QuantumScan PQC Scanner
About
Post-quantum cryptography (PQC) security scanner for blockchain and AI agents. Detects quantum-vulnerable algorithms (ECDSA, RSA, DH) and provides NIST FIPS 203/204/205 migration paths. Free, open-source, privacy-first. Scan any GitHub repository or smart contract via MCP tools:
Details
- Author
- gaiabio12-design
- Downloads
- 312
- Categories
- Developer Tools, Security, AI
Jump to
- Detects quantum-vulnerable algorithms (ECDSA, RSA, DH).
- Provides NIST FIPS 203/204/205 migration paths.
- Free and open-source.
- Privacy-first scanning.
- Scans any GitHub repository or smart contract.
- Used by autonomous AI agents for security audits.
Setting up with Highlight
This MCP is not yet compatible with Highlight’s one-click setup. However, you can still use it with Highlight by following these steps:
- Download and install Highlight from highlightai.com/download
- Navigate to the plugins tab and select "Add Custom Plugin"
-
Configure the plugin with the settings below
Plugin Name
QuantumScan PQC ScannerCommand (node, npx, python, etc.)Please refer to the README for specific instructions on how to obtain API keys or other required environment variables.
- Enable "Start Automatically" if you want the plugin to start when Highlight launches
From the repository
Use the MCP tools scan_repository, check_pqc_risk, and scan_contract to scan any GitHub repository or smart contract for quantum-vulnerable algorithms. The server checks for ECDSA, RSA, and DH and then offers NIST-approved migration paths.
scan_repository
Submit a GitHub, GitLab, or Bitbucket repository for post-quantum cryptography (PQC) vulnerability scanning. Returns a scan_id. Call get_scan_result to poll for the result. Free tier: 10 scans/day per IP. Paid tier: credit-based (register at /api/agent/register).
get_scan_result
Get the result of a previously submitted scan. Returns status (submitted | working | completed | failed) and, when completed, a full CBOM (Cryptographic Bill of Materials) compliant with EIP-7789 and CycloneDX CBOM 1.6, plus a quantum risk score (0 = fully safe, 100 = fully vulnerable). Rate-limited: 60 calls/min per IP or API key.
check_pqc_risk
Instant check (no DB, no scan) — returns whether a list of algorithm names are quantum-vulnerable. Useful for quick risk assessment before calling scan_repository. Rate-limited: 100 calls/day per IP (free), 500/day per API key (paid).
scan_contract
Scan a verified on-chain smart contract for quantum-vulnerable cryptography AND today's fraud patterns (rug pulls, honeypots, uncapped mints, reentrancy). Use this BEFORE signing a transaction, interacting with a DeFi protocol, or integrating a contract into an agent workflow. Synchronous — result is immediate (no polling needed). Requires the contract to be verified on Sourcify (https://sourcify.dev). Returns risk score 0-100, agent risk score, finding breakdown, and concrete PQC migration steps. Rate-limited: same as scan_repository (10/day per IP free, credit-based paid).
Claude Desktop / Cursor
Paste into your MCP client config file to install this server.
{
"mcpServers": {
"quantumscan pqc scanner": {
"quantumscan": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://quantumscan.io/api/mcp"
]
}
}
}
}McpServers
{
"quantumscan": {
"command": "npx",
"args": [
"-y",
"mcp-remote",
"https://quantumscan.io/api/mcp"
]
}
}Post-quantum cryptography (PQC) security scanner for blockchain and AI agents. Detects quantum-vulnerable algorithms (ECDSA, RSA, DH) and provides NIST FIPS 203/204/205 migration paths. Free, open-source, privacy-first. Scan any GitHub repository or smart contract via MCP tools: scan_repository, check_pqc_risk, scan_contract. Used by autonomous AI agents for automated security audits.
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
