English Français العربية

Eleion Scanner

Official registry Security

Register/verify your domains, queue security scans, and read findings (CVE, severity).

Source code Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

NPM package eleion-scanner-mcp
Claude Code 
claude mcp add eleion-scanner -e 'SCANNER_API_KEY=<your scanner_api_key>' -- npx -y eleion-scanner-mcp@0.1.1
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "eleion-scanner": {
            "command": "npx",
            "args": [
                "-y",
                "eleion-scanner-mcp@0.1.1"
            ],
            "env": {
                "SCANNER_API_KEY": "<your scanner_api_key>"
            }
        }
    }
}

Environment variables

  • SCANNER_API_KEY required secret Tenant API key from https://scan.eleion.io (you can only scan domains you own and have verified)

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Eleion Scanner — MCP server

Drive the Eleion security scanner from an AI agent: register one of your own domains, prove ownership, queue a security scan (headers, TLS, DNS, ports, tech-fingerprint, plus AI-specific checks), and read the findings — severity, CVE, title, priority. Wraps the hosted Eleion Scanner API (https://scanner-api.eleion.io).

Tools

ToolWhat it does
scanner_register_target(target_url)Register one of your domains; returns the DNS TXT / well-known record to publish for ownership proof.
scanner_verify_target(target_id)Verify the ownership record you published.
scanner_start_scan(target_id, scan_profile?)Queue a scan (basic/full/deep) over a verified target.
scanner_get_scan_status(scan_id)Poll a scan's status and finding count.
scanner_get_findings(scan_id)List the findings (severity, CVE, template, title, priority).

Setup

{
  "mcpServers": {
    "eleion-scanner": {
      "command": "npx",
      "args": ["-y", "eleion-scanner-mcp"],
      "env": { "SCANNER_API_KEY": "your_tenant_key" }
    }
  }
}

Get a tenant key at https://scan.eleion.io. You can only scan domains you have registered and verified ownership of — this is not an arbitrary-target scanner.

The scan worker runs the analysis server-side; large scans take time, so poll scanner_get_scan_status until completed. Your registered domains and findings are processed by the hosted API. MIT licensed.

Frequently asked questions

What is Eleion Scanner?

Register/verify your domains, queue security scans, and read findings (CVE, severity).

How do I install Eleion Scanner?

It runs on your machine. In Claude Code: claude mcp add eleion-scanner -e 'SCANNER_API_KEY=<your scanner_api_key>' -- npx -y eleion-scanner-mcp@0.1.1. For other clients, paste the JSON configuration from this page into their MCP settings.

Does Eleion Scanner need an API key?

Yes. It expects SCANNER_API_KEY, which you set in its configuration.

Is Eleion Scanner open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains Eleion Scanner?

It is published by hernaninverso. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.