This server provides a comprehensive suite of tools for assessing, planning, and managing post-quantum cryptography (PQC) readiness in codebases and live systems.

Scan & Inventory

• scan_path — Scan a file/directory for classical (quantum-vulnerable) asymmetric cryptography; returns a summary or raw JSON findings.

• inventory_crypto — Produce a 0–100 post-quantum readiness score with finding counts broken down by algorithm, category, and severity.

• generate_cbom — Emit a CycloneDX 1.6 Cryptographic Bill of Materials (CBOM) of all classical cryptographic assets, for compliance and supply-chain tooling.

• check_dependency — Check if a package is in the known quantum-vulnerable dependency database.

Migration Planning & Recommendations

• plan_migration — Generate a prioritized migration plan ordered by harvest-now-decrypt-later (HNDL) risk, with PQC targets and readiness-score impact per finding.

• suggest_hybrid — Recommend a post-quantum/hybrid migration strategy for a given classical algorithm (supports CNSA 2.0 / national-security tier).

• get_fix_examples — Retrieve before/after code examples for migrating away from a classical algorithm.

• explain_finding — Get a detailed explanation of a finding (by ruleId or algorithm) and its post-quantum remediation guidance.

• list_rules — Browse the full detector catalog listing every detector ID and description.

Remediation & Verification

• remediate_findings — Produce a deterministic remediation request bundle (rubric, fix schema, per-finding metadata) for the host agent to execute fixes.

• apply_verified_patch — Verify a proposed fix through patch-policy, verify_fix, and blast-radius gates before writing; returns approved: true only if safe and effective.

• verify_fix — Run detectors over a code snippet to confirm quantum-vulnerable crypto has been removed.

Triage & Scoring

• triage_findings — Produce a deterministic triage request bundle for the host agent to assess each finding's real-world exposure.

• apply_triage — Attach triage verdicts to findings and re-sort by exposure score (highest first); never suppresses findings.

• score_delta — Compute the readiness-score and HNDL change between two sets of findings (e.g., before and after a migration).

Live Endpoint Probing

• probe_endpoint — Probe a live TLS/SSH endpoint you own for PQC-hybrid key exchange and classical certificate posture. Requires ownership attestation (i_own_this: true); performs only a benign unauthenticated handshake.

Scans C/C++ codebases for quantum-vulnerable asymmetric cryptography, returning findings and a readiness score.

Scans Dart code for quantum-vulnerable asymmetric cryptography, returning findings and a readiness score.

Scans Elixir codebases for quantum-vulnerable asymmetric cryptography, returning findings and a readiness score.

Scans Istio configuration files for quantum-vulnerable cryptography as part of infrastructure coverage.

Scans Kotlin code for quantum-vulnerable asymmetric cryptography, returning findings and a readiness score.

Scans Kubernetes configuration files for quantum-vulnerable cryptography as part of infrastructure coverage.

Scans MQTT message broker configuration for quantum-vulnerable cryptography as part of infrastructure coverage.

Scans OpenTofu infrastructure-as-code configurations for quantum-vulnerable cryptography as part of infrastructure coverage.

Scans PHP code for quantum-vulnerable asymmetric cryptography, returning findings and a readiness score.

Scans Python code for quantum-vulnerable asymmetric cryptography, returning findings and a readiness score.

Scans Ruby code for quantum-vulnerable asymmetric cryptography, returning findings and a readiness score.

Scans Rust code for quantum-vulnerable asymmetric cryptography, returning findings and a readiness score.

Scans Scala code for quantum-vulnerable asymmetric cryptography, returning findings and a readiness score.

Scans Solidity code for quantum-vulnerable asymmetric cryptography, returning findings and a readiness score.

Scans Swift code for quantum-vulnerable asymmetric cryptography, returning findings and a readiness score.

Scans Terraform infrastructure-as-code configurations for quantum-vulnerable cryptography as part of infrastructure coverage.

Scans TypeScript code for quantum-vulnerable asymmetric cryptography, returning findings and a readiness score.