mcpbeat

QuantumScan PQC Scanner MCP Server

io.github.gaiabio12-design/quantumscan-pqc-scanner
not responding

QuantumScan PQC Scanner is listed as active in the registry but did not answer our last check. It exposes 4 tools.

PQC scanner for GitHub repos and smart contracts. Detects quantum-vulnerable ECDSA/RSA.

Uptime history 39 hours of history · worst hour 0%
39 hours agonow
14.3%
Uptime 24h
13 of 91 checks
4
Tools
read from the server
787 ms
Response time
average over 24h
open, no key
Access
streamable-http

Connect this server

Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 7 min ago.

run in your terminal
claude mcp add quantumscan-pqc-scanner --transport http https://quantumscan.io/api/mcp
~/Library/Application Support/Claude/claude_desktop_config.json
{
  "mcpServers": {
    "quantumscan-pqc-scanner": {
      "url": "https://quantumscan.io/api/mcp"
    }
  }
}
~/.codex/config.toml
[mcp_servers.quantumscan-pqc-scanner]
url = "https://quantumscan.io/api/mcp"
.cursor/mcp.json
{
  "mcpServers": {
    "quantumscan-pqc-scanner": {
      "url": "https://quantumscan.io/api/mcp"
    }
  }
}
.vscode/mcp.json
{
  "mcpServers": {
    "quantumscan-pqc-scanner": {
      "url": "https://quantumscan.io/api/mcp"
    }
  }
}

Available tools 4

Read directly from the server with tools/list, grouped by what they act on. If a tool disappears, we record the date.

scan
get_scan_result
Get the result of a previously submitted scan. Returns status (submitted | working | completed | failed) and, when completed, a full CBOM (Cryptographic Bill of Materials) compliant with EIP-7789 and CycloneDX CBOM 1.6, plus a quantum risk score (0 = fully safe, 100 = fully vulnerable). Rate-limited: 60 calls/min per IP or API key.
scan_contract
Scan a verified on-chain smart contract for quantum-vulnerable cryptography AND today's fraud patterns (rug pulls, honeypots, uncapped mints, reentrancy). Use this BEFORE signing a transaction, interacting with a DeFi protocol, or integrating a contract into an agent workflow. Synchronous — result is immediate (no polling needed). Requires the contract to be verified on Sourcify (https://sourcify.dev). Returns risk score 0-100, agent risk score, finding breakdown, and concrete PQC migration steps. Rate-limited: same as scan_repository (10/day per IP free, credit-based paid).
scan_repository
Submit a GitHub, GitLab, or Bitbucket repository for post-quantum cryptography (PQC) vulnerability scanning. Returns a scan_id. Call get_scan_result to poll for the result. Free tier: 10 scans/day per IP. Paid tier: credit-based (register at /api/agent/register).
pqc
check_pqc_risk
Instant check (no DB, no scan) — returns whether a list of algorithm names are quantum-vulnerable. Useful for quick risk assessment before calling scan_repository. Rate-limited: 100 calls/day per IP (free), 500/day per API key (paid).

Endpoints

URLTransportStateLatencyChecked
https://quantumscan.io/api/mcp streamable-http answering 80 ms 7 min ago

QuantumScan PQC Scanner — questions

Answers built from our own checks of this server.

What can QuantumScan PQC Scanner do?
It exposes 4 tools, read directly from the server on our last check. Among them: check_pqc_risk, get_scan_result, scan_contract, scan_repository. The full list with descriptions is on this page — we take it from the server itself via tools/list, not from a README. How MCP servers expose tools in the first place →
Is QuantumScan PQC Scanner working right now?
We send a real MCP handshake every 15 minutes. Over the last 24 hours 13 of 91 checks got a reply (14.3%), average response time 787 ms. The bar chart above shows every period we have measured.
The registry lists QuantumScan PQC Scanner as active — why does it not respond?
The official MCP registry stores what the author submitted; it does not verify that the server still runs. We check the endpoint ourselves, and this one does not answer. Catalogues that copy the registry without checking will show it as working.
How do I connect QuantumScan PQC Scanner?
Copy the ready config from this page — we generate it for Claude Code, Claude Desktop, Codex, Cursor and VS Code, each with the file path that client actually reads. It is a remote server, so there is nothing to install — the client connects to the address.
Does QuantumScan PQC Scanner need an API key?
No. QuantumScan PQC Scanner completed a full MCP handshake with us as an anonymous client and listed its tools without asking for anything. All 4 of them are readable on this page. This is what we observed, not what the docs claim.
How fast is QuantumScan PQC Scanner?
It answers our handshake in 787 ms on average, which is faster than 9% of all working MCP servers we measure. That is on the slow side — worth knowing if the tool sits inside an interactive loop. The comparison comes from our own checks across the whole registry, every 15 minutes.