Quantumguard Mcp
Scan repos and crypto usage for classical algorithms that fail post-quantum readiness and NIST-aligned migration planning before you ship keys or TLS configs.
Overview
QuantumGuard MCP is a MCP server for the Ship phase that scans projects for classical crypto (ECDSA/RSA) exposure and NIST-oriented post-quantum compliance gaps.
What is this MCP server?
- Flags ECDSA and RSA usage that may be vulnerable in a harvest-now-decrypt-later threat model
- Maps findings toward NIST post-quantum cryptography guidance for prioritization
- Runs as stdio MCP over npm package quantumguard-mcp (registry v0.1.1)
- Designed for agent-driven scans from Claude Code, Cursor, and similar coding agents
- Complements manual pentests with repeatable algorithm inventory across a codebase
- Server schema: Model Context Protocol 2025-12-11
- npm identifier: quantumguard-mcp at package version 0.1.1
- Transport: stdio
What problem does it solve?
You cannot tell from a quick code search whether your product's signatures and key exchange will survive post-quantum migration without a dedicated crypto inventory.
Who is it for?
Indie builders shipping auth, payments, or blockchain-adjacent features who want agent-assisted PQC readiness checks in the security pass before release.
Skip if: Teams that only need Vue or UI composable docs, or pure smart-contract bytecode audits without application-layer crypto.
What do I get? / Deliverables
After registering the server, your agent can return structured vulnerability and compliance-oriented findings so you can prioritize PQC migration before launch.
- Agent-readable report of ECDSA/RSA and related classical crypto exposure
- NIST-oriented compliance gap signals for migration planning
- Repeatable scan workflow invokable from the IDE agent
Recommended MCP Servers
Journey fit
How it compares
Post-quantum crypto scanner MCP, not a general agent skill or smart-contract-only auditor.
Common Questions / FAQ
Who is QuantumGuard MCP for?
Solo and indie developers using Claude Code or Cursor who need repeatable post-quantum and classical-algorithm checks on application and infra code.
When should I use QuantumGuard MCP?
Use it during ship-phase security review, before committing to long-lived ECDSA/RSA keys, TLS configs, or signing pipelines you cannot rotate easily.
How do I add QuantumGuard MCP to my agent?
Install the npm package quantumguard-mcp, add a stdio MCP entry pointing at that binary in your agent's MCP config, restart the client, then call the server's scan tools from chat.