Quantum on IonQ/IBM/Braket: spending mandates, signed benchmarks, paid PQC CBOM, advantage receipts.
Scored across 63 tools
Several clusters contain near-overlapping tools: quantum_optimize, quantum_run_hardware, dreamweaver_run, and dreamscape_submit all launch quantum work; inspector_check, inspector_status, inspector_pass, and inspector_grade all assess agent validity; pqc_scan_code overlaps qagent_scan. Descriptions help, but the boundaries are not crisp enough for reliable tool selection.
All tool names are snake_case and organized under clear domain prefixes such as car_, quantum_, inspector_, pqc_, qagent_, and vault_. The main inconsistency is that some names use verbs while many use nouns or status-object forms, so the pattern is readable but not fully uniform.
With 63 tools, this is far beyond a well-scoped 3-15 tool surface and creates substantial discovery and misselection overhead. Even though the tools cluster into domains, the total count is an extreme mismatch for a coherent MCP tool set.
Core workflows have broad lifecycle coverage: vehicle registration/records/verification/key management, agent Q1-Q4 certification, quantum job run/poll/verify/mandate handling, PQC scanning/readiness, and vault seal/open/receipt. There are minor gaps such as missing cancel/close/update operations, but most are workable or intentionally append-only/stateless.
The program that upgrades an AI agent into a certified quantum agent: the four steps (Q1-Q4), the levels, how to make an ML-DSA key in five lines, and the free directory checks. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: no named parameters.
Pick which time slots to charge in so the car has the energy it needs at the lowest cost. Runs on the CVaR-QAOA quantum simulator and against exact search; the signed receipt shows both and the plan is the proven best. Returns the slots, cost, and savings over charging right away. A plan only: nothing is sent to a charger.
Inputs: charger_kw (required), price_per_kwh (required), energy_needed_kwh (required), slot_hours, +1 more.
Research simulation of the admission gate for compute on a parked car's companion device. A job is admitted only with owner opt-in, vehicle parked, external power and safe temperature, a matching tenant, a fresh nonce and a short expiry; replays are rejected. Returns a digest receipt with zero credits. No job runs on any vehicle and no rewards are paid.
Inputs: job (required), policy (required).
Give every job (delivery, pickup, service call) to a vehicle at the lowest total cost, with a limit per vehicle. Proven optimal classically (Hungarian method) for up to 60 jobs; small cases (16 qubits or fewer) also run on the quantum simulator and the signed receipt shows both.
Inputs: jobs (required), vehicles (required), cost, max_jobs_per_vehicle.
The full signed history for a buyer, lender, insurer or the owner: every record, chain check, odometer timeline with rollback flags, accidents on record, service due, and cost of ownership. Private by default: the owner opens it with the owner_key or hands a buyer a 'history' key from car_key_issue. Built from what the owner recorded; Privi does not inspect the vehicle.
Inputs: access (required), vehicle (required).
Privi Car in one call: the tools, record types, key scopes, size limits, prices and safety boundaries.
Inputs: no named parameters. Returns: object
Is this key valid right now for this scope? Returns allowed true/false with the reason (expired, revoked, not yet valid, wrong scope), the vehicle_id and the signed attestation to verify offline.
Inputs: token (required), scope.
Issue a time-limited, scope-limited key for a driver, valet, shop or buyer, signed Ed25519 + ML-DSA-87. Returns a token (shown once) for the grantee. A 'history' key opens car_history. unlock / drive / trunk / valet / service keys are credentials for hardware that checks them with car_key_check; Privi Car itself never opens or starts a vehicle.
Inputs: scopes (required), grantee (required), vehicle (required), owner_key (required), +2 more.
Revoke a digital key at once. Every later car_key_check answers 'revoked'.
Inputs: key_id (required), vehicle (required), owner_key (required).
Append one entry to the vehicle's hash chain: an odometer reading, service, repair, inspection, trip (distance and time only), fuel, charge, accident, title change or note. Each entry is hashed with the one before it, so history cannot be edited quietly. An odometer reading lower than an earlier one is recorded and flagged as a rollback.
Inputs: type (required), vehicle (required), owner_key (required), data.
Create a Vehicle Passport: a post-quantum signed (Ed25519 + ML-DSA-87) identity for one vehicle, with a public verification page. Returns the vehicle_id and an owner_key (shown once) that controls its records and digital keys. One passport per VIN.
Inputs: make (required), year (required), model (required), vin, +3 more.
Order the stops for the shortest trip. The exact best order is proven classically (Held-Karp); with five stops or fewer the same problem also runs as a QUBO on the CVaR-QAOA quantum simulator, and the signed receipt shows both. Returns the order, distance, and how much it saves over the order given. Uses straight-line distance unless you pass distances_km. Stops are not stored.
Inputs: stops (required), round_trip, distances_km.
Recompute the vehicle's hash chain: is it intact, how many records, how many odometer rollback flags, and the current head hash. Shows no record contents.
Inputs: vehicle (required).
Validate a VIN's format and its check digit (position 9, required in North America) and return the fingerprint Privi Car stores in place of the VIN. Catches typos and many made-up VINs. It does not look the vehicle up in any outside database.
Inputs: vin (required).
Your Dream Scape's recent jobs, or one job with its full result. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: scape_id (required), scape_key (required), limit, job_id, +1 more.
Open a private Dream Scape: your own quantum environment that keeps every job and result. Returns scape_id and scape_key (shown once; keep it). Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: name (required), privi_pass.
Run a quantum job in your Dream Scape through Dream Weaver and keep the result there. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: data (required), problem (required), scape_id (required), scape_key (required), +7 more.
Run one quantum optimization on several realms at once and return the winning answer, every realm's timing, and a post-quantum signed attestation (Ed25519 + ML-DSA-87) anchored on chain. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: data (required), problem (required), mode, shots, +6 more.
Before accepting, paying with or listing a stablecoin: who issues it, what GENIUS Act license status has been recorded (with the regulator's source), and whether its latest monthly reserve report is sealed, current, examined, CEO/CFO-certified, 1:1 and matched to on-chain supply. Returns pass / pass_reserves_license_pending / caution / reject / unknown. The DASP rule (no non-permitted stablecoins for U.S. persons) starts 2028-07-18. Paid per call via x402 when payments are on (see quantum_pricing). Evidence, not a legal determination.
Inputs: chain (required), address (required).
For any service: put the Privi Inspector in front of your own tools. Send the credential an agent gave you; get allowed or intercepted with reasons (unknown, revoked, uncertified, outdated, level, signature, replay). The nonce is consumed so the credential cannot be reused. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: ts (required), nonce (required), agent_id (required), signature (required), +1 more.
An agent's Privi trust grade (A+ to F, 0-100): quantum level, passkey approval by a verified human, ID verification, current certificate, key strength and clean record, minus penalties for revocation and impersonation. Shows what is missing and what the quantum realm requires. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: agent_id (required).
Pass the Privi Inspector checkpoint and get a one-hour pass into the quantum realm (Dream Weaver, Dream Scape). Intercepted if the agent is unknown, revoked, uncertified, outdated, below the required level, or the signature is wrong, stale or replayed; the answer says exactly what to fix.
Inputs: ts (required), nonce (required), agent_id (required), signature (required).
Re-check every enrolled agent now and rebuild the watchlist (also runs automatically every hour). At most once every 5 minutes. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: no named parameters.
What the checkpoint did: inspections, interceptions by reason, the latest interceptions, and the policy in force. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: hours.
Whether an agent would pass the checkpoint right now and why not: revoked, certificate missing or outdated, level, key, and forged-signature attempts against it in the last hour. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: agent_id (required).
Agents the Inspector's patrol found revoked, outdated, expiring, never certified, using a weak key, or being impersonated (repeated forged signatures against them). Block them or demand a fresh inspector_check. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: no named parameters.
Point Privi at a company's domains and GitHub repositories and get one cryptographic bill of materials: every algorithm quantum computers will break, where it is, a prioritized migration plan with dates, a CycloneDX 1.6 CBOM and a public report page, signed with ML-DSA-87 and anchored on chain. Repos are scanned in memory and not kept. Paid per call via x402 when payments are on (see quantum_pricing); failed calls are not charged.
Inputs: organization (required), files, repos, assets, +3 more.
Test live public sites and services for TLS 1.3 and hybrid post-quantum key exchange (X25519MLKEM768, FIPS 203), the protection against 'harvest now, decrypt later'. Sends two TLS hellos per endpoint and no data. Returns a status and fix per endpoint plus CBOM-ready assets for pqc_readiness_package. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: endpoints (required).
The U.S. federal post-quantum timeline (EO 14409, OMB M-26-15, NIST IR 8547 draft, NSA CNSA 2.0), the approved replacement algorithms, and links to the sources. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: no named parameters. Returns: object
Build a signed post-quantum readiness package: prioritized migration list with the federal deadline for each asset (EO 14409, OMB M-26-15, NIST IR 8547 draft, CNSA 2.0), the nine M-26-15 plan elements marked as evidence or gaps, and a CycloneDX 1.6 CBOM. Signed with ML-DSA-87, anchored on chain, public report URL. Paid per call via x402 when payments are on (see quantum_pricing); failed calls are not charged.
Inputs: organization (required), hva, files, assets, +5 more.
Find RSA, elliptic-curve, Diffie-Hellman, DSA, weak hashes and 128-bit ciphers that quantum computers break or weaken; returns a 0-100 readiness score and a fix per finding. Nothing is stored.
Inputs: code (required), filename.
Run the standard 8-qubit benchmark on every active realm at once and update Privilege's speed rankings. At most once every 2 minutes for everyone. Requires a Privi pass. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: privi_pass.
Every quantum realm Privi can run a job on (engines on this server and other Privi Quantum nodes), ranked by expected time to the proven optimum, with latency, optimum rate, wins and status. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: no named parameters.
Get a one-time message to sign with your ML-DSA private key (valid 10 minutes).
Inputs: agent_id (required), agent_token (required).
Look up agents that upgraded to quantum agents: level, operator, post-quantum key fingerprint and certificate. Use it before trusting or paying another agent. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: level, limit, query.
Join the Quantum Agent Accelerator. Returns agent_id and agent_token (shown once; keep it) and your upgrade plan. Your public key goes in the directory so other agents can verify what you sign. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: name (required), operator (required), public_key (required), listed, +1 more.
Get a one-time link (valid 30 minutes) for the person accountable for this agent. They open it, approve the agent with a passkey (Face ID, Touch ID, Windows Hello or screen lock; the biometric never leaves their device) and verify a government ID with a live selfie. Both are required for the quantum realm.
Inputs: agent_id (required), agent_token (required).
Send the signed challenge. A valid signature proves you hold the key in the directory: step Q2.
Inputs: agent_id (required), signature (required), agent_token (required), challenge_id (required).
Complete step Q4 with the signed result of your assigned quantum job.
Inputs: agent_id (required), agent_token (required), attestation_id (required).
Your assigned quantum job. Run it exactly with dreamweaver_run or dreamscape_submit, then send the attestation id to qagent_quantum_proof.
Inputs: agent_id (required), agent_token (required).
Q1: scan your code for quantum-vulnerable cryptography (passing means you ran the scan; the score and findings tell you what to fix). Q3: check that every public endpoint you run negotiates X25519MLKEM768.
Inputs: agent_id (required), agent_token (required), code, endpoints.
One agent's public profile: level, steps passed, post-quantum public key, certificate. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: agent_id (required).
Check that a message really came from this agent's enrolled post-quantum key, and see its level. Free; no key needed.
Inputs: message (required), agent_id (required), signature (required).
Race the quantum answer against classical baselines (exhaustive search = proven optimum, and simulated annealing) on the same problem and seal the result as a signed, chain-anchored Quantum Advantage Receipt: answer quality and time for each side and a verdict (quantum_won / classical_won / tie), published whichever side wins. For a real-hardware receipt use quantum_run_hardware. Paid per call via x402 when payments are on (see quantum_pricing); failed calls are not charged.
Inputs: data (required), problem (required), shots, layers.
Every quantum backend this server can route to (local simulator, IonQ, IBM Quantum, Amazon Braket), whether it is usable now, its estimated price, measured turnaround, and the hardware budget. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: no named parameters. Returns: object
The latest signed benchmark suite: Privi's quantum solver against exhaustive search and simulated annealing on a fixed set of factory problems (6-16 qubits), with each verdict, how often the circuit finds the optimum, and its lift over random guessing, plus finished real-hardware runs with their receipts. Published whichever side wins. Public page: /benchmarks. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: no named parameters. Returns: object
Status of a quantum hardware job; once done, the decision, measurement statistics, the signed attestation and the Quantum Advantage Receipt. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: job_id (required).
Every quantum backend (IBM Quantum, IonQ, Amazon Braket, simulators) ranked only by runs Privi measured and sealed: share that found the proven optimum, jobs finished, median turnaround, median cost, and the quantum vs classical tally from Quantum Advantage Receipts. Free. Page: /leaderboard.
Inputs: no named parameters.
Would this paid run be allowed under the mandate? Picks the backend the router would use, estimates the price and checks it against every term without spending anything. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: mandate_id (required), shots, policy, backend, +1 more.
Draft a Quantum Mandate: the spending terms under which this agent may run paid quantum hardware jobs. Returns a sign_url for the person who approved the agent; they sign the exact terms with their passkey. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: purpose (required), budget_usd (required), days, backends, +4 more.
The agent gives up its own mandate (the person can also revoke on the mandate page with their passkey). The revocation is signed and anchored. Paid per call via x402 when payments are on; the person who signed it can also revoke it on the mandate web page with their passkey.
Inputs: mandate_id (required), reason, privi_pass.
A Quantum Mandate's terms, status (draft, active, expired, revoked), spend, remaining budget and every charge and refund. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: mandate_id (required).
Solve a factory decision with the Quantum Approximate Optimization Algorithm. Returns the decision in plain terms, how close it is to the proven optimum, and a post-quantum signed attestation (Ed25519 + ML-DSA-87) that is anchored on chain (Base). Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: data (required), problem (required), shots, layers, +1 more.
Which tools are paid, their price per call, how to pay (x402: USDC on Base, or the PRIVI token), and the payout wallet ($0.001). Failed calls are never charged.
Inputs: no named parameters. Returns: object
The ready-made problems quantum_optimize accepts and the data each one needs, with an example.
Inputs: no named parameters. Returns: object
Bring your own quantum circuit. Paste the OpenQASM that Qiskit writes and Privi runs it on IBM Quantum, IonQ, Amazon Braket or its own simulator, picked by price or speed, then seals the measurement counts with a post-quantum signature anchored on chain. Standard Qiskit gates are rewritten exactly into h, rz, rx, cx; all qubits are measured at the end. Poll with quantum_hardware_job. Free on free backends; paid QPUs need a Quantum Mandate.
Inputs: qasm (required), label, shots, policy, +4 more.
Train the CVaR-QAOA circuit, route it to a quantum backend (IonQ, IBM Quantum, Amazon Braket or this server's simulator) by price or speed, and return a job id. When the run finishes, the answer is sealed with a post-quantum signed attestation and a Quantum Advantage Receipt against classical baselines. Poll with quantum_hardware_job. Paid per call via x402 when payments are on (a routing fee, see quantum_pricing). Paid QPUs also need a Quantum Mandate signed by the agent's human (quantum_mandate_request) and run only within the operator's configured budget. A call that is blocked or fails to submit is not charged.
Inputs: data (required), problem (required), shots, layers, +5 more.
What this server runs: algorithm, qubit limit, quantum backends, signing keys, and anchoring.
Inputs: no named parameters. Returns: object
Check both post-quantum signatures, the body hash, and the on-chain anchor of a result. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: attestation, attestation_id.
Create a hybrid X25519 + ML-KEM (FIPS 203) key pair for Privi Vault. The private key is returned once and not
stored here; for the strongest setup generate it locally with python -m privi_quantum.vault keygen. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: suite.
Decrypt a Privi Vault envelope. Nothing is stored; for sensitive data prefer opening locally with
python -m privi_quantum.vault open. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: envelope (required), private_key (required).
Get a signed, chain-anchored protection receipt proving data was under hybrid post-quantum encryption by a given time, for envelopes sealed with the local Privi Vault tool. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: label, envelope, envelope_sha256.
Re-wrap long-lived sensitive data under hybrid post-quantum encryption (X25519 + ML-KEM, AES-256-GCM) so data recorded today can't be decrypted by a future quantum computer. Returns the envelope and a signed protection receipt anchored on chain. Plaintext is not stored. Paid per call via x402 when payments are on (see quantum_pricing).
Inputs: public_key (required), text, label, data_base64.
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
US-government semiconductor & quantum supply-chain intelligence: controls, entities, funding.
AI triage for quantum computing POC proposals. Screens before budget is allocated.
Measure post-quantum TLS evidence and buy full reports through x402 USDC on Base
QuantumOracle — 18 post-quantum crypto tools: Kyber, Dilithium, hybrid schemes, migration.
Add one secure layer between your agents and this server.
