Eleion Scanner MCP is an MCP server for driving the Eleion security scanner from an AI agent. It wraps the hosted Eleion Scanner API (https://scanner-api.eleion.io），提供对域名扫描流程的访问。
Purpose: register domains you own within an AI agent, verify ownership, queue security scans, and read scan findings, enabling AI-agent-initiated compliant security testing workflows.
Key capabilities:
- Register and verify domain ownership.
- Queue security scans, with scan items including HTTP headers, TLS, DNS, ports, technology fingerprinting, and AI-specific checks.
- Read findings, including severity, CVE, title, and priority.
- Poll scan status via scanner_get_scan_status until the scan completes.
Usage:
- You first need to obtain a tenant key at https://scan.eleion.io .
- This tool only allows scanning domains that have been registered and had ownership verified; it cannot scan arbitrary targets.
- Scan analysis is performed server-side by scan workers; large scans take a long time, so you need to poll scanner_get_scan_status until completed.
- Registered domains and findings are handled by the hosted API.
Use cases: suitable for workflows that need to have an AI agent perform security scans on domains it owns and has verified, collect security findings, and read the results.
Limitations: it can only scan domains that have been registered and had ownership verified; it is not an arbitrary-target scanner. Usage depends on the hosted API and a tenant key. The project is licensed under MIT.