Quantumguard Mcp

io.github.kota1026由 GitHub 帳號 kota1026 發布v1.0.0更新於 Oct 24, 2026

Post-quantum cryptography security scanner. Detect ECDSA/RSA vulnerabilities, NIST compliance.

已驗證STDIO僅桌面金融安全與監控

概覽

AI 產生的概覽

本機 stdio MCP 伺服器,定位為後量子密碼學安全掃描器,用來找出 ECDSA/RSA 弱點並檢查 NIST 合規性。

可以做什麼
  • 依描述掃描密碼學資產的後量子風險,重點在 ECDSA/RSA 弱點。
  • 對照 NIST 標準檢查設定並回報合規結果。
  • 未公布工具清單,助理可呼叫的具體操作沒有文件說明;README 改為描述一個更大的以太坊後量子資產保護專案,包含 ML-DSA 與 SLH-DSA 雙重簽章、證明者池、時間鎖託管與治理。
適用情境
當你希望助理協助稽核密碼學選型(例如 RSA 或 ECDSA 的使用)在量子時代的風險與 NIST 一致性時可考慮。由於公開資料與掃描器描述不一致,使用前請先確認實際提供的工具。
執行需求
以本機程序透過 stdio 執行,從 npm 套件 quantumguard-mcp 安裝,需要 Node.js。未宣告驗證、環境變數或標頭。README 的開發環境另列出 Docker、Rust、含 pnpm 的 Node.js 與 Foundry,供整個專案使用。
安裝前請注意
README 描述的是以太坊專案,涉及已部署合約、質押、保證金、罰沒與治理代幣,任何互動都可能牽涉鏈上交易與資金,需謹慎處理。外部稽核仍標示為規劃中。README 與登錄描述內容並不一致,安裝前請確認伺服器實際功能。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Quantumguard Mcp,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

Quantum Shield

[License: MIT] [Rust] [Solidity] [Next.js]

Post-quantum asset protection protocol for Ethereum using NIST-standardized cryptography

What is Quantum Shield?

Quantum Shield protects smart contract assets against quantum computing threats using NIST FIPS 204 (ML-DSA/Dilithium) and FIPS 205 (SLH-DSA/SPHINCS+) dual post-quantum signatures, combined with a decentralized Prover Pool, VRF-based selection, and time-locked custody.

Key Features

  • Dual PQC Signatures — ML-DSA-65 + SLH-DSA for defense-in-depth
  • Prover Pool — Decentralized verification with stake-weighted selection via VRF
  • Time-Locked Custody — 24h normal unlock, 7-day emergency path with bond
  • Observer Network — Independent challenge system with quadratic slashing
  • On-Chain Governance — veQS token voting, security council, insurance fund
  • 11 Sub-Applications — Consumer, Prover, Observer, Explorer, Enterprise, Governance, Admin

Architecture

┌─────────────────────────────────────────────────────────────────┐│  Frontend (Next.js 15)         11 apps, 136 routes, ja/en i18n │├─────────────────────────────────────────────────────────────────┤│  Backend API (Rust/Axum)       REST API, SIWE auth, Auto-Claim │├──────────────────┬──────────────────────────────────────────────┤│  L1: Sepolia     │  L3: Arbitrum Sepolia                       ││  • Vault         │  • CoreLayer    • Governor                  ││  • ProverRegistry│  • veQS         • RewardRouter              ││  • SPHINCS+ Vfy  │  • QSToken      • InsuranceFund             │└──────────────────┴──────────────────────────────────────────────┘

9 Core Sequences

#FlowPath
1Consumer LockFrontend → API → DB → L1 Vault
2Normal Unlock24h timelock → Prover verification → L1 claim
3Emergency UnlockBond deposit → 7-day lock → Emergency path
4Prover RegistrationStake → VRF selection → Proof generation
5Observer ChallengeMonitor → Challenge → VRF arbitration
6SlashingQuadratic penalty → L1 ProverRegistry
7GovernanceveQS voting → Proposal execution on L3
8Emergency PauseSecurity council → L1 pause
9Token HubStake QS → veQS → Rewards

Tech Stack

LayerTechnology
FrontendNext.js 15, TypeScript, Tailwind CSS, Wagmi, RainbowKit
BackendRust, Axum, PostgreSQL, Redis, RabbitMQ
ContractsSolidity 0.8.24 (Foundry), deployed to Sepolia + Arbitrum Sepolia
CryptographyNIST FIPS 204 (ML-DSA-65), FIPS 205 (SLH-DSA), SHA3-256
SDKWASM (Rust → wasm-pack), npm-publishable
TestingPlaywright (E2E), Vitest, cargo test, Foundry forge test

Deployed Contracts

L1: Ethereum Sepolia

ContractAddress
Vault0x07012aeF87C6E423c32F2f8eaF81762f63337260
ProverRegistry0x08e1fc1A0d614bc132B48950760c7A291cCB8946
SPHINCS+ Verifier0xD090b5A627d9bd6D96a8b5f6F504ebCa79980103

L3: Arbitrum Sepolia (12 contracts)

ContractAddress
CoreLayer0xb04F4DFe093dC80420117EDC8300f5EB6F6EDBf0
veQS0xE72dFa97C9E452dC0b8E6aa026c910D21B20fCAE
Governor0xe93b8129DC3dBD48E5d78C5A4C156DD1BFa8D65B
QSToken0xBD66beBE19E664dF143da54808d746192e4f2ee2

All L3 contracts verified on Sourcify.

Quick Start

Prerequisites

  • Docker & Docker Compose
  • Rust 1.75+ with cargo
  • Node.js 20+ with pnpm
  • Foundry (forge, anvil)

Development Setup

bash
# 1. Start infrastructuredocker compose up -d postgres redis rabbitmq l3-node minio minio-init
# 2. Run database migrationscd src/api/apiDATABASE_URL="postgresql://quantum:quantum_dev@localhost:5432/quantum_shield" sqlx migrate run
# 3. Start backend API (port 8080)cargo run --bin api-server
# 4. Start frontend (port 3000)cd src/frontend/webpnpm installpnpm dev

Verify

bash
curl http://localhost:8080/v1/health# {"status":"healthy"}

Project Structure

quantum-shield/├── src/│   ├── api/api/              # Rust/Axum backend│   │   ├── src/routes/       # API route handlers│   │   ├── src/services/     # Business logic│   │   ├── migrations/       # PostgreSQL migrations (17 files)│   │   └── config/           # YAML configuration│   ├── frontend/web/         # Next.js 15 frontend│   │   ├── src/app/          # App Router pages (11 apps)│   │   ├── src/components/   # 300+ React components│   │   ├── src/hooks/        # React Query hooks per app│   │   └── locales/          # ja/en translations│   ├── l1/contracts/         # L1 Solidity contracts (Foundry)│   ├── l3/                   # L3 governance contracts│   └── frontend/sdk/wasm/    # WASM SDK (Dilithium + SPHINCS+)├── docs/│   ├── core/SEQUENCES.md     # 9 core sequence specifications│   ├── ACTUAL_STATE.md       # Current implementation state│   └── pitch/                # Pitch deck, grant applications├── docker-compose.yml        # Development infrastructure└── .github/workflows/        # CI/CD pipelines

Testing

bash
# Backendcd src/api/api && cargo test
# Frontend E2Ecd src/frontend/web && npx playwright test
# Smart Contractscd src/l1/contracts && forge test

Test Coverage: 137 E2E tests passing, 107 integration tests, 0 failures.

Security

  • Cryptography: NIST FIPS 204 ML-DSA-65 + FIPS 205 SLH-DSA (post-quantum)
  • Hashing: SHA3-256 (no keccak256 in application layer)
  • Authentication: SIWE (Sign-In with Ethereum) + JWT
  • Time Locks: 24h normal, 7-day emergency with bond collateral
  • Slashing: Quadratic penalty for malicious provers

Audit Status

  • Internal code review
  • External audit (planned)

License

This project is licensed under the MIT License. See LICENSE for details.


Built for a post-quantum future.

來源:README.md,提交 90447cb

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

1
  1. v1.0.0最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分