PQC Khepra MCP Server: Agentic Security Attestation Framework

Name: PQC Khepra MCP Server: Agentic Security Attestation Framework
Author: nouchix

@nouchix

Repository

About PQC Khepra MCP Server: Agentic Security Attestation Framework

KHEPRA MCP Server

#post-quantum-cryptography #mcp #server #stig #pqc-stig #ai #llm #agentic-security-attestation-framework

Basic information

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "khepra": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "-e",
        "KHEPRA_MODE=sovereign",
        "-v",
        "/var/lib/khepra:/var/lib/khepra",
        "ghcr.io/nouchix/pqc-khepra-mcp:latest"
      ]
    }
  }
}

Tools

No tools detected

We auto-extract tools from the README. The maintainer can list them under a ## Tools heading to populate this section.

Overview

What is PQC Khepra MCP Server?

It is a sovereign compliance engine that connects AI assistants directly to a hardened security attestation framework. It bundles 36,195 STIG/CCI/NIST/CMMC mappings and provides post-quantum cryptographic attestation on every tool call. Designed for air-gapped, DoD, and classified environments, it runs on your own metal with zero token costs.

How to use PQC Khepra MCP Server?

Install via Docker (recommended) or compile a binary with Go 1.21+. Configure your MCP client (Claude Desktop, Cursor, VS Code, Windsurf, Continue.dev) using a stdio subprocess command pointing to the server. Set environment variables like KHEPRA_MODE=sovereign and optionally KHEPRA_LICENSE_KEY for paid tiers. Run the pqc_stig tool (Community tier) to assess quantum readiness against the built-in PQC-01-STIG-V1R1.

Key features of PQC Khepra MCP Server

36,195 offline STIG/CCI/NIST/CMMC mappings
Post-quantum cryptographic attestation (ML-DSA-65 / FIPS 204)
World's First DoD PQC STIG (17 controls)
Godfather Report with dollar-denominated business impact (FAIR model)
Air-gap and SCIF compatible (sovereign/ironbank modes)
Flat annual licensing – no per-token charges
Runs on your metal – on-prem, classified environments

Use cases of PQC Khepra MCP Server

Assess a project’s quantum readiness against PQC-01-STIG-V1R1
Generate executive-ready risk reports for compliance audits
Scan systems in air-gapped or classified networks
Map security findings to STIG, NIST 800-53/800-171, or CMMC controls
Operate a zero-egress compliance engine inside a SCIF

FAQ from PQC Khepra MCP Server

Do I need a license key for the Community tier?

No. The Community tier is free and requires no license key – just run pqc_stig with KHEPRA_MODE=sovereign.

Can this server run without internet access?

Yes. In sovereign mode the server makes zero egress calls, making it suitable for air-gapped and SCIF environments.

What MCP clients does it support?

Claude Desktop, Cursor, VS Code (Cline extension), Windsurf, and Continue.dev. Cloud tools (Claude.ai, ChatGPT, Gemini) can connect via

Comments

More Developer Tools MCP servers

nuxt-mcp / vite-plugin-mcp

antfu

MCP server helping models to understand your Vite/Nuxt app better.

910

mcp-excalidraw

yctimlin

MCP server and Claude Code skill for Excalidraw — programmatic canvas toolkit to create, edit, and export diagrams via AI agents with real-time canvas sync.

2.1K

Golf

golf-mcp

Production-Ready MCP Server Framework • Build, deploy & scale secure AI agent infrastructure • Includes Auth, Observability, Debugger, Telemetry & Runtime • Run real-world MCPs powering AI Agents

834

Unity MCP (Server + Plugin)

IvanMurzak

AI Skills, MCP Tools, and CLI for Unity Engine. Full AI develop and test loop. Use cli for quick setup. Efficient token usage, advanced tools. Any C# method may be turned into a tool by a single line. Works with Claude Code, Gemini, Copilot, Cursor and any other absolutely for fr

3.5K

Grafana MCP server

grafana

MCP server for Grafana

3.2K