bots.st/quantakrypto-pqc-tools

quantakrypto pqc-tools

Scan code for quantum-vulnerable crypto and guide PQC migrat

2239 ms

answered our call 8 Nov, 02:34 UTC

State: Answered
Protocol: MCP 2025-06-18
Tools listed: 11
Answered: 3 of the last 3 calls

How to reach it

MCP, HTTPhttps://mcp.quantakrypto.com/mcp
npmnpx -y @quantakrypto/mcpReleased 14 Aug 2026, version 0.12.0

What it can do

Tool	What it says it does
`apply_triage`	Deterministically attach your triage verdicts to their findings and re-sort by exposure (highest first). Never suppresses. Pass the same 'findings' array you triaged plus a 'verdicts' array of { fingerprint, exposureScore, priority, rationale }.
`apply_verified_patch`	Deterministically VERIFY a proposed fix before writing it — runs the same patch-policy + verify_fix + blast-radius gates as `qremediate` (offline, no key, no network). Give the finding, the file's current content, and your proposed FULL corrected content; returns approved:true only if the patch is…
`check_dependency`	Check whether a package is in quantakrypto's known quantum-vulnerable dependency database (the classical crypto it exposes). Provide 'name' and optional 'ecosystem' (default npm).
`explain_finding`	Explain a quantakrypto finding and its post-quantum remediation. Provide a ruleId (e.g. 'forge-rsa-keygen', 'elliptic-ec', 'node-rsa', 'pem-ec-private-key') and/or an algorithm (e.g. 'RSA', 'ECDSA'). The ruleId is resolved against the core detector set, so library and config rules explain…
`get_fix_examples`	Return before/after code examples for migrating a classical algorithm to a post-quantum / hybrid replacement. Provide an 'algorithm' (RSA, ECDH, ECDSA, …) or a 'ruleId' from a finding.
`list_rules`	List the quantakrypto detector catalog: every detector id and what it looks for.
`remediate_findings`	Produce a deterministic remediation REQUEST bundle (rubric + fix schema + per-finding metadata + fingerprints) for YOU (the host agent) to fix. This tool calls no model and needs no key. For each finding, propose the corrected FULL file content, then VERIFY with verify_fix and keep only fixes that…
`score_delta`	Compute the readiness-score and HNDL change between two finding sets (e.g. before and after a migration). Pass 'before' and 'after' as arrays of findings from scan_path --format json.
`suggest_hybrid`	Recommend a post-quantum / hybrid migration. Provide an 'algorithm' (e.g. RSA, ECDH, ECDSA) or free-text 'context' describing the usage. Set 'tier' to 'category-5' for CNSA 2.0 / national-security systems.
`triage_findings`	Produce a deterministic triage REQUEST bundle (rubric + verdict schema + per-finding metadata) for YOU (the host agent) to reason over. This tool does NOT call any model and needs no API key. Assess each finding's real-world exposure, then call apply_triage with your verdicts. Pass 'findings' as…
`verify_fix`	Run the quantakrypto detectors over a code snippet (NOT the filesystem) and report any classical crypto that remains. Use this to confirm an edit actually removed the quantum-vulnerable usage. Provide 'code' plus a 'language' or 'filename'.

In its maker's words

Scan code for quantum-vulnerable cryptography and get NIST post-quantum migration guidance.

Source: github.com/quantakrypto/pqc-tools
Publisher: quantakrypto
Listed from: the official MCP Registry as io.github.quantakrypto/pqc-tools
Version: 0.5.2, updated 23 Jul 2026
Kinds of work: Security and trust, Code and developer tools, AI models and agent tools

The domain it lives on

quantakrypto.com: registered 19 Jun 2026 (5 months ago), at GoDaddy.com, LLC, its name does not resolve now

From our own crawl of domain names: registry records and the home page as our crawler last saw it.

Every call we made

When	What happened	Time
8 Nov, 02:34 UTC	Answered	2239 ms
7 Nov, 23:12 UTC	Answered	2173 ms
7 Nov, 21:30 UTC	Answered	1246 ms

Next door

Is this your bot? Claim its address to add a verified badge and keep the listing current.