Skip to main content
Glama
Sign In
Eleion Scanner MCP

Eleion Scanner MCP

by eleata
OverviewSchemaSourceRelated ServersDiscussionsAdmin
JavaScript
Remote

Eleion Scanner — MCP server

Drive the Eleion security scanner from an AI agent: register one of your own domains, prove ownership, queue a security scan (headers, TLS, DNS, ports, tech-fingerprint, plus AI-specific checks), and read the findings — severity, CVE, title, priority. Wraps the hosted Eleion Scanner API (https://scanner-api.eleion.io).

Tools

Tool

What it does

scanner_register_target(target_url)

Register one of your domains; returns the DNS TXT / well-known record to publish for ownership proof.

scanner_verify_target(target_id)

Verify the ownership record you published.

scanner_start_scan(target_id, scan_profile?)

Queue a scan (basic/full/deep) over a verified target.

scanner_get_scan_status(scan_id)

Poll a scan's status and finding count.

scanner_get_findings(scan_id)

List the findings (severity, CVE, template, title, priority).

Related MCP server: mcp-security-server

Setup

{
  "mcpServers": {
    "eleion-scanner": {
      "command": "npx",
      "args": ["-y", "eleion-scanner-mcp"],
      "env": { "SCANNER_API_KEY": "your_tenant_key" }
    }
  }
}

Get a tenant key at https://scan.eleion.io. You can only scan domains you have registered and verified ownership of — this is not an arbitrary-target scanner.

The scan worker runs the analysis server-side; large scans take time, so poll scanner_get_scan_status until completed. Your registered domains and findings are processed by the hosted API. MIT licensed.

Available Tools

5 tools
scanner_get_findingsA

List the security findings of a completed scan (severity, CVE, template, title, URL, priority_score), ordered by priority.

Inputs: scan_id (required).

scanner_get_scan_statusA

Get the status of a scan (queued|running|completed|failed) and how many findings it has.

Inputs: scan_id (required).

scanner_register_targetA

Register one of YOUR OWN domains/URLs to be security-scanned. Returns a verification_token plus the DNS TXT record (or /.well-known URL) you must publish to prove ownership before scanning. You can only scan domains you own.

Inputs: target_url (required).

scanner_start_scanA

Queue a security scan over a target you have already registered AND verified. Returns a scan_id and status. Poll scanner_get_scan_status until completed, then read scanner_get_findings.

Inputs: target_id (required), scan_profile.

scanner_verify_targetA

Verify domain ownership of a previously registered target by checking the DNS TXT / .well-known record you published. Returns whether verification succeeded.

Inputs: target_id (required).

Tool Schema Changelog

Recent tool additions, removals, and schema changes observed during successful MCP inspections.

Loading tool schema changelog…

    Deploy Server
    One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

    TDQS

    A4.2/5.0

    Scored across 5 tools

    Disambiguation5/5

    Each tool targets a distinct step in the scanning workflow: registration, verification, scan start, status polling, and findings retrieval. No two tools overlap in purpose, making selection unambiguous.

    Naming Consistency5/5

    All tools follow a consistent 'scanner_verb_noun' pattern with snake_case (e.g., scanner_get_findings, scanner_register_target). The prefix and structure are uniform across all five tools.

    Tool Count5/5

    With 5 tools, the server is well-scoped for its purpose—managing security scans. Each tool addresses a necessary step, and the count is neither too thin nor overly heavy for the domain.

    Completeness4/5

    The tool set covers the full scan lifecycle: register, verify, start, poll status, and retrieve findings. Minor gaps like a tool to delete or list targets exist but do not hinder the primary workflow.

    Resources

    Related MCP Connectors

    Related MCP Servers

    • mcp-security-server

      Balckers
      F
      license
      Not graded
      quality
      D
      maintenance
      Provides AI agents with standardized security scanning capabilities for authorized assessments, including host detection, port scanning, service fingerprinting, web vulnerability scanning, CVE verification, and report generation, all with unified JSON output and strict compliance controls.
      -

    • NEL VEIL MCP

      NELPROINC
      A
      license
      A
      quality
      B
      maintenance
      Enables AI agents to perform passive security scans on domains, checking email spoofing (DMARC/SPF/DKIM), TLS weaknesses, security headers, exposed files, and subdomain-takeover risk without needing an API key.
      7
      75 npm
      MIT