MCP.so
登录

PQC Khepra MCP Server: Agentic Security Attestation Framework

@nouchix

关于 PQC Khepra MCP Server: Agentic Security Attestation Framework

KHEPRA MCP Server

基本信息

分类

开发工具

传输方式

stdio

发布者

nouchix

提交者

SouhimbouKone

配置

使用下面的配置,将此服务器添加到你的 MCP 客户端。

{
  "mcpServers": {
    "khepra": {
      "command": "docker",
      "args": [
        "run",
        "--rm",
        "-i",
        "-e",
        "KHEPRA_MODE=sovereign",
        "-v",
        "/var/lib/khepra:/var/lib/khepra",
        "ghcr.io/nouchix/pqc-khepra-mcp:latest"
      ]
    }
  }
}

工具

未检测到工具

工具是从 README 中自动提取的。维护者可以在 ## Tools 标题下列出工具,即可填充这部分内容。

概览

What is PQC Khepra MCP Server?

It is a sovereign compliance engine that connects AI assistants directly to a hardened security attestation framework. It bundles 36,195 STIG/CCI/NIST/CMMC mappings and provides post-quantum cryptographic attestation on every tool call. Designed for air-gapped, DoD, and classified environments, it runs on your own metal with zero token costs.

How to use PQC Khepra MCP Server?

Install via Docker (recommended) or compile a binary with Go 1.21+. Configure your MCP client (Claude Desktop, Cursor, VS Code, Windsurf, Continue.dev) using a stdio subprocess command pointing to the server. Set environment variables like KHEPRA_MODE=sovereign and optionally KHEPRA_LICENSE_KEY for paid tiers. Run the pqc_stig tool (Community tier) to assess quantum readiness against the built-in PQC-01-STIG-V1R1.

Key features of PQC Khepra MCP Server

  • 36,195 offline STIG/CCI/NIST/CMMC mappings
  • Post-quantum cryptographic attestation (ML-DSA-65 / FIPS 204)
  • World's First DoD PQC STIG (17 controls)
  • Godfather Report with dollar-denominated business impact (FAIR model)
  • Air-gap and SCIF compatible (sovereign/ironbank modes)
  • Flat annual licensing – no per-token charges
  • Runs on your metal – on-prem, classified environments

Use cases of PQC Khepra MCP Server

  • Assess a project’s quantum readiness against PQC-01-STIG-V1R1
  • Generate executive-ready risk reports for compliance audits
  • Scan systems in air-gapped or classified networks
  • Map security findings to STIG, NIST 800-53/800-171, or CMMC controls
  • Operate a zero-egress compliance engine inside a SCIF

FAQ from PQC Khepra MCP Server

Do I need a license key for the Community tier?

No. The Community tier is free and requires no license key – just run pqc_stig with KHEPRA_MODE=sovereign.

Can this server run without internet access?

Yes. In sovereign mode the server makes zero egress calls, making it suitable for air-gapped and SCIF environments.

What MCP clients does it support?

Claude Desktop, Cursor, VS Code (Cline extension), Windsurf, and Continue.dev. Cloud tools (Claude.ai, ChatGPT, Gemini) can connect via

评论

开发工具 分类下的更多 MCP 服务器