@runtimeai/mcp-server-qutonomous

MCP server for Qutonomous Security Platform — Post-quantum cryptography (QuantumVault, PQ Sign, PQ Policy, TokenVault, Comply, CryptoGuard, DataShare, Transit Shield, Migrate).

82 tools | TypeScript | stdio transport | MIT License

Quick Start

# Run with npx (no install needed)
npx @runtimeai/mcp-server-qutonomous

Configure with Claude Code

Add to ~/.claude/claude_desktop_config.json:

{
  "mcpServers": {
    "qutonomous": {
      "command": "npx",
      "args": ["-y", "@runtimeai/mcp-server-qutonomous"],
      "env": {
        "QUANTUMVAULT_URL": "https://vault.rt19.runtimeai.io"
        "QUANTUMVAULT_TOKEN": "your_jwt_token"
        "PQDP_TENANT_ID": "default"
      }
    }
  }
}

Environment Variables

• QUANTUMVAULT_URL — Required
• QUANTUMVAULT_TOKEN — Required
• PQDP_TENANT_ID — Required

Tools (82)

| Tool | Description | |---|---| | vault_put_secret | Store encrypted secret in QuantumVault. | | vault_get_secret | Retrieve secret by path. | | vault_list_secrets | List secret paths. | | vault_delete_secret | Delete secret. | | vault_create_key | Create ML-KEM-1024 or ML-DSA-87 key. | | vault_list_keys | List cryptographic keys. | | vault_get_key | Get key details. | | vault_rotate_key | Rotate key version. | | vault_delete_key | Soft-delete key. | | vault_rewrap_status | Check re-wrap job status. | | vault_rewrap_progress | Report re-wrap progress. | | vault_encrypt | ML-KEM-1024 transit encrypt. | | vault_decrypt | Transit decrypt. | | vault_audit_log | Query audit entries. | | vault_verify_chain | Verify tamper-evident hash chain. | | vault_chain_summary | Chain stats: entries, hashes. | | vault_chain_entries | Entries with hash metadata. | | vault_health | QuantumVault health check. | | pqsign_sign_document | HYBRID sign (ML-DSA-87 + ECDSA P-384). | | pqsign_verify_document | Verify HYBRID signature. | | pqsign_sign_code | Sign code manifest (ML-DSA-87). | | pqsign_sign_api | Sign API request. | | pqsign_get_public_key | Get ML-DSA-87 public key. | | pqsign_create_timestamp | Create PQC RFC 3161 timestamp. | | pqsign_audit_logs | Signing audit logs. | | pqsign_list_algorithms | List supported algorithms. | | pqsign_health | PQ Sign health. | | policy_create | Create Rego policy. | | policy_list | List policies. | | policy_get | Get policy. | | policy_update | Update policy. | | policy_delete | Delete policy. | | policy_evaluate | Evaluate policy against input. | | policy_violations | Get violation history. | | policy_health | Policy Engine health. | | token_tokenize | Tokenize sensitive data (FPE). | | token_detokenize | Detokenize back to original. | | token_list_formats | List tokenization formats. | | token_create_format | Create custom format. | | token_batch_tokenize | Bulk tokenize. | | token_batch_detokenize | Bulk detokenize. | | token_stats | Tokenization statistics. | | token_health | TokenVault health. | | comply_generate_report | Generate compliance report. | | comply_list_reports | List reports. | | comply_get_report | Get report details. | | comply_list_frameworks | List supported frameworks. | | comply_get_posture | Compliance posture score. | | comply_gap_analysis | Run gap analysis. | | comply_export | Export report. | | comply_get_controls | List controls for framework. | | comply_submit_evidence | Submit compliance evidence. | | comply_health | Comply health. | | crypto_start_scan | Start cryptographic posture scan. | | crypto_get_scan | Get scan results. | | crypto_get_cbom | Get Cryptographic Bill of Materials. | | crypto_generate_cbom | Generate CBOM (async). | | crypto_health_score | Cryptographic health score. | | crypto_cnsa_compliance | CNSA 2.0 compliance check. | | crypto_list_findings | List findings. | | crypto_health | CryptoGuard health. | | share_create | Create PQC-encrypted share. | | share_list | List shares. | | share_get | Get share details. | | share_revoke | Revoke share access. | | share_upload | Upload file to share. | | share_download | Download shared file. | | share_health | DataShare health. | | transit_proxy_status | Proxy status + PQC stats. | | transit_list_connections | Active PQC connections. | | transit_pqc_stats | PQC vs classical handshake stats. | | transit_health | Transit Shield health. | | migrate_create_job | Create migration job. | | migrate_list_jobs | List migration jobs. | | migrate_get_job | Get job status. | | migrate_cancel_job | Cancel running job. | | migrate_configure_source | Configure migration source. | | migrate_list_sources | List configured sources. | | migrate_health | Migrate health. | | platform_health | Check all 9 services. | | platform_algorithms | List supported PQC algorithms. | | platform_compliance | Overall PQC compliance. |

Testing

npx @modelcontextprotocol/inspector npx @runtimeai/mcp-server-qutonomous

License

MIT — RuntimeAI, Inc.