Quantum Aether

io.github.moncef00327-cloudPublished by GitHub account moncef00327-cloudv1.0.1Updated Nov 5, 2026

Check a website's post-quantum TLS readiness (ML-KEM key exchange, certificate, grade)

VerifiedSTDIODesktop onlySecurity & MonitoringBusiness & Commerce

Overview

AI-generated overview

Local MCP server that scans a website's TLS setup for post-quantum key exchange readiness, and can sell a paid report or monitoring plan.

What you can do
  • Scan a domain's TLS handshake and get a plain-language summary of whether it negotiates post-quantum key exchange (X25519MLKEM768), or the same result as structured data with grade, key exchange group, certificate and scan ID.
  • Buy the full post-quantum readiness report for a prior scan, which returns a PayPal approval link.
  • Start a daily monitoring subscription for a set of domains on a starter or business plan.
When to use it
Useful when you want an assistant to quickly check whether a site is already protected against harvest-now-decrypt-later risk, or to compare several domains' TLS posture. The purchase and subscription tools only matter if you actually want the vendor's paid report or monitoring.
Requirements
Runs locally over stdio as the PyPI package quantum-aether-mcp, installed with pip and launched with python -m quantum_aether_mcp; the README shows a Claude Desktop config entry. It calls the vendor's public API, so network access is needed. No API key or secrets are required.
Before you install
Two tools spend money: the full report is $49 and monitoring subscriptions are $29 or $99 per month, completed through PayPal approval links. The consent flags (consent_immediate_delivery, consent) should only be set after the buyer has expressly agreed to immediate delivery, loss of withdrawal rights and email processing. The monitoring tool takes the customer's email address, which is sent to the vendor.

Installation

In SourceWeft

  1. Open Quantum Aether in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

Quantum Aether MCP server

Let any MCP-compatible AI assistant (Claude Desktop, and others) check a website's post-quantum TLS readiness — and, with the user's consent, buy the full report or start monitoring — by calling Quantum Aether as a native tool.

It wraps the public Quantum Aether API. No API key. No secrets.

Tools

ToolWhat it does
scan_tls(domain)Scans a host and returns an honest summary. If the site already uses post-quantum key exchange it says so; otherwise it states the "harvest now, decrypt later" risk and the fix.
scan_tls_raw(domain)The structured result (grade, key exchange group, post-quantum yes/no, certificate, scan_id, price).
buy_full_report(scan_id, consent_immediate_delivery)Returns a PayPal approval link for the $49 report. Consent required (Austrian FAGG).
start_monitoring(email, plan, consent)Starts a daily monitoring subscription ($29 or $99 / month).

Install

sh
pip install quantum-aether-mcp# or from source:pip install -e .

Use with Claude Desktop

Add to claude_desktop_config.json:

json
{  "mcpServers": {    "quantum-aether": {      "command": "python",      "args": ["-m", "quantum_aether_mcp"]    }  }}

Then ask your assistant: "Is example.com ready for post-quantum TLS?" — it will call scan_tls.

Honesty by design

The tool reports the real scan result. A site that already negotiates X25519MLKEM768 is told it is protected, with no upsell. A problem is surfaced only when it genuinely exists. This is what makes AI assistants trust and reuse the tool.

Scanner, methodology and open dataset: https://ather-quatum.cloud

Source: mcp/README.md at commit 5b2a02d

Tools

4

scan_tls

Check whether a website negotiates post-quantum TLS key exchange (X25519MLKEM768). Returns an honest summary: if the site is already protected it says so; if not, it states the "harvest now, decrypt later" risk and the available fix (full report) and monitoring options. Args: domain: the hostname to scan, e.g. "example.com".

Parametersdomainrequired

scan_tls_raw

Same scan as scan_tls but returns the structured result (grade, key_exchange_group, post_quantum_key_exchange, certificate_key, scan_url, full_report_price, scan_id).

Parametersdomainrequired

buy_full_report

Buy the full post-quantum readiness report ($49) for a prior scan. Returns a PayPal approval link (approve_url) and a status_url. Set consent_immediate_delivery to true ONLY after the buyer expressly agreed the report is delivered immediately and that they lose the right of withdrawal (Austrian FAGG). After the buyer approves in PayPal, the report link appears at status_url. Args: scan_id: the scan_id returned by scan_tls_raw. consent_immediate_delivery: must be true, and only with the buyer's express consent.

Parametersscan_idrequiredconsent_immediate_delivery

start_monitoring

Start a daily monitoring subscription (plan "starter" = $29/mo up to 10 domains, "business" = $99/mo up to 100 domains). Returns the PayPal plan id to complete the subscription. Set consent to true ONLY after the customer agreed to email processing and immediate start. Args: email: the customer's email. plan: "starter" or "business". consent: must be true, with the customer's agreement.

Parametersplanemailrequiredconsent

Version history

1
  1. v1.0.1LatestNov 4, 2026

Score

80% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts
  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listedRequired15 pts
  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.