# PQC-Khepra-MCP

[![smithery badge](https://smithery.ai/badge/nouchix/ktos-mcp)](https://smithery.ai/servers/nouchix/ktos-mcp)
[![MCP Registry](https://img.shields.io/badge/MCP_Registry-io.github.nouchix%2Fpqc--khepra--mcp-blue?style=for-the-badge)](https://registry.modelcontextprotocol.io/?q=khepra)
[![mcpservers.org](https://img.shields.io/badge/mcpservers.org-nouchix%2Fpqc--khepra--mcp-orange?style=for-the-badge)](https://mcpservers.org/servers/nouchix/pqc-khepra-mcp)
[![Cline Marketplace](https://img.shields.io/badge/Cline_Marketplace-Issue_%231824-blueviolet?style=for-the-badge)](https://github.com/cline/mcp-marketplace/issues/1824)
[![License](https://img.shields.io/badge/License-KSCL--1.0_(source--available)-blue?style=for-the-badge)](LICENSE)
[![Container](https://img.shields.io/badge/Container-ghcr.io-green?style=for-the-badge&logo=docker)](https://ghcr.io/nouchix/pqc-khepra-mcp)
[![PQC](https://img.shields.io/badge/PQC-ML--DSA--87_%2F_FIPS_204_%2B_ML--KEM--1024-purple?style=for-the-badge)](https://csrc.nist.gov/pubs/fips/204/final)
[![Live](https://img.shields.io/badge/Live-mcp.souhimbou.ai-brightgreen?style=for-the-badge)](https://mcp.souhimbou.ai/mcp/v1/health)
[![TriPentest Certified 92/92](https://img.shields.io/badge/TRIPENTEST-92%2F92_NEUTRALIZED-brightgreen?style=for-the-badge)](https://nouchix.com)

**Post-Quantum Cryptographic & Autonomous Flight Recording Kernel for AI Agents.**

Air-gappable. Zero cloud telemetry. Zero token overhead.  
Provides ML-DSA-87 (FIPS 204) and ML-KEM-1024 (FIPS 203) post-quantum signatures on every tool call, autonomous client-side NDJSON flight recording, and local host/asset discovery. Source-available under the KHEPRA Sovereign Public & Commercial License (KSCL-1.0): free for community and evaluation use; commercial production use requires a subscription. See [LICENSE](LICENSE).

> **Patent Reference:** Patent Pending · U.S. Provisional Application No. 63/942,886 (EFS ID: 73565085)  
> **Corporate Identity:** SecRed Knowledge Inc. (operating as NouchiX) — Delaware C-Corp (EIN 99-0529252), SDVOSB-eligible (SBA VetCert application pending), Active Secret Clearance.  
> **Live hosted endpoint:** `https://mcp.souhimbou.ai/sse` — zero install, connect in 30 seconds.  
> **Self-host for sovereign/air-gap:** [Docker](#option-a-docker-recommended) or [binary](#option-b-compiled-binary).

---

## Architecture: Free Community Kernel vs. KTOS Commercial Platform

To ensure clean commercial boundaries for partners, defense contractors, and developers, the KHEPRA ecosystem operates across two distinct layers:

| Layer | Product | License | Scope & Capabilities |
|---|---|---|---|
| **Layer 1** | **PQC-Khepra-MCP** (This Repo) | **KSCL-1.0** (source-available) | **Free Community Kernel:** ML-DSA-65 (FIPS 204) post-quantum signing, client-side autonomous flight logging, agent registration, local host/asset enumeration, and threat lookup. **Zero STIG or compliance databases.** |
| **Layer 2** | **KHEPRA Trust OS (KTOS)** | **Commercial** ($499/mo to $250K/yr) | **Sovereign Proof-and-Actuation OS:** 36,195 cross-framework compliance mappings, live DISA STIGViewer API v2 batch crosswalks, CMMC Level 2/3 assessments, ERT multi-package engines, automated C3PAO evidence packages (OSCAL, DISA CKLB, signed POA&Ms), and bounded autonomous host remediation. |

---

## Tiers & Gating (The 4-Tier Commercial & Sovereign Model)

| Tier | Price Point | Quota | Gated Tools & Capabilities | Focus |
|------|-------------|-------|----------------------------|-------|
| **Community** | **$0 / Free** (Open-Core) | 500 Credits | **14 Core Tools** (`pqc_keygen`, `pqc_sign`, `pqc_verify`, `flight_record`, `flight_export`, `agent_record`, `dag_attestation`, `khepra_get_dag_chain`, `enumerate_host`, `fingerprint_device`, `discover_assets`, `kasa_status`, `threat_lookup`, `nist_map` teaser) | Open-source PQC signing, flight logging, local discovery |
| **Platform** | **$499 / mo** (Self-Serve) | 3,000 Credits | **50+ Tools** (+ OmniScan multi-lane sweep, Shadow AI discovery, live STIGViewer API v2, OCSF SIEM stream) | Engineering teams & commercial SOC operations |
| **Enterprise** | **$2,999 / mo** | 15,000 Credits | **85+ Tools** (+ Full Agentic SOC, SEKHEM L7 PQC-WAF, PTY Enclave Supervisor, ASAF Remediation Daemon, Z3 SMT proofs) | Enterprise agent fleets & compliance automation |
| **Sovereign** | **$45K – $250K / yr** | 100,000+ Credits | **All 100 Tools** (+ Bare-metal air-gap, osquery Fleet Manager, CMMC L2/L3 autopilot, Tactical RF anti-jamming, Windows EventLog telemetry) | Defense contractors, C3PAOs, federal primes & GovCloud |

---

## What It Does (Free Community Kernel)

PQC-Khepra-MCP connects your AI assistant (Claude Code, Cursor, Antigravity, Cline) directly to a post-quantum cryptographic security layer:

- **ML-DSA-65 Signing:** FIPS 204 post-quantum signing on every tool call and DAG attestation. Key encapsulation is pre-standard CRYSTALS-Kyber-1024; FIPS 203 ML-KEM-1024 migration is in progress.
- **Autonomous Flight Recording:** Automatically logs all agent tool invocations, inputs, and outcomes to tamper-evident NDJSON hash chains.
- **Local Host & Asset Discovery:** Enumerate system runtimes, network interfaces, and environment properties locally.
- **Air-Gap & Sovereign Operation:** Runs 100% offline with zero cloud telemetry or egress calls.
- **KSCL-1.0 License:** free community and evaluation use. Commercial production use, enterprise deployment and managed-service hosting require a commercial agreement; see [LICENSE](LICENSE).

## Quickstart — Hosted Endpoint (Zero Install)

The fastest path to a live compliance tool in your AI client. No Docker, no binary, no build:

```json
{
  "mcpServers": {
    "khepra": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://mcp.souhimbou.ai/sse"]
    }
  }
}
```

Or if your client supports native SSE transport:
```
https://mcp.souhimbou.ai/sse
```

Health check: `https://mcp.souhimbou.ai/mcp/v1/health`

> **Data note:** The hosted endpoint runs in `edge` mode — DAG is in-memory and ephemeral. For persistent, signed audit trails and air-gap deployment, use the self-hosted options below.

---

## Self-Hosted Installation

For sovereign/air-gap deployment: **Docker** (recommended, no build required) or **compiled binary** (fastest startup, SCIF-ready). Both support the same environment variables and all MCP clients.

Choose your path:

| Method | Best For | Startup |
|--------|----------|---------|
| [Hosted endpoint](#quickstart--hosted-endpoint-zero-install) | Fastest start, cloud tools | Instant |
| [Docker](#option-a-docker-recommended) | Most users, easiest self-host | ~2s |
| [Compiled Binary](#option-b-compiled-binary) | Air-gap, SCIF, performance | ~300ms |

---

### Option A: Docker (Recommended)

Requires Docker Desktop or Docker Engine. The image is pre-built and ships the full compliance database — no additional downloads in sovereign mode.

```bash
# Pull once
docker pull ghcr.io/nouchix/pqc-khepra-mcp:latest

# Test it (should print the initialize response and exit)
echo '{"jsonrpc":"2.0","method":"initialize","params":{"protocolVersion":"2025-11-25","capabilities":{},"clientInfo":{"name":"test","version":"1.0"}},"id":0}' \
  | docker run --rm -i -e KHEPRA_MODE=sovereign ghcr.io/nouchix/pqc-khepra-mcp:latest
```

---

### Option B: Compiled Binary

Requires Go 1.21+ for building, or download a pre-built release from [GitHub Releases](https://github.com/nouchix/PQC-Khepra-MCP/releases).

```bash
git clone https://github.com/nouchix/PQC-Khepra-MCP.git
cd PQC-Khepra-MCP

# Build (cross-compile for your OS)
go build -o khepra-mcp ./cmd/khepra-mcp        # Linux / macOS
go build -o khepra-mcp.exe ./cmd/khepra-mcp    # Windows

# Test the binary
echo '{"jsonrpc":"2.0","method":"initialize","params":{"protocolVersion":"2025-11-25","capabilities":{},"clientInfo":{"name":"test","version":"1.0"}},"id":0}' \
  | KHEPRA_MODE=sovereign ./khepra-mcp
```

#### Windows — using the batch launcher

The repo ships a `run-mcp.bat` launcher for Windows. It uses the pre-built binary (fast path) and falls back to `go run` automatically:

```bat
:: run-mcp.bat is already in the repo at the root of PQC-Khepra-MCP
:: Point your MCP client to: cmd /c C:\path\to\PQC-Khepra-MCP\run-mcp.bat
```

---

## Adding to Your AI Client

### Claude Desktop

Config file location:
- **macOS**: `~/Library/Application Support/Claude/claude_desktop_config.json`
- **Windows**: `%APPDATA%\Claude\claude_desktop_config.json`
- **Linux**: `~/.config/Claude/claude_desktop_config.json`

#### Community tier — Docker (macOS / Linux)

```json
{
  "mcpServers": {
    "khepra": {
      "command": "docker",
      "args": [
        "run", "--rm", "-i",
        "-e", "KHEPRA_MODE=sovereign",
        "-v", "/var/lib/khepra:/var/lib/khepra",
        "ghcr.io/nouchix/pqc-khepra-mcp:latest"
      ]
    }
  }
}
```

#### Community tier — Docker (Windows)

```json
{
  "mcpServers": {
    "khepra": {
      "command": "docker",
      "args": [
        "run", "--rm", "-i",
        "-e", "KHEPRA_MODE=sovereign",
        "-v", "C:\\Users\\YourName\\.khepra:/var/lib/khepra",
        "ghcr.io/nouchix/pqc-khepra-mcp:latest"
      ]
    }
  }
}
```

#### Community tier — Binary (Windows, fastest startup)

```json
{
  "mcpServers": {
    "khepra": {
      "command": "C:\\path\\to\\PQC-Khepra-MCP\\khepra-mcp.exe",
      "args": [],
      "env": {
        "KHEPRA_MODE": "sovereign",
        "KHEPRA_NETWORK_POLICY": "lan",
        "MCP_PQC_ENABLED": "true",
        "KHEPRA_MANIFEST_PATH": "C:\\path\\to\\PQC-Khepra-MCP\\manifest.json"
      }
    }
  }
}
```

#### Community tier — Binary via batch launcher (Windows)

```json
{
  "mcpServers": {
    "khepra": {
      "command": "cmd",
      "args": ["/c", "C:\\path\\to\\PQC-Khepra-MCP\\run-mcp.bat"],
      "env": {
        "KHEPRA_MODE": "sovereign",
        "KHEPRA_NETWORK_POLICY": "lan",
        "MCP_PQC_ENABLED": "true"
      }
    }
  }
}
```

#### Pro / Enterprise / Sovereign tier (with license key)

```json
{
  "mcpServers": {
    "khepra": {
      "command": "docker",
      "args": [
        "run", "--rm", "-i",
        "-e", "KHEPRA_LICENSE_KEY",
        "-e", "KHEPRA_MODE=sovereign",
        "-v", "/var/lib/khepra:/var/lib/khepra",
        "-v", "/var/log/khepra:/var/log/khepra",
        "ghcr.io/nouchix/pqc-khepra-mcp:latest"
      ],
      "env": {
        "KHEPRA_LICENSE_KEY": "YOUR_LICENSE_KEY_HERE"
      }
    }
  }
}
```

After editing, restart Claude Desktop. Verify in **Settings → Developer** — you should see `khepra` with status **running** and all tools listed.

---

### Cursor

Config file: `.cursor/mcp.json` in your project root, or `~/.cursor/mcp.json` globally.

#### Docker (macOS / Linux)

```json
{
  "servers": {
    "khepra": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run", "--rm", "-i",
        "-e", "KHEPRA_MODE=sovereign",
        "-v", "/var/lib/khepra:/var/lib/khepra",
        "ghcr.io/nouchix/pqc-khepra-mcp:latest"
      ]
    }
  }
}
```

#### Binary (macOS / Linux)

```json
{
  "servers": {
    "khepra": {
      "type": "stdio",
      "command": "/path/to/khepra-mcp",
      "args": [],
      "env": {
        "KHEPRA_MODE": "sovereign",
        "KHEPRA_MANIFEST_PATH": "/path/to/PQC-Khepra-MCP/manifest.json"
      }
    }
  }
}
```

#### Binary (Windows)

```json
{
  "servers": {
    "khepra": {
      "type": "stdio",
      "command": "C:\\path\\to\\PQC-Khepra-MCP\\khepra-mcp.exe",
      "args": [],
      "env": {
        "KHEPRA_MODE": "sovereign",
        "KHEPRA_MANIFEST_PATH": "C:\\path\\to\\PQC-Khepra-MCP\\manifest.json"
      }
    }
  }
}
```

---

### VS Code (with GitHub Copilot or Cline extension)

Config file: `.vscode/mcp.json` in your project, or user settings.

```json
{
  "servers": {
    "khepra": {
      "type": "stdio",
      "command": "docker",
      "args": [
        "run", "--rm", "-i",
        "-e", "KHEPRA_MODE=sovereign",
        "-v", "${env:HOME}/.khepra:/var/lib/khepra",
        "ghcr.io/nouchix/pqc-khepra-mcp:latest"
      ]
    }
  }
}
```

Or via user `settings.json` for the Cline extension:

```json
{
  "cline.mcpServers": {
    "khepra": {
      "command": "docker",
      "args": [
        "run", "--rm", "-i",
        "-e", "KHEPRA_MODE=sovereign",
        "ghcr.io/nouchix/pqc-khepra-mcp:latest"
      ]
    }
  }
}
```

---

### Windsurf

Config file: `~/.codeium/windsurf/mcp_config.json`

```json
{
  "mcpServers": {
    "khepra": {
      "command": "docker",
      "args": [
        "run", "--rm", "-i",
        "-e", "KHEPRA_MODE=sovereign",
        "-v", "/var/lib/khepra:/var/lib/khepra",
        "ghcr.io/nouchix/pqc-khepra-mcp:latest"
      ]
    }
  }
}
```

---

### Continue.dev

Config file: `~/.continue/config.json` — add to the `experimental.modelContextProtocolServers` array:

```json
{
  "experimental": {
    "modelContextProtocolServers": [
      {
        "name": "khepra",
        "transport": {
          "type": "stdio",
          "command": "docker",
          "args": [
            "run", "--rm", "-i",
            "-e", "KHEPRA_MODE=sovereign",
            "ghcr.io/nouchix/pqc-khepra-mcp:latest"
          ]
        }
      }
    ]
  }
}
```

---

### Cloud / SaaS AI Tools (Claude.ai, ChatGPT, Gemini, etc.)

Use the **live hosted endpoint** at `mcp.souhimbou.ai` — no setup required:

#### Option 1 — Live hosted endpoint (recommended, zero setup)

```json
{
  "mcpServers": {
    "khepra": {
      "command": "npx",
      "args": ["-y", "mcp-remote", "https://mcp.souhimbou.ai/sse"]
    }
  }
}
```

Or direct SSE URL for tools that accept it:
```
https://mcp.souhimbou.ai/sse
```

| Cloud Tool | Where to add MCP URL |
|------------|---------------------|
| Claude.ai (Pro/Team) | Settings → Integrations → MCP Servers |
| Cursor | `.cursor/mcp.json` → `url` field |
| OpenAI Assistants | API `tools` field with `type: "mcp"` |
| Glama.ai | Workspace → MCP Servers |
| Smithery.ai | Catalog → Self-hosted server |

#### Option 2 — `mcp-remote` proxy (local binary behind the bridge)

If you need sovereign mode (zero egress) proxied to a cloud tool:

```bash
# Install once
npm install -g mcp-remote

# Bridge your local sovereign instance
KHEPRA_MODE=sovereign mcp-remote \
  --server "docker run --rm -i -e KHEPRA_MODE=sovereign ghcr.io/nouchix/pqc-khepra-mcp:latest" \
  --port 3000

# Point cloud tool to:
# http://localhost:3000/sse
```

> **Security note:** In `sovereign`/`ironbank` mode, KHEPRA makes zero egress calls — only the bridge connection to the cloud tool carries data.

#### Option 3 — Smithery / MCP Registries (Community tier)

KHEPRA is listed across all major MCP discovery platforms. Cloud tools that support registry-based discovery can install it directly:

| Registry | URL |
|---|---|
| **Smithery.ai** | [smithery.ai/servers/skone/pqc-khepra-mcp](https://smithery.ai/servers/skone/pqc-khepra-mcp) |
| **MCP Registry (official)** | [registry.modelcontextprotocol.io/?q=khepra](https://registry.modelcontextprotocol.io/?q=khepra) |
| **mcpservers.org** | [mcpservers.org/servers/nouchix/pqc-khepra-mcp](https://mcpservers.org/servers/nouchix/pqc-khepra-mcp) |
| **Cline Marketplace** | [github.com/cline/mcp-marketplace/issues/1824](https://github.com/cline/mcp-marketplace/issues/1824) |
| **Live Hosted Endpoint** | [mcp.souhimbou.ai](https://mcp.souhimbou.ai/) |

```
Registry ID: io.github.nouchix/pqc-khepra-mcp
```

---

## Validation — Test Your Installation

Run this from your terminal to verify the server responds correctly:

```bash
# Docker
echo '{"jsonrpc":"2.0","method":"tools/list","params":{},"id":1}' \
  | docker run --rm -i -e KHEPRA_MODE=sovereign ghcr.io/nouchix/pqc-khepra-mcp:latest

# Binary (Linux / macOS)
echo '{"jsonrpc":"2.0","method":"tools/list","params":{},"id":1}' \
  | KHEPRA_MODE=sovereign ./khepra-mcp

# Binary (Windows PowerShell)
'{"jsonrpc":"2.0","method":"tools/list","params":{},"id":1}' \
  | & ".\khepra-mcp.exe"
```

Expected output: a JSON-RPC response listing all available tools. If you see `"tools": [...]` with 12+ entries — you're connected.

#### Full protocol validation (Windows)

```powershell
# Runs the complete Claude Desktop handshake sequence and validates all responses
.\scripts\test-mcp-handshake.ps1 -BinaryPath ".\khepra-mcp.exe"

# Expected output:
# [PASS] initialize | protocolVersion=2025-11-25 | listChanged=False
# [PASS] tools/list | count=34
# TRL-10 READY - Server passes full Claude Desktop protocol validation
```

---

## MCP Tools

### Community Tier (Free Lead Magnet — 14 Open-Core Tools, Zero STIG DBs)

The free open-core kernel provides immediate utility for individual developers, AI coding agents (Claude Code, Cursor, Antigravity, Cline), and security researchers:

- **`pqc_keygen`**: Generate ML-DSA-65 (FIPS 204) post-quantum keypairs.
- **`pqc_sign`**: Sign arbitrary payloads with post-quantum digital signatures.
- **`pqc_verify`**: Cryptographically verify ML-DSA-65 signatures.
- **`flight_record`**: Tamper-evident client-side recording of agent tool invocations to NDJSON hash chains.
- **`flight_export`**: Export local flight records with DAG anchor proof.
- **`agent_record`**: Attest agent tool execution to local SQLite ledger.
- **`dag_attestation`**: Export cryptographic audit trail of the active session.
- **`khepra_get_dag_chain`**: Retrieve chain-linked DAG node history.
- **`enumerate_host`**: Local system environment, interfaces, and architecture discovery.
- **`fingerprint_device`**: Generate tamper-evident device identity hash.
- **`discover_assets`**: Enumerate reachable network endpoints and runtime services locally.
- **`kasa_status`**: Autonomous agent runtime status and health metrics.
- **`threat_lookup`**: Local offline threat IOC lookup.
- **`nist_map`** *(Community Teaser)*: Offline semantic lookup across base NIST controls (limited to 25 items).

> **Note:** The Free Community Kernel contains **zero STIG or compliance databases**. All automated DISA STIG benchmarks, CMMC L2/L3 engines, and executive risk syntheses are exclusively part of the commercial **KTOS Master Kernel**.

---

### KTOS Master Kernel (Paid Upgrade — 100+ Enterprise & Sovereign Tools)

Upgrade to **KTOS Platform ($499/mo)**, **Enterprise ($2,999/mo)**, or **Sovereign ($45K–$250K/yr)** to unlock the full 100-tool Master Kernel:

#### `pqc_stig` — World's First DoD PQC STIG ⭐ *(Enterprise / Sovereign)*
Assesses source code and infrastructure against **PQC-01-STIG-V1R1**: 17 controls covering CNSA 2.0 algorithm suite (FIPS 203 ML-KEM-1024, FIPS 204 ML-DSA-87), hybrid cryptographic encapsulation, constant-time validation, and NSA MCP Security Advisory guidelines.

#### `ert_scan` — Enterprise Risk & Threat Engine *(Enterprise / Sovereign)*
Multi-package security scanner (Packages A, B, C, D) generating executive **Godfather Reports** with dollar-denominated FAIR risk exposure and C3PAO-ready attestation.

#### `stig_check` — Automated STIG Validation *(Enterprise / Sovereign)*
Validates live systems and config files against DISA RHEL-09-STIG and Windows benchmarks.

#### `cmmc_assess` — CMMC Level 2/3 Autopilot *(Enterprise / Sovereign)*
Full maturity assessment across all 110 CMMC Level 2 practices with automated POA&M generation.

#### `khepra_query_stig` — Relational Compliance Database *(Enterprise / Sovereign)*
Full access to the 36,195-row relational compliance database (DISA STIG → CCI → NIST SP 800-53 Rev 5 → NIST SP 800-171 Rev 2 → CMMC 2.0).

#### `godfather_report` & `godfather_approve` *(Platform / Enterprise)*
Synthesize raw vulnerabilities into board-ready executive briefs with remediation ROI.

#### + 80+ Additional Advanced Tools
Includes `scan_shadow_ai`, `attest_ai_policy`, `linux_hardening_check`, `stig_live_query` (live DISA STIGViewer API v2), `nhi_inventory`, `nhi_revoke`, `acp_issue`, `sekhem_gateway`, `ouroboros_waf_eye`, `sbom_generate`, `forensic_snapshot`, and autonomous host remediation playbooks.

---

## The Godfather Report

Unlike compliance scanners that output a wall of CVEs, KHEPRA translates findings into the language executives care about:

```
Finding: RHEL-09-212030 — No FIPS-validated crypto on /etc/ssh
Severity: CAT I (HIGH)
Business Impact: $2.4M estimated breach exposure (FAIR model)
Remediation Cost: $800 (4 hours engineer time)
ROI: 3,000x
```

Every finding includes control ID, framework mapping, business impact in dollars, remediation cost estimate, and ROI.

---

## Deployment Modes

| Mode | Air-Gap | Egress | Telemetry | Use Case |
|------|---------|--------|-----------|----------|
| `sovereign` | ✅ Yes | Zero | Zero | On-prem, SCIF, classified (DEFAULT) |
| `ironbank` | ✅ Yes | Zero | Zero | DoD/IC production, FIPS-only |
| `hybrid` | ❌ No | LAN | Zero | Edge + cloud coordination |
| `edge` | ❌ No | Unrestricted | Zero | Fully stateless SaaS |

Set via `KHEPRA_MODE` environment variable. Unknown values are rejected at startup and fall back to `sovereign` (fail-closed).

---

## Environment Variables

| Variable | Required | Default | Description |
|----------|----------|---------|-------------|
| `KHEPRA_LICENSE_KEY` | Pro/Enterprise/Sovereign only | — | License key. Community tier runs without one. Get at [nouchix.com](https://nouchix.com) |
| `KHEPRA_MODE` | No | `sovereign` | Deployment mode: `sovereign`, `ironbank`, `hybrid`, `edge` |
| `KHEPRA_MANIFEST_PATH` | No | `manifest.json` | Path to signed tool manifest file |
| `KHEPRA_HOME` | No | `/var/lib/khepra` | Data and compliance DB directory |
| `KHEPRA_LOG_DIR` | No | `/var/log/khepra` | Log directory |
| `KHEPRA_DAG_PATH` | No | `~/.khepra/dag` | DAG audit chain storage path |
| `KHEPRA_AUDIT_LOG_PATH` | No | `~/.khepra/audit.ndjson` | Signed audit log path |
| `KHEPRA_MAX_CONCURRENT` | No | `5` | Max concurrent tool calls per agent |
| `KHEPRA_NETWORK_POLICY` | No | `lan` | Network scope: `lan`, `none`, `unrestricted` |
| `MCP_PQC_ENABLED` | No | `true` | Enable ML-DSA-65 PQC attestation on all responses |

---

## Air-Gap & SCIF Deployment

KHEPRA makes **zero external network calls** in `sovereign` and `ironbank` modes:
- License validated offline via ML-DSA-65 signed `license.adinkhepra` file
- Compliance databases (36,195 mappings) bundled in container — no external downloads
- No telemetry, no heartbeat, no egress — verified at the transport layer

```bash
# Transfer image to air-gapped network
docker save ghcr.io/nouchix/pqc-khepra-mcp:latest | gzip > khepra-mcp.tar.gz

# On air-gapped host:
docker load < khepra-mcp.tar.gz
```

> **Note on telemetry:** The `dark_crypto_contribute` tool (Community tier) sends anonymized cryptographic algorithm telemetry to the [SouHimBou AI](https://souhimbou.ai) intelligence network **only when explicitly invoked by the user**. It is never triggered automatically. In sovereign/ironbank mode, all network calls are blocked at the transport layer regardless.

---

## Compliance Coverage

| Framework | Version | Mappings |
|-----------|---------|----------|
| STIG (RHEL 9) | V1R3 | Automated scanning |
| NIST 800-53 | Rev 5 | 2,120 CCIs |
| NIST 800-171 | Rev 2 | 320 controls |
| CMMC | Level 3 | Full practice set |
| FedRAMP | High | Baseline scanning |
| **PQC-01-STIG-V1R1** | V1R1 | **12 PQC controls (NouchiX control set; checks CNSA 2.0 algorithms)** |
| **Total** | | **36,195+ mappings** |

---

## Licensing

**No per-token or per-query charges on any paid tier.**

| Tier | Cost | License Key | Tools |
|------|------|-------------|-------|
| Community | Free | Not required | `pqc_stig` + 12 core tools |
| Pro | $19/mo | Required | Compliance reporting, ACP, NHI inventory, autopilot |
| Enterprise | $499/mo | Required | All 76 tools, autopilot |
| Sovereign | Custom — Contact Sales | Required | All 76 tools + air-gap/offline licensing + HSM, autopilot |

- Community tier is permanently free — contribute to open-source PQC adoption
- Pro/Enterprise: self-serve billing
- Sovereign: contact [contact@nouchix.com](mailto:contact@nouchix.com) or visit [nouchix.com](https://nouchix.com)

---

## Security

### Reporting Vulnerabilities

**Do not open public issues for security vulnerabilities.**

Report privately via **[GitHub Security Advisories](https://github.com/nouchix/PQC-Khepra-MCP/security/advisories/new)** or email **[support@nouchix.com](mailto:support@nouchix.com)**.

| SLA | Target |
|-----|--------|
| Acknowledgement | 24 hours |
| Initial assessment | 5 business days |
| Patch / mitigation (Critical) | 30 days |

We accept encrypted reports via PGP (`keys/security_contact.asc`) and Post-Quantum channels (Dilithium / ML-DSA-65 keys in `keys/`). See [SECURITY.md](SECURITY.md) for the full disclosure policy and ASAF event taxonomy.

---

### Security Posture

> **Deploying advanced post-quantum cryptography, air-gapped isolation, and comprehensive STIG mappings — built in direct alignment with NSA & ASD Model Context Protocol guidelines.**

#### NSA & ASD MCP Security Alignment

The NSA and Australian Signals Directorate (ASD) have published specific threat vectors for AI systems interacting with local environments. KHEPRA MCP is explicitly designed to mitigate every identified vector:

| NSA/ASD Requirement | KHEPRA Implementation |
|---------------------|-----------------------|
| Cryptographic validation of tool responses | ML-DSA-65 (Dilithium) signatures on all JSON-RPC 2.0 payloads |
| Input validation & sanitization | Parameter injection resistance via strict JSON Schema validation |
| Principle of least privilege credentials | Short-lived ephemeral tokens tied to specific task execution windows |
| Comprehensive audit logging | Tamper-evident events compiled into an immutable DAG structure |
| Resource consumption limits | Rate limiting + backpressure for LLM request loops |
| Authorization gates for sensitive actions | Human-in-the-loop gate for destructive state changes |
| Environment isolation | Containerized execution with zero-egress sovereign mode |
| Software supply chain integrity | Manifest pinning for all loaded tools and dependencies |
| Network exposure reduction | Air-gappable — zero internet transit in `sovereign`/`ironbank` modes |
| Post-quantum resilience | PQC-signed DAG trail protecting against harvest-now-decrypt-later |

#### Compliance Certifications

| Framework | Status | Coverage |
|-----------|--------|----------|
| CMMC Level 2 | ✅ | Automates evidence collection for AU, CM, SI, SC domains |
| NIST SP 800-171 Rev 2 | ✅ | Logging, accountability, system integrity |
| NIST SP 800-53 Rev 5 | ✅ | Continuous monitoring (AU-2, SI-4) |
| FIPS 203 (ML-KEM) | 🟡 | Pre-standard Kyber-1024 today; ML-KEM-1024 migration in progress |
| FIPS 204 (ML-DSA) | ✅ | Digital signatures for payload authentication |
| NSM-10 PQC Mandate | ✅ | National Security Memorandum 10 compliance |
| DFARS 252.204-7012 | ✅ | Immutable forensic trails for cyber incident reporting |
| NSA MCP Security Guidelines | ✅ | Direct mapping to all published AI agent threat mitigations |

#### Live Deployment — Physical Edge

Running continuously on constrained edge hardware since **May 12, 2026** to prove efficiency in sovereign environments:

- **Hardware**: Raspberry Pi 2 · 1 GB RAM · 900 MHz ARM · Live Spectrum Router
- **SCADA Pod**: STM32U585 / QRB2210 · Modbus TCP · MQTT · Zephyr RTOS 3.4+ · Live Dilithium Signature Verification
- **Controls active**: 3 open ports secured · 12 STIG violations detected · 100% file integrity monitoring (AIDE) · 24/7 continuous operation

#### Academic Validation

| Event | Date | Institution |
|-------|------|-------------|
| **UAlbany AI Plus Symposium 2026** — *"KHEPRA Protocol: Quantum-Resilient Agentic AI Security Using Cultural Cryptography"* | March 7, 2026 | NSA CAE-CDE Institution · 200+ audience |
| **SUNY Albany Cybersecurity Showcase** — First PQC key ceremony on STM32-class device (SCADA Pod) | May 12–13, 2026 | Live demo · SCADA architecture poster |

> USPTO Provisional Patent Application **No. 63/942,886** — pending.  
> 🔒 Iron Bank containers in DISA vetting process.

---

## Open-Core Architecture Notice

`PQC-Khepra-MCP` is an open-source Model Context Protocol server providing post-quantum signing (ML-DSA-65, FIPS 204), pre-standard Kyber-1024 key encapsulation and compliance tooling.

Proprietary runtime governance engines—including the KHEPRA Trust Operating System (KTOS), the ASAF Policy Declaration Language (APDL) Compiler, the Evolutionary Algorithm Lattice Auto-Tuning Kernel, the SEKHEM Polymorphic WAF Gateway, and the Full-Stealth Sovereign Mesh—are components of Khepra Enterprise and are licensed under commercial terms.

---

## Find Us — MCP Registry Listings

PQC-Khepra-MCP is listed on every major MCP discovery platform:

| Platform | Link | Notes |
|---|---|---|
| **Smithery.ai** | [smithery.ai/servers/skone/pqc-khepra-mcp](https://smithery.ai/servers/skone/pqc-khepra-mcp) | One-click install for Claude, Cursor, Windsurf |
| **MCP Registry (official)** | [registry.modelcontextprotocol.io/?q=khepra](https://registry.modelcontextprotocol.io/?q=khepra) | Anthropic-curated registry — Registry ID: `io.github.nouchix/pqc-khepra-mcp` |
| **mcpservers.org** | [mcpservers.org/servers/nouchix/pqc-khepra-mcp](https://mcpservers.org/servers/nouchix/pqc-khepra-mcp) | Community discovery index |
| **Cline Marketplace** | [github.com/cline/mcp-marketplace/issues/1824](https://github.com/cline/mcp-marketplace/issues/1824) | VS Code / Cline extension marketplace |
| **Live Hosted Endpoint** | [mcp.souhimbou.ai](https://mcp.souhimbou.ai/) | Zero-install SSE endpoint — connect in 30 seconds |

---

## About NouchiX

Veteran-led advisory firm translating CMMC, NIST, and STIG mandates into executive roadmaps.

- **Sales / General**: [contact@nouchix.com](mailto:contact@nouchix.com)
- **Support**: [support@nouchix.com](mailto:support@nouchix.com)
- **Website**: [https://nouchix.com](https://nouchix.com)
- **Phone**: (518) 304-4450

Developed by SecRed Knowledge Inc. dba NouchiX, Albany, NY.

---

## 📋 TC-25 Operator Manual & Developer Runbook

PQC-Khepra-MCP is the open-core agent channel of the KHEPRA Trust OS (KTOS) architecture:
- **[TC-25 Technical Operator & Maintenance Manual](https://github.com/nouchix/khepra-trust-os/blob/main/docs/TC-25_KTOS_OPERATOR_MANUAL.md)** — Training Circular No. 25-KTOS-001 covering Four-Layer Sovereign Architecture, Tactical RF anti-jamming suite, Windows Event Viewer hierarchy (IDs 1001–1050), and Triple-Engine Adversarial Neutralization (92/92 Verified · 100% Zero-Bypass).
- **[Developer Installation & Troubleshooting Runbook](https://github.com/nouchix/khepra-trust-os/blob/main/docs/DEVELOPER_INSTALLATION_AND_TROUBLESHOOTING.md)** — Step-by-step runbook for Master Dev Machines, Antigravity IDE (`mcp_config.json`), Claude Code (`.claude.json`), and Sovereign Linux VPS deployment.

### Unified KTOS Product Surfaces
- **Layer 4 — KTOS-MCP Master-Kernel** (`mcp.souhimbou.ai`): 100 native tools, ML-DSA-65 post-quantum signing, SEKHEM L7 WAF prompt defense, Event Viewer logging, Tactical RF suite.
- **Layer 3a — KTOS CMMC Hub & Fleet Engine** (`adinkhepra.com`): Sovereign bare-metal & osquery Fleet Manager for CMMC/STIG compliance audits.
- **Layer 3b — KTOS Agentic SOC** (`souhimbou.ai`): Cloud Agentic SOC & AI Security Architect with autonomous Flight Recorder SDK and KASA threat detector.
- **Layer 2 — Shared Trust Substrate**: 36,195 cross-framework compliance mappings, ML-DSA-65 (FIPS 204) / Kyber-1024 (pre-standard), immutable DAG attestation.
- **Layer 1 — KHEPRA Protocol**: Patent-pending non-linear cryptographic attestation (USPTO #73565085).

### Triple-Engine Adversarial Neutralization (TriPentest · 92/92 Verified · 100.00% Zero-Bypass Rate)
- **CyberStryke Automated Assault (30/30)**: SQLi, XSS, Path Traversal, Null Byte Escapes, Prompt Injections, Egress Data Disclosure neutralized.
- **AgentHound Offensive Security Framework (28/28)**: MCP Tool Description Poisoning (`POISONED_DESCRIPTION`), Tool Shadowing (`SHADOWS`), A2A Impersonation (`CAN_IMPERSONATE`), Indirect Tool Execution (`CAN_EXECUTE`), Context Window Taint (`TAINTS`), and Information Flow Control Violations (`IFC_VIOLATION`) neutralized.
- **HexStrike AI Autonomous Red Team Battery (34/34)**: FastMCP Schema Fuzzing, Nuclei Template RCEs, Metasploit Stagers, Sqlmap Stacked/OOB Injections, SUID/Sudo Escapes, and Covert C2/Egress Tunneling neutralized.