PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder MCP server
io.github.nouchix/pqc-khepra-mcp·v1.0.0·1 starsPost-quantum CMMC compliance scanner & AI agent attestation. FIPS 140-3, ML-DSA-65, 36K+ mappings.
1 stars
Reviews
Write oneNobody has reviewed PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder tools
No tool declarations could be read from the package source. They show once the server is installed.
Public scan report
scanner v0.1.9 · 2026-09-27 · same rubric, same numbers if you re-run it
- –Code scanpackage could not be scannedn/a
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitystatic API keys via environment variables6/15
- Maintenancelast push 0 days ago15/15
- Maintainer identityregistry namespace matches repository owner7/10
How PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 70/100
- higher than 37% of 4,460 AI and agents servers
- GitHub stars
- 1
- more than 50% of 2,711 AI and agents servers
Install PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder in Claude Code, Cursor or VS Code
claude mcp add pqc-khepra-mcp -- docker run -i --rm ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0
What the publisher says
From the PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder repository's README, as published. We do not edit it. Read it on GitHub
KHEPRA MCP Server
Sovereign compliance engine with 36,195 STIG/CCI/NIST/CMMC mappings. 76 tools. v2.0.0.
Air-gappable. Zero token costs. Run ertscan → get a Godfather Report with dollar-denominated business impact. The only MCP compliance server that runs on your metal — with the World's First DoD PQC STIG** built in.
PQC-01-STIG-V1R1 — Full Whitepaper →
17 controls covering CNSA 2.0, FIPS 203/204/205, and the NSA's May 2026 MCP security advisory.
The world's first DoD-style Post-Quantum Cryptography STIG, including the first PQC controls for agentic AI and MCP deployments.
Live hosted endpoint: https://mcp.souhimbou.ai/sse — zero install, connect in 30 seconds.
Self-host for sovereign/air-gap: Docker or binary.
Tiers
Community tier is free. Run pqc_stig to assess your project's quantum readiness against
PQC-01-STIG-V1R1 — the World's First DoD-style Post-Quantum Cryptography STIG — no license key needed.
Continuous compliance scanning (autopilot) is included in every paid tier — it's core to the product, not an upsell.
What It Does
KHEPRA MCP connects your AI assistant directly to a hardened compliance engine. Ask Claude or any MCP client to scan a system, map findings to STIG/NIST/CMMC controls, and generate an executive-ready risk report — all without sending data to external APIs.
Key capabilities:
- 36,195 STIG/CCI/NIST 800-53/800-171/CMMC mappings (offline, bundled)
- Post-quantum cryptographic attestation on every tool call (ML-DSA-65 / FIPS 204)
- World's First DoD PQC STIG — 17 controls covering CNSA 2.0 / FIPS 203/204/205 + agentic AI / MCP (PQC-01-STIG-V1R1)
- Godfather Report: dollar-denominated business impact per finding (FAIR model)
- Air-gap and SCIF compatible — sovereign/ironbank modes make zero egress calls
- Flat annual licensing — no per-token or per-query charges
- Runs on your metal: on-prem, DoD, IC, classified environments
Quickstart — Hosted Endpoint (Zero Install)
The fastest path to a live compliance tool in your AI client. No Docker, no binary, no build:
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder: common questions
- Is PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder MCP server safe?
- Mostly: it is graded B (70/100). Read the PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder safety report
- How do I install PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder need an API key?
- Yes. The registry entry asks for
KHEPRA_LICENSE_KEY,SUPABASE_ANON_KEY. - Is PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder maintained?
- The last commit was 38 days ago (2026-09-27). The latest release is v1.0.0.
- What can I use instead of PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder?
- Servers from other publishers that do the same job: Agent Security Scanner MCP server, HOL Guard MCP server and Commonly MCP server.
- How does PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder compare with other AI and agents MCP servers?
- safety score 70/100 (higher than 37% of 4,460 AI and agents servers); github stars 1 (more than 50% of 2,711 AI and agents servers). Full comparison.
Alternatives to PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder
Same job from other publishers: the closest match first, then the best rated.
- Agent Security ScannerSecurity layer for AI agents: blocks prompt injection, detects fake packages, scans vulnerabilities.not reviewedEstablishedC
- HOL GuardLocal-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server.not reviewedEstablishedA
- CommonlyRead Commonly pods and post as a Commonly agent you create, with a token from your Commonly account.not reviewedEstablishedA
three.ws AutopilotSet autopilot scopes and a daily SOL spend cap, then propose, execute, and undo agent actions.not reviewedEstablishedB- ShellwardAI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.not reviewedEstablishedA
