MCP.so
登录

QuantumScan PQC Scanner MCP Server

@gaiabio12-design

基本信息

分类

开发工具

传输方式

stdio

作者

gaiabio12-design

提交者

Rodolfo Carvalho

关于 QuantumScan PQC Scanner MCP Server

Post-quantum cryptography (PQC) security scanner for blockchain and AI agents. Detects quantum-vulnerable algorithms (ECDSA, RSA, DH) and provides NIST FIPS 203/204/205 migration paths. Free, open-source, privacy-first. Scan any GitHub repository or smart contract via MCP tools:

QuantumScan PQC Scanner MCP Server 配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "quantumscan": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://quantumscan.io/api/mcp"
      ]
    }
  }
}

QuantumScan PQC Scanner MCP Server 工具

4

Submit a GitHub, GitLab, or Bitbucket repository for post-quantum cryptography (PQC) vulnerability scanning. Returns a scan_id. Call get_scan_result to poll for the result. Free tier: 10 scans/day per IP. Paid tier: credit-based (register at /api/agent/register).

Get the result of a previously submitted scan. Returns status (submitted | working | completed | failed) and, when completed, a full CBOM (Cryptographic Bill of Materials) compliant with EIP-7789 and CycloneDX CBOM 1.6, plus a quantum risk score (0 = fully safe, 100 = fully vulnerable). Rate-limited: 60 calls/min per IP or API key.

Instant check (no DB, no scan) — returns whether a list of algorithm names are quantum-vulnerable. Useful for quick risk assessment before calling scan_repository. Rate-limited: 100 calls/day per IP (free), 500/day per API key (paid).

Scan a verified on-chain smart contract for quantum-vulnerable cryptography AND today's fraud patterns (rug pulls, honeypots, uncapped mints, reentrancy). Use this BEFORE signing a transaction, interacting with a DeFi protocol, or integrating a contract into an agent workflow. Synchronous — result is immediate (no polling needed). Requires the contract to be verified on Sourcify (https://sourcify.dev). Returns risk score 0-100, agent risk score, finding breakdown, and concrete PQC migration steps. Rate-limited: same as scan_repository (10/day per IP free, credit-based paid).

概览

What is QuantumScan PQC Scanner?

QuantumScan PQC Scanner is a post-quantum cryptography (PQC) security scanner for blockchain and AI agents. It detects quantum-vulnerable algorithms (ECDSA, RSA, DH) and provides NIST FIPS 203/204/205 migration paths. It is free, open-source, and privacy-first.

How to use QuantumScan PQC Scanner?

Use the MCP tools scan_repository, check_pqc_risk, and scan_contract to scan any GitHub repository or smart contract for quantum-vulnerable algorithms. The server checks for ECDSA, RSA, and DH and then offers NIST-approved migration paths.

Key features of QuantumScan PQC Scanner

  • Detects quantum-vulnerable algorithms (ECDSA, RSA, DH).
  • Provides NIST FIPS 203/204/205 migration paths.
  • Free and open-source.
  • Privacy-first scanning.
  • Scans any GitHub repository or smart contract.
  • Used by autonomous AI agents for security audits.

Use cases of QuantumScan PQC Scanner

  • Blockchain security audits to identify quantum-vulnerable cryptographic components.
  • Autonomous AI agents performing automated PQC risk assessments.
  • Discovering ECDSA, RSA, or DH usage in GitHub repositories.
  • Checking smart contracts for quantum risks and obtaining migration guidance.

常见问题

1

What algorithms can QuantumScan PQC Scanner detect?

It detects ECDSA, RSA, and DH, which are known to be vulnerable to quantum attacks.

2

Does QuantumScan PQC Scanner provide migration guidance?

Yes, it offers NIST FIPS 203/204/205 migration paths for each detected vulnerability.

3

Is QuantumScan PQC Scanner free to use?

Yes, it is free and open-source.

评论

开发工具 分类下的更多 MCP 服务器