qpher-mcp — Qpher PQC API for AI Coding Assistants

Model Context Protocol (MCP) server that lets AI coding assistants (Claude Code, Cursor, GitHub Copilot) interact with Qpher post-quantum cryptography APIs directly.

Prerequisites

You need a Qpher API Key before setting up the MCP server:

1. Sign up at qpher.ai
2. Go to portal.qpher.ai → API Keys
3. Create a new API key (format: qph_live_...)

Free plan includes 100 PQC operations/month.

Quick Setup

Claude Code

claude mcp add qpher -- npx qpher-mcp -e QPHER_API_KEY=qph_live_<your-key>

Or manually add to your Claude Code MCP settings (~/.claude.json or project .mcp.json):

{
  "mcpServers": {
    "qpher": {
      "command": "npx",
      "args": ["qpher-mcp"],
      "env": {
        "QPHER_API_KEY": "qph_live_<your-key>"
      }
    }
  }
}

Cursor

Add to .cursor/mcp.json:

{
  "mcpServers": {
    "qpher": {
      "command": "npx",
      "args": ["qpher-mcp"],
      "env": {
        "QPHER_API_KEY": "qph_live_<your-key>"
      }
    }
  }
}

Windsurf / Other MCP-Compatible Editors

Use the same JSON config format — set command to npx, args to ["qpher-mcp"], and provide QPHER_API_KEY in env.

Available Tools (16)

KEM (Encryption)

| Tool | Description | |------|-------------| | qpher_encrypt | Encrypt data using Kyber768 or X-Wing KEM-DEM | | qpher_decrypt | Decrypt data using Kyber768 | | qpher_encapsulate | Raw KEM encapsulation (shared secret + ciphertext) | | qpher_decapsulate | Raw KEM decapsulation (recover shared secret) | | qpher_wrap_key | Wrap a symmetric key with quantum-safe KEM | | qpher_unwrap_key | Unwrap a previously wrapped symmetric key |

Signatures

| Tool | Description | |------|-------------| | qpher_sign | Sign data using Dilithium3 or Composite-ML-DSA | | qpher_verify | Verify a PQC digital signature | | qpher_sign_hash | Sign a pre-computed hash (SHA-256/384/512) | | qpher_verify_hash | Verify a hash signature |

Key Management

| Tool | Description | |------|-------------| | qpher_generate_key | Generate a new PQC key pair | | qpher_rotate_key | Rotate a key (creates new, retires old) | | qpher_list_keys | List PQC keys with optional filters | | qpher_get_active_key | Get the current active key for an algorithm | | qpher_retire_key | Retire a key version | | qpher_archive_key | Archive a retired key |

Available Resources (3)

| Resource | URI | Description | |----------|-----|-------------| | Quickstart | qpher://docs/quickstart | Getting started guide | | Error Codes | qpher://docs/error-codes | Error code reference | | API Overview | qpher://docs/api-overview | Endpoints, algorithms, formats |

Example Usage

Once configured, ask your AI assistant in natural language:

• "Encrypt this data with Qpher PQC encryption"
• "Generate a Kyber768 key pair"
• "Sign this document with Dilithium3"
• "List my PQC keys"
• "Wrap this AES-256 key with quantum-safe encryption"
• "Sign this SHA-256 hash"

The AI will use the Qpher MCP tools to execute these operations directly.

Configuration

| Environment Variable | Required | Default | Description | |---------------------|----------|---------|-------------| | QPHER_API_KEY | Yes | — | Qpher API key (format: qph_live_*) | | QPHER_API_BASE_URL | No | https://api.qpher.ai | API base URL |

How It Works

You ──► AI Assistant ──► qpher-mcp (local) ──► api.qpher.ai (cloud)
           (Claude)       MCP Server             Qpher PQC API
                          via stdio               via HTTPS

1. The MCP server runs locally on your machine as a subprocess
2. Your AI assistant communicates with it via JSON-RPC over stdin/stdout
3. The MCP server translates tool calls into HTTPS API requests to Qpher's cloud

Your private keys never leave Qpher's secure infrastructure.

Links

• Documentation
• API Reference
• Python SDK
• Node.js SDK

License

MIT