# QuantumScan PQC Scanner MCP server

PQC scanner for GitHub repos and smart contracts. Detects quantum-vulnerable ECDSA/RSA.

## Links
- Registry page: https://www.getdrio.com/mcp/io-github-gaiabio12-design-quantumscan-pqc-scanner

## Install
- Endpoint: https://quantumscan.io/api/mcp
- Auth: Not captured

## Setup notes
- Remote endpoint: https://quantumscan.io/api/mcp

## Tools
- scan_repository - Submit a GitHub, GitLab, or Bitbucket repository for post-quantum cryptography (PQC) vulnerability scanning. Returns a scan_id. Call get_scan_result to poll for the result. Free tier: 10 scans/day per IP. Paid tier: credit-based (register at /api/agent/register). Endpoint: https://quantumscan.io/api/mcp
- get_scan_result - Get the result of a previously submitted scan. Returns status (submitted | working | completed | failed) and, when completed, a full CBOM (Cryptographic Bill of Materials) compliant with EIP-7789 and CycloneDX CBOM 1.6, plus a quantum risk score (0 = fully safe, 100 = fully vulnerable). Rate-limited: 60 calls/min per IP or API key. Endpoint: https://quantumscan.io/api/mcp
- check_pqc_risk - Instant check (no DB, no scan) — returns whether a list of algorithm names are quantum-vulnerable. Useful for quick risk assessment before calling scan_repository. Rate-limited: 100 calls/day per IP (free), 500/day per API key (paid). Endpoint: https://quantumscan.io/api/mcp
- scan_contract - Scan a verified on-chain smart contract for quantum-vulnerable cryptography AND today's fraud patterns (rug pulls, honeypots, uncapped mints, reentrancy). Use this BEFORE signing a transaction, interacting with a DeFi protocol, or integrating a contract into an agent workflow. Synchronous — result is immediate (no polling needed). Requires the contract to be verified on Sourcify (https://sourcify.dev). Returns risk score 0-100, agent risk score, finding breakdown, and concrete PQC migration steps. Rate-limited: same as scan_repository (10/day per IP free, credit-based paid). Endpoint: https://quantumscan.io/api/mcp

## Resources
Not captured

## Prompts
Not captured

## Metadata
- Owner: io.github.gaiabio12-design
- Version: 1.0.4
- Runtime: Streamable Http
- Transports: HTTP
- License: Not captured
- Language: Not captured
- Stars: Not captured
- Updated: Jul 1, 2026
- Source: https://registry.modelcontextprotocol.io