io.github.quantakrypto/pqc-tools

@quantakrypto/qscan

Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.

10 151/wk 2 tools GitHub npm

No known CVEs

Apache-2.0 license

Actively maintained

Last commit 4d ago

Works with most clients

Transport:

2 tools · ~60 tok

Grade A · 0.0% of 200K ctx

MCPpedia last refreshed this data 6h ago

Edit this pageView history

io.github.quantakrypto/pqc-tools is an MCP server that scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance. Its tool list has not been published yet, requires no API key, and scores 86/100 on MCPpedia's security, maintenance and efficiency rubric.

Other

Step 1

Install in your client

Config is the same across clients — only the file and path differ.

Supported in Claude Desktopstdio · Node 18+

Paste into ~/Library/Application Support/Claude/claude_desktop_config.json

{
  "mcpServers": {
    "io-github-quantakrypto-pqc-tools": {
      "args": [
        "-y",
        "@quantakrypto/qscan"
      ],
      "command": "npx"
    }
  }
}

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-quantakrypto-pqc-tools)](https://mcppedia.org/s/io-github-quantakrypto-pqc-tools)

Read me

What io.github.quantakrypto/pqc-tools does

Open-source post-quantum readiness tooling by quantakrypto. Find quantum-vulnerable cryptography in any codebase, wire post-quantum readiness into your editor and your CI, and conformance-test post-quantum implementations — with zero runtime dependencies (Node built-ins only).

Test This Server

Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.

npx -y '@quantakrypto/qscan' 2>&1 | head -1 && echo "✓ Server started successfully"

After testing, let us know if it worked:

Loading README…

Scored, not listed

Why this score

Five weighted categories — click any category to see the underlying evidence.

Score breakdown

86/100across 5 weighted dimensions

How we score →

0255075100

−14

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

Checked @quantakrypto/qscan against OSV.dev.

Inventory

Tools (2)

Click any tool to inspect its schema.

~60 tokens total

Community

Reviews

Be the first to review

Have you used this server?

Share your experience — it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.quantakrypto/pqc-tools safe to use?: io.github.quantakrypto/pqc-tools has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.
How do I install io.github.quantakrypto/pqc-tools?: io.github.quantakrypto/pqc-tools supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
What can io.github.quantakrypto/pqc-tools do?: io.github.quantakrypto/pqc-tools provides 2 tools: Development, License. See the full tools list on the server page for descriptions and parameters.
What AI clients work with io.github.quantakrypto/pqc-tools?: io.github.quantakrypto/pqc-tools is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
Is io.github.quantakrypto/pqc-tools actively maintained?: io.github.quantakrypto/pqc-tools is actively maintained — last commit was 4 days ago. It has 10 GitHub stars.

Similar servers

Others in other

View all →

Transport Stdio95

Transport for TMCP using STDIO

197 14

Flare95

The graph based agentic IDE

123 3

Headroom95

Compress tool outputs, logs, files, and RAG chunks before they reach the LLM. 60-95% fewer tokens, same answers. Library, proxy, MCP server.

67.2k 3

app.fojin/fojin-mcp94

Buddhist canon tools: search, passages, cross-canon parallels, dictionaries — all URN-cited.

329 8

MCP Security Weekly

Get CVE alerts and security updates for io.github.quantakrypto/pqc-tools and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

quantakrypto-tools

Design goals: simple, clean, reusable code; zero runtime dependencies; everything documented, tested, and example-driven.

What's inside

Tool	What it does	Get it
qScan (`@quantakrypto/qscan`)	CLI that finds quantum-vulnerable crypto (RSA, (EC)DH, ECDSA, EdDSA, …) across 14 languages (JS/TS, Python, Go, Java/Kotlin/Scala, C#, Rust, Ruby, PHP, Elixir, C/C++, Swift, Objective-C, Dart, Solidity/Move/Cairo) and prints a readiness score. SARIF / JSON / CBOM / evidence (ISO 27001 A.8.24) / OpenVEX output, baselines, incremental & parallel scans. Compliance mandate gate: `--mandate cnsa-2.0` / `nist-ir-8547` reports each prohibited finding with its dated clause and fails the build on the mandate's deadlines (`--lead-months`, `--fail-now`). Opt-in `--triage` (BYOK LLM re-rank/explain) and a `qremediate` codemod CLI.	`npx @quantakrypto/qscan ./`
MCP (`@quantakrypto/mcp`)	Model Context Protocol server that gives AI coding agents post-quantum readiness tools (16 tools — scan, inventory, explain, suggest-hybrid, CBOM, plan-migration, triage, remediate, probe-endpoint, …). Local stdio + hostable HTTP.	`claude mcp add quantakrypto npx @quantakrypto/mcp`
Sieve (`@quantakrypto/sieve`)	Conformance battery for ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205) implementations, driven over a JSON stdin/stdout protocol.	`npx @quantakrypto/sieve --help`
Action (`@quantakrypto/action`)	GitHub Action that runs the qScan/Sieve/qProbe checks in CI, writes SARIF for code-scanning upload, annotates the diff, and fails the build only on new quantum-vulnerable crypto.	`uses: quantakrypto/pqc-tools/packages/action@v1`
agent (`@quantakrypto/agent`)	Optional, zero-dependency BYOK (bring-your-own-key) LLM client (native `fetch`; Anthropic + OpenAI-compatible adapters) that powers qScan `--triag

Tool

What it does

Get it

qScan (@quantakrypto/qscan)

CLI that finds quantum-vulnerable crypto (RSA, (EC)DH, ECDSA, EdDSA, …) across 14 languages (JS/TS, Python, Go, Java/Kotlin/Scala, C#, Rust, Ruby, PHP, Elixir, C/C++, Swift, Objective-C, Dart, Solidity/Move/Cairo) and prints a readiness score. SARIF / JSON / CBOM / evidence (ISO 27001 A.8.24) / OpenVEX output, baselines, incremental & parallel scans. Compliance mandate gate: --mandate cnsa-2.0 / nist-ir-8547 reports each prohibited finding with its dated clause and fails the build on the mandate's deadlines (--lead-months, --fail-now). Opt-in --triage (BYOK LLM re-rank/explain) and a qremediate codemod CLI.

npx @quantakrypto/qscan ./

MCP (@quantakrypto/mcp)

Model Context Protocol server that gives AI coding agents post-quantum readiness tools (16 tools — scan, inventory, explain, suggest-hybrid, CBOM, plan-migration, triage, remediate, probe-endpoint, …). Local stdio + hostable HTTP.

claude mcp add quantakrypto npx @quantakrypto/mcp

Sieve (@quantakrypto/sieve)

Conformance battery for ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205) implementations, driven over a JSON stdin/stdout protocol.

npx @quantakrypto/sieve --help

Action (@quantakrypto/action)

GitHub Action that runs the qScan/Sieve/qProbe checks in CI, writes SARIF for code-scanning upload, annotates the diff, and fails the build only on new quantum-vulnerable crypto.

uses: quantakrypto/pqc-tools/packages/action@v1

agent (@quantakrypto/agent)

Optional, zero-dependency BYOK (bring-your-own-key) LLM client (native fetch; Anthropic + OpenAI-compatible adapters) that powers qScan `--triag

Frequently Asked Questions

Is io.github.quantakrypto/pqc-tools safe to use?

io.github.quantakrypto/pqc-tools has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments. Licensed under Apache-2.0.

How do I install io.github.quantakrypto/pqc-tools?

io.github.quantakrypto/pqc-tools supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.

What can io.github.quantakrypto/pqc-tools do?

io.github.quantakrypto/pqc-tools provides 2 tools: Development, License. See the full tools list on the server page for descriptions and parameters.

What AI clients work with io.github.quantakrypto/pqc-tools?

io.github.quantakrypto/pqc-tools is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.

Is io.github.quantakrypto/pqc-tools actively maintained?

io.github.quantakrypto/pqc-tools is actively maintained — last commit was 4 days ago. It has 10 GitHub stars.

quantakrypto-tools

Design goals: simple, clean, reusable code; zero runtime dependencies; everything documented, tested, and example-driven.

What's inside

Tool	What it does	Get it
qScan (`@quantakrypto/qscan`)	CLI that finds quantum-vulnerable crypto (RSA, (EC)DH, ECDSA, EdDSA, …) across 14 languages (JS/TS, Python, Go, Java/Kotlin/Scala, C#, Rust, Ruby, PHP, Elixir, C/C++, Swift, Objective-C, Dart, Solidity/Move/Cairo) and prints a readiness score. SARIF / JSON / CBOM / evidence (ISO 27001 A.8.24) / OpenVEX output, baselines, incremental & parallel scans. Compliance mandate gate: `--mandate cnsa-2.0` / `nist-ir-8547` reports each prohibited finding with its dated clause and fails the build on the mandate's deadlines (`--lead-months`, `--fail-now`). Opt-in `--triage` (BYOK LLM re-rank/explain) and a `qremediate` codemod CLI.	`npx @quantakrypto/qscan ./`
MCP (`@quantakrypto/mcp`)	Model Context Protocol server that gives AI coding agents post-quantum readiness tools (16 tools — scan, inventory, explain, suggest-hybrid, CBOM, plan-migration, triage, remediate, probe-endpoint, …). Local stdio + hostable HTTP.	`claude mcp add quantakrypto npx @quantakrypto/mcp`
Sieve (`@quantakrypto/sieve`)	Conformance battery for ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205) implementations, driven over a JSON stdin/stdout protocol.	`npx @quantakrypto/sieve --help`
Action (`@quantakrypto/action`)	GitHub Action that runs the qScan/Sieve/qProbe checks in CI, writes SARIF for code-scanning upload, annotates the diff, and fails the build only on new quantum-vulnerable crypto.	`uses: quantakrypto/pqc-tools/packages/action@v1`
agent (`@quantakrypto/agent`)	Optional, zero-dependency BYOK (bring-your-own-key) LLM client (native `fetch`; Anthropic + OpenAI-compatible adapters) that powers qScan `--triag

Tool

What it does

Get it

qScan (@quantakrypto/qscan)

npx @quantakrypto/qscan ./

MCP (@quantakrypto/mcp)

claude mcp add quantakrypto npx @quantakrypto/mcp

Sieve (@quantakrypto/sieve)

Conformance battery for ML-KEM (FIPS 203), ML-DSA (FIPS 204), and SLH-DSA (FIPS 205) implementations, driven over a JSON stdin/stdout protocol.

npx @quantakrypto/sieve --help

Action (@quantakrypto/action)

GitHub Action that runs the qScan/Sieve/qProbe checks in CI, writes SARIF for code-scanning upload, annotates the diff, and fails the build only on new quantum-vulnerable crypto.

uses: quantakrypto/pqc-tools/packages/action@v1

agent (@quantakrypto/agent)

Optional, zero-dependency BYOK (bring-your-own-key) LLM client (native fetch; Anthropic + OpenAI-compatible adapters) that powers qScan `--triag