PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder MCP Server
PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 17 Sep 2026.
Post-quantum CMMC compliance scanner & AI agent attestation. FIPS 140-3, ML-DSA-65, 36K+ mappings.
What the code does
We read the source, 5 min ago · rules 3dff92dd89df
Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.
rm -rf work
SET_RETVAL(setuid((uid_t) x->args[0]));
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
subprocess.check_call(cmd, env=env, shell=False)
AvailabilityZone: !Select [0, !GetAZs '']
Tags:
- Key: Name
Value: !Sub ${ProjectName}-private-subnet-1
dest := filepath.Join(exeDir, spec.Name)
{id: "fim:etc-shadow", label: "/etc/shadow", type: "fim", severity: "high"},
offlineRootPublicKey = "54e1c77b0632c73c83ac9a78bc43031b575a4af1944b5defcd31c84a0ce3ea93823696d677b2cce2fbb669665efe9ad31f451808f4156b51bc90aefd1b1a43416c5dac518b83bda82404343dd3fc302440f6121b1036af8ff2ab85578f0c0e5576c0a9754641b07508033cd0b96c6b71f78a9899568ce57a1c155f3e0f5c…
# IronBank Go builder image already has Go installed — no microdnf install needed. # Set Go environment for reproducible static binary compilation. USER root
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found things in this code
Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder and you get told the day something new turns up.
Alternatives to PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder
same job, measured the same wayQuantum-safe vault, encryption & compliance for AI agents. NIST FIPS 203/204 ML-KEM-768 + ML-DSA-65.
Post-quantum cryptography security scanner. Detect ECDSA/RSA vulnerabilities, NIST compliance.
An MCP server that provides tools to author OSCAL security compliance documentation
Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.
AI agent security: 7 MCP tools for injection detection, PII scanning, command safety, DLP.
Security scanner for AI agent skills and MCP servers
Apiiro Application Security Posture Management (ASPM) tools for AI coding assistants.
Free web tools for AI agents: HTML to Markdown, compliance scan, page profile, security headers.
PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder — questions
Answers built from our own checks of this server.