • Fetch and act on findings (CVEs, misconfigurations) programmatically
  • Perform deep scans on domains after ownership verification

常见问题

1

Can I scan any arbitrary website?

No. You can only scan domains you have registered and verified ownership of via DNS TXT or well-known record. This is a security measure to prevent abuse.

2

What runtime dependencies are required?

The server runs via `npx` (Node.js). You need a `SCANNER_API_KEY` environment variable set to a valid tenant key from <https://scan.eleion.io>.

3

Where does my data get processed and stored?

Your registered domains, scan results, and findings are processed and stored by the hosted Eleion Scanner API (`https://scanner-api.eleion.io`). The MCP server itself only passes commands and responses.

4

How do I handle long-running scans?

Large scans take time. Poll `scanner_get_scan_status` until the status shows `completed`, then use `scanner_get_findings` to retrieve results.

5

What transport and authentication does the server use?

The MCP server communicates with the Eleion Scanner API over HTTPS. Authentication is via the `SCANNER_API_KEY` provided in the environment configuration.

评论

其他 分类下的更多 MCP 服务器