Skip to main content
Glama
quantakrypto

quantakrypto pqc-tools

by quantakrypto

probe_endpoint

Probe a live TLS/SSH endpoint you own to assess post-quantum readiness; runs a benign handshake to check PQC-hybrid key exchange and certificate posture. Requires ownership attestation.

Instructions

Actively probe ONE live TLS/SSH endpoint YOU OWN for post-quantum readiness (PQC-hybrid key exchange X25519MLKEM768, classical certificate posture). REQUIRES an ownership attestation: set i_own_this=true to confirm you are authorized to test the target. Refuses CIDR ranges / wildcards / lists — one host at a time. Performs only a benign, unauthenticated handshake and never modifies the endpoint. NOTE: this is the ONLY quantakrypto MCP tool that opens a network connection; the server is otherwise offline. Over HTTP it is disabled unless the operator sets QUANTAKRYPTO_MCP_ALLOW_NETWORK=1.

Input Schema

TableJSON Schema
NameRequiredDescriptionDefault
modeNoProbe mode (default: auto — SSH on :22, TLS otherwise).
targetYesA single host or host:port you own (no ranges/CIDRs/wildcards).
i_own_thisYesAttestation that you are authorized to probe this endpoint. Must be true; the probe is refused otherwise.
timeout_msNoPer-connection timeout in ms (default 8000).
Behavior4/5

Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?

With no annotations provided, the description fully discloses behavioral traits: it performs only a benign unauthenticated handshake, never modifies the endpoint, requires ownership attestation, and is the only network-opening tool. It also mentions the HTTP disabling condition. Minor omission is output format, but safety and constraints are well-covered.

Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.

Conciseness4/5

Is the description appropriately sized, front-loaded, and free of redundancy?

The description is moderately concise with four sentences that each add value. It front-loads the purpose and uses clear structure. Some all-caps emphasis is slightly excessive but acceptable. Could be slightly trimmed without loss.

Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.

Completeness3/5

Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?

Given the tool's complexity (4 parameters, network operation, ownership, mode), the description covers many aspects like safety, ownership, constraints, and special network behavior. However, it lacks any description of the output or return value, which is needed since there is no output schema. This is a notable gap for completeness.

Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.

Parameters4/5

Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?

Schema coverage is 100%, but the description adds meaningful behavioral context to parameters: explains ownership attestation, mode auto-behavior, target constraints, and timeout context. This goes beyond schema descriptions and aids correct invocation.

Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.

Purpose5/5

Does the description clearly state what the tool does and how it differs from similar tools?

The description uses a specific verb ('probe') and resource ('one live TLS/SSH endpoint') and clearly states it checks for post-quantum readiness with PQC-hybrid key exchange and classical certificate posture. It explicitly distinguishes itself as the only sibling tool that opens a network connection.

Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.

Usage Guidelines4/5

Does the description explain when to use this tool, when not to, or what alternatives exist?

The description provides clear usage context: it requires ownership attestation, refuses CIDR ranges/wildcards, and limits to one host at a time. It also notes the network connectivity specialness and the environment variable for HTTP. Missing explicit alternatives but sufficient for an agent to decide when to use.

Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.

Install Server

Other Tools

Latest Blog Posts

MCP directory API

We provide all the information about MCP servers via our MCP API.

curl -X GET 'https://glama.ai/api/mcp/v1/servers/quantakrypto/pqc-tools'

If you have feedback or need assistance with the MCP directory API, please join our Discord server