PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder MCP Server
PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder runs on your own machine — the client starts it, so there is no endpoint to ping. Last commit 17 Oct 2026.
Post-quantum CMMC compliance scanner & AI agent attestation. FIPS 140-3, ML-DSA-65, 36K+ mappings.
What the code does
We read the source, 2 d ago · rules 995398eba69f
Things with no honest explanation: a promise that contradicts the code, code that runs at install time while hiding what it does, data leaving the machine.
`chmod 777`: "Overly permissive file permissions",
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
files, err := os.ReadDir("/etc/cron.d")
if _, err := os.Stat("/.dockerenv"); err == nil {
dest := filepath.Join(exeDir, spec.Name)
{id: "fim:etc-shadow", label: "/etc/shadow", type: "fim", severity: "high"},
"signature": "072ad80dc8a4d96f5f60f4eecd4223b3762de322f432d5f355415f35475c2de46eeca72a86074323b990994423a4c4a9258503170bbe35c2b824396dc340d736bf7d06cae8ddb278247af25904faaa65b7a397a2d3f3bb272027503876155c142088d7ce12ded4a0d3811d57ab7cfb7bef6eb747ff8c4c8a2fac91ddfd3b891ef87ebc14…
fmt.Printf("\nAdd this public key to ~/.ssh/authorized_keys on your target host:\n %s\n\n", pubPath)
<script src="https://d3js.org/d3.v7.min.js"></script>
# IronBank Go builder image already has Go installed — no microdnf install needed. # Set Go environment for reproducible static binary compilation. USER root
thinkEl.innerHTML=formatChatReply(reply);
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
We found things in this code
Code changes quietly between releases, and nobody reads the diff of a dependency. We do, on every release — watch PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder and you get told the day something new turns up.
Alternatives to PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder
same job, measured the same wayQuantum-safe vault, encryption & compliance for AI agents. NIST FIPS 203/204 ML-KEM-768 + ML-DSA-65.
Post-quantum cryptography security scanner. Detect ECDSA/RSA vulnerabilities, NIST compliance.
Scan an MCP server or agent configuration for security posture — evidence-bound findings
An MCP server that provides tools to author OSCAL security compliance documentation
AI-native GRC: compliance scores, security findings, tickets and agent trust tiers.
MCP server: static security scanner for MCP servers, agent skills & plugins. 17 attack patterns.
Guarded AI mobile Appium testing, security scanning, verification, and fix-retest MCP tools.
Security co-pilot for AI agents. Scan for vulnerabilities, audit MCP servers, verify governance.
PQC-Khepra MCP — CMMC Autopilot & AI Security Recorder — questions
Answers built from our own checks of this server.