QuantumScan PQC Scanner

@gaiabio12-design

About QuantumScan PQC Scanner

Post-quantum cryptography (PQC) security scanner for blockchain and AI agents. Detects quantum-vulnerable algorithms (ECDSA, RSA, DH) and provides NIST FIPS 203/204/205 migration paths. Free, open-source, privacy-first. Scan any GitHub repository or smart contract via MCP tools:

#security #blockchain #cryptography #pqc #quantum #ai-agent #scanner #defi #smart-contracts

Config

Add this server to your MCP-compatible client using the configuration below.

{
  "mcpServers": {
    "quantumscan": {
      "command": "npx",
      "args": [
        "-y",
        "mcp-remote",
        "https://quantumscan.io/api/mcp"
      ]
    }
  }
}

Tools

Submit a GitHub, GitLab, or Bitbucket repository for post-quantum cryptography (PQC) vulnerability scanning. Returns a scan_id. Call get_scan_result to poll for the result. Free tier: 10 scans/day per IP. Paid tier: credit-based (register at /api/agent/register).

Get the result of a previously submitted scan. Returns status (submitted | working | completed | failed) and, when completed, a full CBOM (Cryptographic Bill of Materials) compliant with EIP-7789 and CycloneDX CBOM 1.6, plus a quantum risk score (0 = fully safe, 100 = fully vulnerable). Rate-limited: 60 calls/min per IP or API key.

Instant check (no DB, no scan) — returns whether a list of algorithm names are quantum-vulnerable. Useful for quick risk assessment before calling scan_repository. Rate-limited: 100 calls/day per IP (free), 500/day per API key (paid).

Scan a verified on-chain smart contract for quantum-vulnerable cryptography AND today's fraud patterns (rug pulls, honeypots, uncapped mints, reentrancy). Use this BEFORE signing a transaction, interacting with a DeFi protocol, or integrating a contract into an agent workflow. Synchronous — result is immediate (no polling needed). Requires the contract to be verified on Sourcify (https://sourcify.dev). Returns risk score 0-100, agent risk score, finding breakdown, and concrete PQC migration steps. Rate-limited: same as scan_repository (10/day per IP free, credit-based paid).

Overview

What is QuantumScan PQC Scanner?

QuantumScan PQC Scanner is a post-quantum cryptography (PQC) security scanner for blockchain and AI agents. It detects quantum-vulnerable algorithms (ECDSA, RSA, DH) and provides NIST FIPS 203/204/205 migration paths. It is free, open-source, and privacy-first.

How to use QuantumScan PQC Scanner?

Use the MCP tools scan_repository, check_pqc_risk, and scan_contract to scan any GitHub repository or smart contract for quantum-vulnerable algorithms. The server checks for ECDSA, RSA, and DH and then offers NIST-approved migration paths.

Key features of QuantumScan PQC Scanner

Detects quantum-vulnerable algorithms (ECDSA, RSA, DH).
Provides NIST FIPS 203/204/205 migration paths.
Free and open-source.
Privacy-first scanning.
Scans any GitHub repository or smart contract.
Used by autonomous AI agents for security audits.

Use cases of QuantumScan PQC Scanner

Blockchain security audits to identify quantum-vulnerable cryptographic components.
Autonomous AI agents performing automated PQC risk assessments.
Discovering ECDSA, RSA, or DH usage in GitHub repositories.
Checking smart contracts for quantum risks and obtaining migration guidance.

FAQ from QuantumScan PQC Scanner

What algorithms can QuantumScan PQC Scanner detect?

It detects ECDSA, RSA, and DH, which are known to be vulnerable to quantum attacks.

Does QuantumScan PQC Scanner provide migration guidance?

Yes, it offers NIST FIPS 203/204/205 migration paths for each detected vulnerability.

Is QuantumScan PQC Scanner free to use?

Yes, it is free and open-source.

How do I

Frequently asked questions

What algorithms can QuantumScan PQC Scanner detect?

It detects ECDSA, RSA, and DH, which are known to be vulnerable to quantum attacks.

Does QuantumScan PQC Scanner provide migration guidance?

Yes, it offers NIST FIPS 203/204/205 migration paths for each detected vulnerability.

Is QuantumScan PQC Scanner free to use?

Yes, it is free and open-source.

Comments

Basic information

More Developer Tools MCP servers

Apiosk

obcraft

AI-native payments for tools and APIs. Discover, pay for, execute, and publish monetized APIs directly from your agent, settled per call in USDC over x402, through the Model Context Protocol. payments · finance · x402 ·

Vibgrate MCP

Vibgrate

Query your team's drift, vulnerability, and migration data from any AI assistant. Vibgrate MCP connects Cursor, Claude, ChatGPT, Windsurf, or VS Code to Vibgrate Cloud: 51 tools for DriftScores, CVEs and EOL runtimes, up

ship.page

Bitgate

Throw HTML at an API, get an unguessable URL back. Zero-config remote MCP server — your agent deploys pages, sites and CI reports in one call. Free, no signup needed.

endoflife.ai

Free MCP server for software end-of-life intelligence: EOL dates, support status, and the 0-100 EOL Risk Score across 480+ tracked products. Agents can check a single version, pull a product's full lifecycle schedule, or

Skilder.ai

skilder.ai

Run skills and MCP tools like production software: versioned, composed into roles, distributed to every agent from one governed library.