# hernaninverso/eleion-scanner-mcp [Health: Active]

**Category:** 🔒 Security  
**Repository:** https://github.com/hernaninverso/eleion-scanner-mcp  
**GitHub Stars:** 0  
**npm Downloads (last month):** 135  
**Views:** 0  
**Installs:** 0  
**Upvotes:** 0  
**Directory Page:** https://allmcps.com/mcp/hernaninverso-eleion-scanner-mcp

## Description
Register/verify your domains, queue security scans (headers, TLS, DNS, ports, CVEs + AI-specific checks) and read findings, for AI agents. Install with npx -y eleion-scanner-mcp.

## Tools
Capabilities this server exposes over MCP:

- **scanner_register_target** — Register one of YOUR OWN domains/URLs to be security-scanned. Returns a verification_token plus the DNS TXT record (or /.well-known URL) you must publish to prove ownership before scanning. You can only scan domains you own.
- **scanner_verify_target** — Verify domain ownership of a previously registered target by checking the DNS TXT / .well-known record you published. Returns whether verification succeeded.
- **scanner_start_scan** — Queue a security scan over a target you have already registered AND verified. Returns a scan_id and status. Poll scanner_get_scan_status until completed, then read scanner_get_findings.
- **scanner_get_scan_status** — Get the status of a scan (queued|running|completed|failed) and how many findings it has.
- **scanner_get_findings** — List the security findings of a completed scan (severity, CVE, template, title, URL, priority_score), ordered by priority.

## Claude Desktop Quick Installation
Install path detected from listing signals. Uses `npx` (confidence: high):

```json
"mcpServers": {
  "eleion-scanner-mcp": {
    "command": "npx",
    "args": ["-y","eleion-scanner-mcp"],
    "env": {
      "SCANNER_API_KEY": ""
    }
  }
}
```

**Requires environment variables:** `SCANNER_API_KEY` — the values above are empty placeholders; fill in real credentials before running (see the repository for what each one is for).

## Documentation

## What the hernaninverso/eleion-scanner-mcp MCP server does

The hernaninverso/eleion-scanner-mcp MCP server exposes Eleion Scanner operations as tools for an AI agent. It connects to the hosted API at `https://scanner-api.eleion.io` and supports a workflow based on registered, verified domains.

An agent can register one of your domains, receive the DNS TXT or well-known record needed to prove ownership, and request verification after that record has been published. Once verification succeeds, the agent can queue a security scan and inspect its progress and results.

The scanner covers HTTP security headers, TLS, DNS, open ports, technology fingerprints, CVEs, and AI-specific checks. Findings include fields such as severity, CVE, template, title, and priority.

## How it works

The workflow is sequential:

1. Call `scanner_register_target(target_url)` with a domain you control.
2. Publish the returned ownership record through DNS or the specified well-known location.
3. Call `scanner_verify_target(target_id)` to confirm ownership.
4. Start a scan with `scanner_start_scan(target_id, scan_profile?)`.
5. Poll `scanner_get_scan_status(scan_id)` until the scan is completed.
6. Retrieve results with `scanner_get_findings(scan_id)`.

The optional scan profile can be `basic`, `full`, or `deep`. Analysis runs on the Eleion side, so scans may not finish immediately, particularly for larger scan requests.

## Setup and configuration

The hernaninverso/eleion-scanner-mcp MCP server runs through `npx`:

```json
{
  "mcpServers": {
    "eleion-scanner": {
      "command": "npx",
      "args": ["-y", "eleion-scanner-mcp"],
      "env": {
        "SCANNER_API_KEY": "your_tenant_key"
      }
    }
  }
}
```

Set `SCANNER_API_KEY` to a tenant key obtained from `https://scan.eleion.io`. The configuration uses the standard MCP process-based setup and does not require a locally hosted scanning worker. The server submits work to the hosted Eleion Scanner API.

## Tools and capabilities

- `scanner_register_target(target_url)`: registers a domain and returns the record needed for ownership proof.
- `scanner_verify_target(target_id)`: checks whether the ownership record has been published correctly.
- `scanner_start_scan(target_id, scan_profile?)`: queues a `basic`, `full`, or `deep` scan for a verified target.
- `scanner_get_scan_status(scan_id)`: reports scan progress and the current finding count.
- `scanner_get_findings(scan_id)`: returns findings with severity, CVE, template, title, and priority data.

## Limitations and notes

This is not an arbitrary-target scanner. Domains must be registered through the service and have their ownership verified before scanning. The scan worker operates server-side, so the agent should poll the status tool rather than assume that a queued scan has completed.

Registered domains and findings are processed by the hosted API. The project is MIT licensed. The hernaninverso/eleion-scanner-mcp MCP server is therefore best suited to authorized domain assessment workflows where the required tenant key and ownership records are available.

_Full upstream README: https://allmcps.com/mcp/hernaninverso-eleion-scanner-mcp/readme_