quantakrypto
About
Post-quantum cryptography readiness: scans code and dependencies for quantum-vulnerable RSA/ECDSA/ECDH, plans migration, and verifies fixes.
Details
- Author
- quantakrypto
- Categories
- Developer Tools
Jump to
Setup
Install quantakrypto in your MCP client (Claude Desktop, Cursor, Windsurf, and others).
Repository: https://github.com/quantakrypto/pqc-tools
Follow the installation instructions in the repository README, then restart your MCP client.
Using quantakrypto alongside a PQC library (liboqs / OQS)
quantakryptodoes not implement post-quantum cryptography, by design— it is the scanner, the CI gate, and the conformance harness you wrap around a real PQC library like](https://github.com/quantakrypto/pqc-tools/blob/HEAD/packages/agent/README.md)liboqs / Open Quantum Safe. They compose: quantakryptofinds and gatesclassical crypto (qscan, the Action), tells youwhat to migrate to and in what order(qscan --tier, MCPplan_migration,qremediate), andconformance-tests the replacement(sieveruns any ML-KEM/ML-DSA/SLH-DSA implementation against FIPS 203/204/205, with exact-value KATs when you supply official NIST ACVP vectors). liboqs supplies the primitives.
See the worked end-to-end walkthrough — scan → migrate → verify → gate — inexamples/liboqs-migration/.
quantakrypto-tools/ ├── packages/ │ ├── core/ @quantakrypto/core — shared engine (the contract lives in src/types.ts + src/index.ts) │ ├── qscan/ @quantakrypto/qscan — CLI │ ├── mcp/ @quantakrypto/mcp — MCP server (stdio now, HTTP scaffold for hosting) │ ├── action/ @quantakrypto/action — GitHub Action │ ├── sieve/ @quantakrypto/sieve — conformance battery + JSON protocol │ ├── agent/ @quantakrypto/agent — opt-in BYOK LLM client (triage + remediation) │ └── qprobe/ @quantakrypto/qprobe — active TLS/SSH endpoint probing (gated; the only prober) ├── docs/ architecture, hosted-MCP design, improvement roadmap └── examples/ end-to-end examples
npm install # links the workspaces npm run build # tsc --build (project references) npm test # node:test across all packages
The toolchain is intentionally tiny: TypeScript +tsx(to runnode:teston.ts) are the only dev dependencies; there areno runtime dependencies.
- Objectives & scope— what the toolchain is for, what each library does, the load-bearing decisions, and the deliberate scope boundaries. Start here.
- Architecture decisions— the immutable "why" behind each load-bearing choice (zero deps, shared core contract, two-plane agent, …).
- Standards & compliance— what the tools touch and could align to: NIST FIPS 203/204/205, SP 800-208, CNSA 2.0, SARIF, CWE, ISO/IEC 27001 (A.8.24), Common Criteria, FIPS 140-3, EU DORA/NIS2, US M-23-02 / NSM-10, and OSS assurance (SLSA, OpenSSF Scorecard, SPDX/REUSE).
- Governance:Contributing·Security·Code of Conduct·Changelog.
Apache-2.0. The methodology is open; the assessments, attestation reports, and deliverables are where thequantakryptopractice lives.
Questions, commercial support, or post-quantum readiness training for your team — visitquantakrypto.comor emailhello@quantakrypto.com.
This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.
Create crafted UI components inspired by the best 21st.dev design engineers.
Bring agent evaluations, observability, and synthetic test set generation directly into your IDE for free with Galileo's new MCP server
An MCP server to help AI assistants to answer questions and generate AccelByte Extend SDK code more effectively .
MCP server for AI Diagram Maker — generate beautiful software engineering diagrams directly inside Cursor, Claude Desktop, Claude Code, or any MCP-compatible AI agent
ALAPI MCP Tools,Call hundreds of API interfaces via MCP
AI-powered SVG animation generator that transforms static files into animated SVG components using the Allyson platform
MCP server that gives AI assistants on-demand access to 1,500+ amCharts docs, ~300 code examples, and 1000+ class API references.
APIMatic MCP Server is used to validate OpenAPI specifications using APIMatic. The server processes OpenAPI files and returns validation summaries by leveraging APIMatic’s API.
One shared context layer for AI agents and humans — live API specs, DB schemas, and versioned contracts across repos so every agent and teammate works from the same source of truth.
Build and deploy full-stack Next.js apps with 98 tools for React, AWS, and MongoDB
Sign in to leave a review
Use Google, GitHub, or an email account so ratings stay tied to real people.
No reviews posted yet.
