Mmcp.market

quantakrypto pqc-tools MCP server

by quantakrypto·io.github.quantakrypto/pqc-tools·v0.5.2

Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.

B82/100grade B
What users say
No reviews yet
Be the first
Safety scan
B82/100

full report

Adoption
Growing

12 stars24 downloads/wk

Reviews

Write one

Nobody has reviewed quantakrypto pqc-tools yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

quantakrypto pqc-tools tools (11, 2 write)

write = sends, deletes, buys or posts
  • apply_triageFree

    Deterministically attach your triage verdicts to their findings and re-sort by exposure (highest first). Never suppresses. Pass the same 'findings' array you triaged plus a 'verdicts' array of { fingerprint, exposureScore, priority, rationale }.

  • apply_verified_patchwrite actionFree

    Deterministically VERIFY a proposed fix before writing it — runs the same patch-policy + verify_fix + blast-radius gates as `qremediate` (offline, no key, no network). Give the finding, the file's current content, and your proposed FULL corrected content; returns approved:true only if the patch is in-policy, clears the finding, adds no new finding, introduces no network/exec sink, and is bounded in size. This does NOT write the file — you write it, only when approved, and never auto-merge.

  • check_dependencyFree

    Check whether a package is in quantakrypto's known quantum-vulnerable dependency database (the classical crypto it exposes). Provide 'name' and optional 'ecosystem' (default npm).

  • explain_findingFree

    Explain a quantakrypto finding and its post-quantum remediation. Provide a ruleId (e.g. 'forge-rsa-keygen', 'elliptic-ec', 'node-rsa', 'pem-ec-private-key') and/or an algorithm (e.g. 'RSA', 'ECDSA'). The ruleId is resolved against the core detector set, so library and config rules explain correctly.

  • get_fix_examplesFree

    Return before/after code examples for migrating a classical algorithm to a post-quantum / hybrid replacement. Provide an 'algorithm' (RSA, ECDH, ECDSA, …) or a 'ruleId' from a finding.

  • list_rulesFree

    List the quantakrypto detector catalog: every detector id and what it looks for.

  • remediate_findingsFree

    Produce a deterministic remediation REQUEST bundle (rubric + fix schema + per-finding metadata + fingerprints) for YOU (the host agent) to fix. This tool calls no model and needs no key. For each finding, propose the corrected FULL file content, then VERIFY with verify_fix and keep only fixes that clear the finding. Never touch files with secrets; never auto-merge. Pass 'findings' from scan_path --format json.

  • score_deltaFree

    Compute the readiness-score and HNDL change between two finding sets (e.g. before and after a migration). Pass 'before' and 'after' as arrays of findings from scan_path --format json.

  • suggest_hybridFree

    Recommend a post-quantum / hybrid migration. Provide an 'algorithm' (e.g. RSA, ECDH, ECDSA) or free-text 'context' describing the usage. Set 'tier' to 'category-5' for CNSA 2.0 / national-security systems.

  • triage_findingsFree

    Produce a deterministic triage REQUEST bundle (rubric + verdict schema + per-finding metadata) for YOU (the host agent) to reason over. This tool does NOT call any model and needs no API key. Assess each finding's real-world exposure, then call apply_triage with your verdicts. Pass 'findings' as an array from scan_path --format json.

  • verify_fixwrite actionFree

    Run the quantakrypto detectors over a code snippet (NOT the filesystem) and report any classical crypto that remains. Use this to confirm an edit actually removed the quantum-vulnerable usage. Provide 'code' plus a 'language' or 'filename'.

Public scan report

scanner v0.1.9 · 2026-09-25 · same rubric, same numbers if you re-run it

1 high
  • Code scan19 source files scanned25/25
  • Live reliabilityremote reachable in 2329ms17/20
  • Tool poisoning11 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 2 write-action tools with no auth3/15
  • Maintenancelast push 3 days ago15/15
  • Maintainer identityregistry namespace matches repository owner7/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 82/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

What the publisher says

From the quantakrypto pqc-tools repository's README, as published. We do not edit it. Read it on GitHub

quantakrypto-tools

Open-source post-quantum readiness tooling by quantakrypto. Find quantum-vulnerable cryptography in any codebase, wire post-quantum readiness into your editor and your CI, and conformance-test post-quantum implementations — with zero runtime dependencies (Node built-ins only).

Design goals: simple, clean, reusable code; zero runtime dependencies;

everything documented, tested, and example-driven.

What's inside

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Install directly

claude mcp add --transport http pqc-tools https://mcp.quantakrypto.com/mcp
Add to Cursor

quantakrypto pqc-tools: common questions

Is quantakrypto pqc-tools MCP server safe?
Mostly: it is graded B (82/100). Read the quantakrypto pqc-tools safety report
How do I install quantakrypto pqc-tools?
It runs remotely at mcp.quantakrypto.com. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does quantakrypto pqc-tools need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is quantakrypto pqc-tools maintained?
The last commit was 3 days ago (2026-09-22). The latest release is v0.5.2.
Is quantakrypto pqc-tools up?
100% of our last 24 checks got an answer. We check remote servers about four times a day.
What can I use instead of quantakrypto pqc-tools?
Servers from other publishers that do the same job: Notebooklm Secure MCP server, DNS Doctor MCP server and OpenQR MCP server. Compare all quantakrypto pqc-tools alternatives.

Alternatives to quantakrypto pqc-tools

Same job from other publishers: the closest match first, then the best rated.

All quantakrypto pqc-tools alternatives →
  • Notebooklm Secure
    Security-hardened NotebookLM MCP with post-quantum encryption
    A
  • DNS Doctor
    Scan, fix, verify and monitor DNS: SPF, DMARC, DKIM, propagation, health, expiry. Validated fixes.
    A
  • OpenQR
    Generate, edit and track dynamic (editable) QR codes with scan analytics. Hosted MCP and REST API.
    A
  • Prodcheck
    4,372 pre-production checks: security, performance, scale, integrations, post-launch.
    A
  • pkgxray
    Pre-install security scans for npm packages, MCP servers, and AI agents with cited verdict evidence.
    B

More from quantakrypto →