Eleion Scanner Mcp
About
Eleion security scanner for AI agents: register/verify your domains,
Details
- Author
- hernaninverso
- Downloads
- 191
- Categories
- Other
Jump to
- Register your own domain for scanning
- Verify ownership via DNS TXT or well-known record
- Queue scans with Basic, Full, or Deep profiles
- Poll scan status until completion
- Retrieve findings with severity, CVE, and priority
- AI-specific security checks alongside standard tests
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
Eleion Scanner McpCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Configure it in your MCP client using npx -y eleion-scanner-mcp with the environment variable SCANNER_API_KEY set to your tenant key (obtained from <https://scan.eleion.io>). Use the provided tools: scanner_register_target to register a domain, scanner_verify_target to prove ownership, scanner_start_scan to queue a scan, scanner_get_scan_status to poll progress, and scanner_get_findings to list results. You can only scan domains you have registered and verified.
scanner_register_target
Register one of YOUR OWN domains/URLs to be security-scanned. Returns a verification_token plus the DNS TXT record (or /.well-known URL) you must publish to prove ownership before scanning. You can only scan domains you own.
scanner_verify_target
Verify domain ownership of a previously registered target by checking the DNS TXT / .well-known record you published. Returns whether verification succeeded.
scanner_start_scan
Queue a security scan over a target you have already registered AND verified. Returns a scan_id and status. Poll scanner_get_scan_status until completed, then read scanner_get_findings.
scanner_get_scan_status
Get the status of a scan (queued|running|completed|failed) and how many findings it has.
scanner_get_findings
List the security findings of a completed scan (severity, CVE, template, title, URL, priority_score), ordered by priority.
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"eleion scanner mcp": {
"eleion-scanner": {
"command": "npx",
"args": [
"-y",
"eleion-scanner-mcp"
],
"env": {
"SCANNER_API_KEY": "your_tenant_key"
}
}
}
}
}McpServers
{
"eleion-scanner": {
"command": "npx",
"args": [
"-y",
"eleion-scanner-mcp"
],
"env": {
"SCANNER_API_KEY": "your_tenant_key"
}
}
}Eleion Scanner — MCP server
Drive the Eleion security scanner from an AI agent: register one of your own
domains, prove ownership, queue a security scan (headers, TLS, DNS, ports, tech-fingerprint, plus
AI-specific checks), and read the findings — severity, CVE, title, priority. Wraps the hosted Eleion
Scanner API (https://scanner-api.eleion.io).
Tools
| Tool | What it does |
|------|--------------|
| scanner_register_target(target_url) | Register one of your domains; returns the DNS TXT / well-known record to publish for ownership proof. |
| scanner_verify_target(target_id) | Verify the ownership record you published. |
| scanner_start_scan(target_id, scan_profile?) | Queue a scan (basic/full/deep) over a verified target. |
| scanner_get_scan_status(scan_id) | Poll a scan's status and finding count. |
| scanner_get_findings(scan_id) | List the findings (severity, CVE, template, title, priority). |
Setup
{
"mcpServers": {
"eleion-scanner": {
"command": "npx",
"args": ["-y", "eleion-scanner-mcp"],
"env": { "SCANNER_API_KEY": "your_tenant_key" }
}
}
}
Get a tenant key at <https://scan.eleion.io>. You can only scan domains you have registered and
verified ownership of — this is not an arbitrary-target scanner.
The scan worker runs the analysis server-side; large scans take time, so poll scanner_get_scan_status
until completed. Your registered domains and findings are processed by the hosted API. MIT licensed.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
