acp_issue
Issue a new PQC credential via the Agent Control Plane
LABSCO SUMMARY
The database ships inside the container, and every answer comes back signed.
Compliance mappings are bundled rather than fetched, so a control lookup costs nothing and works with the network unplugged — which is the point for on-prem and SCIF deployments. Responses carry an ML-DSA-65 signature and land in a DAG chain that later exports as an attestation package or a DFARS POA&M, so the audit artefact falls out of the work instead of being assembled afterwards. The one decision to make early is the tier, because most of the catalogue sits above the free Community tier.
What it is
KHEPRA is a compliance and security engine that runs on your own hardware and answers as an MCP server. It bundles 36,195 STIG/CCI/NIST/CMMC mappings so lookups happen offline, signs responses with ML-DSA-65 (FIPS 204), and records what the agent did into a DAG audit chain. In sovereign and ironbank modes it makes no outbound network calls at all.
What you get
- pqc_stig assesses a codebase against PQC-01-STIG-V1R1 — the project's post-quantum STIG covering CNSA 2.0 and FIPS 203/204/205 — and returns per-control findings with a signed compliance score
- khepra_query_stig and nist_map search the bundled 36,195-mapping database of STIG rules, CCI items, NIST 800-53 Rev 5 and 800-171 Rev 2 controls and CMMC 2.0, BM25-ranked and air-gap safe
- cmmc_assess scores CMMC Level 1, 2 or 3 with gaps and a C3PAO readiness flag; khepra_export_poam produces a DFARS 252.204-7012 POA&M and khepra_export_attestation a signed evidence package
- ert_scan runs SBOM, CVE, secrets, STIG and PQC inventory inside a Docker sandbox, with ert_readiness, ert_architect, ert_crypto and ert_godfather as the packaged passes — 800-171 alignment, supply-chain risk enriched with CISA KEV and EPSS, PQC readiness including weak primitives like MD5 and RC4, and a board-level causal chain with dollar impact
- godfather_report can be staged: with approval_required it returns a single-use token, and godfather_approve consumes that token to release the report
- Scanning and forensics: vuln_scan across Go, NPM and Python dependencies, secret_scan by entropy and pattern, container_scan on Dockerfiles, port_scan, enumerate_host, fingerprint_device, packet_analyze over a PCAP, forensic_snapshot and fim_baseline
- Non-human identities: nhi_inventory, nhi_orphans, nhi_excessive, nhi_expired and nhi_revoke, with attack_graph turning that inventory into lateral-movement paths and blast radius
- Incidents and credentials: ir_incident and ir_add_ioc, acp_issue, acp_status and acp_revoke — each signed and written to the chain
- The audit trail is addressable in its own right: dag_write, dag_query, dag_audit, audit_dag_integrity, khepra_get_dag_chain and dag_attestation, with flight_record, agent_record and flight_export producing a CMMC-aligned evidence packet of what the agent itself did
- threat_lookup and khepra_query_threat_intel read an embedded CISA KEV and MITRE ATT&CK database offline; threat_model builds a STRIDE model with NIST 800-53 and ATT&CK mappings; owasp_agent_assess scores this deployment against the OWASP Agentic Top 10
- KASA is the autonomous half — kasa_start, kasa_status, kasa_scan, kasa_task, kasa_forensics and kasa_crypto_agent — with ouroboros_waf_eye, ouroboros_vuln_eye, ouroboros_fim_eye and ouroboros_stig_eye reporting continuous posture
Requirements
Two ways to run it: Docker (ghcr.io/nouchix/pqc-khepra-mcp:latest) or a Go 1.21+ binary that starts in about 300ms. KHEPRA_MODE picks sovereign (the default), ironbank, hybrid or edge, and an unknown value is rejected at startup and falls back to sovereign. KHEPRA_LICENSE_KEY is needed only above the free Community tier, which is pqc_stig, nist_map, khepra_query_stig and a core set; Pro is $19/mo and Enterprise $499/mo, neither charging per token or per query. Also configurable: KHEPRA_HOME, KHEPRA_DAG_PATH, KHEPRA_AUDIT_LOG_PATH, KHEPRA_NETWORK_POLICY, KHEPRA_MAX_CONCURRENT (default 5) and MCP_PQC_ENABLED.
Setup effort
One command — docker pull ghcr.io/nouchix/pqc-khepra-mcp:latest
USE CASES
01
Finding out how exposed your code is to a post-quantum deadline
Assess the source tree against the bundled PQC STIG, then inventory the crypto libraries and flag the weak primitives still in use.
02
Getting ready for a CMMC assessment
Score the environment, read the gaps, and export both the POA&M and a signed evidence package an assessor can verify independently.
03
Explaining risk to people who do not read CVE lists
Run the scan, then produce the executive report with dollar-denominated impact per finding — staged behind a single-use token when someone has to approve it before it goes out.
04
Working out which service accounts could move sideways
Inventory the non-human identities, single out the orphaned and over-permissioned ones, then model the lateral movement paths they open up.
05
Proving what an agent did afterwards
Every tool call is recorded and signed; export the chain as an evidence packet mapped to NIST 800-171 and CMMC controls, and audit its integrity separately.
06
Checking a machine against STIG without sending anything outside
Run the control checks against a live path, look up any rule in the bundled database, and get remediation guidance with CAT I, II and III severities.
73 tools
Counted once with only startup setup. Other versions, modes or optional credentials may expose a different list.
acp_revoke
Revoke an active ACP credential
acp_status
List active ACP credentials and their expiry status
agent_record
Record an agent action in the SouHimBou AI Flight Recorder. Records to PQC-signed DAG audit log.
attack_graph
Generate an attack graph from current NHI inventory. Models lateral movement paths, privilege escalation vectors, and blast radius.
audit_dag_integrity
Full integrity audit of the KASA DAG. Verifies: node count, parent linkage, PQC metadata completeness, and signature chain.
cmmc_assess
CMMC Level 1/2/3 assessment via KHEPRA compliance database (36,195 STIG→CCI→NIST→CMMC mappings). Returns satisfaction score, gaps, C3PAO readiness flag, and PQC status.
compliance_scan
Run built-in compliance checks against CIS, STIG, and NIST baselines. Returns pass/fail per control with remediation guidance.
container_scan
Analyze Dockerfile and container manifests for security misconfigurations and base image vulnerabilities.
dag_attestation
Export the PQC-signed DAG audit trail for the current session. Returns all DAG nodes with ML-DSA-65 signatures, timestamps, and Adinkra symbol chain.
dag_audit
Perform a full integrity audit of the KASA DAG. Verifies node count, parent linkage, PQC metadata completeness.
dag_query
Query the KASA DAG for nodes matching criteria. Returns matched nodes with signatures and provenance.
dag_write
Write a manually-specified attested node to the shared KASA DAG. Use for arbitrary compliance events, human approvals, and audit points.
dark_crypto_contribute
Privacy-preserving contribution of anonymized cryptographic inventory to the Global Quantum Exposure Network. Returns aggregate quantum risk ranking.
discover_assets
Inventory environment: OS, runtimes, containers, CI/CD, AI agents, crypto libs, MCP configs. Recommends CMMC level and applicable STIG profiles.
drbc_backup
Create a DRBC genesis backup of the KHEPRA project. AES-256-GCM encrypted, ML-DSA-65 signed.
drbc_restore
Restore the KHEPRA project from a DRBC genesis backup. Requires the same password used during backup.
drift_detect
Detect configuration drift between current state and a signed baseline. Uses the KHEPRA DriftEngine with Adinkra symbol binding.
ea_evolve
Run Evolutionary Algorithm threat evolution. Optimizes for: NIST 800-171 control coverage, PQC readiness, threat posture. Returns the fittest genome with Adinkra symbol binding.
ea_risk_summary
Synthesize EA-driven risk summary: vulnerability exposure, compliance gap, PQC migration cost, blast radius. Same engine as Godfather Report.
ea_threat_score
Calculate a composite threat score for a target using the EA kernel. Returns CVSS-band score, confidence interval, and contributing factors.
enumerate_host
Enumerate host information: OS, kernel, network interfaces, running services, users, installed packages. MITRE ATT&CK T1082.
ert_architect
Package B: Live supply chain risk — Syft SBOM + Grype CVE + CISA KEV/EPSS/MITRE enrichment. Returns findings with NIST 800-171 control mapping.
ert_crypto
Package C: PQC readiness attestation — source-level crypto primitive scan, SBOM crypto library inventory, weak primitive detection (MD5/SHA1/DES/RC4), CNSA 2.0 quantum risk context.
ert_godfather
Package D: EA KernelRouter causal risk attestation. Runs STIG, PQC, SBOM, Network agents in parallel, produces board-level causal chain with CVSS-band dollar impact and DAG-signed evidence node.
ert_readiness
Package A: NIST 800-171 Rev2 compliance assessment + live SCA risk factor. Returns alignment score (0-100), control gaps, and prioritized remediation roadmap.
ert_scan
Run ERT security scan (SBOM, CVE, secrets, STIG, PQC inventory) in Docker sandbox
fim_baseline
Create a file integrity monitoring baseline. Monitors critical paths using SHA-256 hash baselines. Baseline is DAG-attested.
fingerprint_device
Fingerprint a network device: OS detection, service banners, protocol analysis. MITRE ATT&CK T1046.
flight_export
Export a CMMC-aligned evidence packet from the SouHimBou AI flight log. Maps agent actions to NIST 800-171 / CMMC 2.0 controls.
flight_record
Record an agent tool call to the SouHimBou AI Flight Recorder with cryptographic attestation. Creates a cryptographically verifiable audit trail.
forensic_snapshot
Collect a DFIR-grade forensic snapshot: processes, network connections, loaded modules, environment variables. ML-DSA-65 signed, DAG-attested.
godfather_approve
Deliver a staged executive compliance report. Requires the staged_token returned by godfather_report. Single-use — token is consumed on delivery.
godfather_report
Generate an executive compliance report covering CMMC/STIG/NIST frameworks. When approval_required=true, returns a staged token — the full report is held until a human calls godfather_approve (30-min TTL).
ir_add_ioc
Add an Indicator of Compromise to an existing incident. The IOC is ML-DSA-65 signed and DAG-recorded.
ir_incident
Create a new incident in the KHEPRA IR Manager. Every incident is ML-DSA-65 signed at creation and DAG-attested.
kasa_crypto_agent
Run the KASA Crypto Agent: detects tampering via entropy/structural feature analysis, computes a threat level, and auto-quarantines components above the Critical threshold with PQC-sealed forensic snapshots.
kasa_forensics
Trigger an immediate KASA forensic snapshot — processes, network connections, open ports, file hashes — compared against the last snapshot for anomaly detection. DAG-attested under symbol Sankofa.
kasa_scan
Run KASA's port/service scanner against a target, with AI threat analysis. Maps to MITRE ATT&CK T1046. Every finding is DAG-attested with ML-DSA-65.
kasa_start
Start the KASA autonomous security agent. Launches: vulnerability hunting hourly, internal pentest daily (NIST 800-53 CA-8), CMMC compliance audit daily. Every action is DAG-attested.
kasa_status
Check current status of the KASA autonomous agent: uptime, active tasks, threat score, and EA kernel generation.
kasa_task
Inject a security directive into the KASA task queue, bound to an Adinkra symbol (Eban=defense, Sankofa=forensics, OwoForoAdobe=vigilance, Dwennimmen=remediation). Executed within KASA's next cognitive cycle (≤5s).
khepra_export_attestation
Export PQC-signed attestation package covering all active compliance frameworks. C3PAO-ready evidence artifact — ML-DSA-65 signed, DAG-anchored.
khepra_export_poam
Export a DFARS 252.204-7012 POA&M (Plan of Action & Milestones) from the current DAG state. Maps open findings to remediation timelines.
khepra_get_compliance_score
Fast compliance score without full scan. Returns current CMMC/NIST/STIG satisfaction percentages from cached DAG state.
khepra_get_dag_chain
Export the PQC-signed DAG chain for the current session. Returns all DAG nodes with ML-DSA-65 signatures and Adinkra symbol provenance.
khepra_query_stig
Query the embedded STIG/CCI/NIST control database (36,195 mappings). Look up STIG rules, CCI items, NIST 800-53 controls by ID or keyword.
khepra_query_threat_intel
Query embedded CISA KEV + CVE threat intelligence from offline database. Returns relevant CVEs, EPSS scores, MITRE ATT&CK mappings.
khepra_watch
Register a filesystem path for continuous STIG-triggered scanning. Fires ert_scan on file changes.
nhi_excessive
Identify NHIs with overly broad permissions
nhi_expired
List expired or soon-to-expire non-human identities
nhi_inventory
List all non-human identities (service accounts, API keys, certificates)
nhi_orphans
Identify orphaned non-human identities with no active owner
nhi_revoke
Revoke a non-human identity credential
nist_map
Offline semantic search across NIST 800-53 Rev5, NIST 800-171 Rev2, CMMC 2.0, and STIG CCI mappings. BM25 ranked results. Zero token cost, air-gap safe. 36,000+ controls indexed.
ouroboros_fim_eye
Ouroboros FIM Eye — file integrity monitoring status. Returns hash baseline comparison and drift alerts.
ouroboros_stig_eye
Ouroboros STIG Eye — continuous STIG compliance monitoring status. Returns current compliance posture and drift alerts.
ouroboros_vuln_eye
Ouroboros Vuln Eye — continuous vulnerability scanning status. Returns active CVEs, EPSS scores, and remediation priority.
ouroboros_waf_eye
Ouroboros WAF Eye — real-time web application firewall status from the Mitochondrial API Server. Returns blocked requests, threat patterns, and active rules.
owasp_agent_assess
Assess this MCP server deployment against OWASP Agentic Top 10 (ASI01-ASI10). Returns scored findings, active controls, gaps, and ML-DSA-65 signed evidence.
packet_analyze
Analyze a PCAP capture file. Extracts: protocol distribution, suspicious connections, DNS queries, HTTP methods, potential C2 patterns.
port_scan
TCP port scan with service banner grabbing. Identifies open ports and running services. MITRE ATT&CK T1046.
pqc_keygen
Generate a new ML-DSA-65 keypair for agent identity. Returns public key (base64) and key ID. Private key is stored securely.
pqc_sign
Sign arbitrary data with ML-DSA-65. Returns base64-encoded signature and public key ID. Air-gap safe.
pqc_stig
World's First DoD PQC STIG (PQC-01-STIG-V1R1). CNSA 2.0 / FIPS 203/204/205 compliance assessment. Returns per-control findings, compliance score, and ML-DSA-65 signed evidence.
pqc_verify
Verify an ML-DSA-65 signature against data. Returns verification result and signer metadata.
quantum_optimize
Run Ising model quantum-inspired optimization for attack surface analysis. Simulates quantum annealing to find optimal defense configuration.
sbom_generate
Generate a CycloneDX / SPDX SBOM with PQC readiness annotations.
secret_scan
Scan for hardcoded secrets using entropy analysis + pattern matching. Detects: AWS keys, GitHub tokens, private keys, JWT secrets, database passwords.
stig_check
Check a system path or configuration against STIG controls. Default: RHEL-09-STIG-V1R3. Returns CAT I/II/III findings with remediation guidance and compliance score.
threat_lookup
Look up a CVE, IP, or domain against embedded CISA KEV + MITRE ATT&CK databases. Returns CVE details, CVSS/EPSS scores, ATT&CK TTP mapping.
threat_model
Generate a STRIDE threat model with NIST 800-53 + MITRE ATT&CK mappings. 100% offline.
vuln_scan
Scan project for known vulnerabilities in dependencies (Go, NPM, Python). Returns CVE IDs, CVSS scores, affected packages, and fix versions.
BEFORE YOU INSTALL
What to know first
Tools you get
73 tools when we connected. The README counts 76 tools and puts all but pqc_stig and 12 core tools on a paid licence; the free Community tier needs no key.
Requires
Docker
Optional
KHEPRA_LICENSE_KEY in your environment
CONTEXT COST
Moderate Standing cost
Rated by the size of the 73 tool definitions that ride along on every turn, not by how many there are
INSTALLATION
Connect your client
Server setup
TERMINAL
docker pull ghcr.io/nouchix/pqc-khepra-mcp:latestMCP Clients
Claude Desktop, Windsurf
JSON
{
"mcpServers": {
"khepra": {
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"-e",
"KHEPRA_MODE=sovereign",
"-v",
"/var/lib/khepra:/var/lib/khepra",
"ghcr.io/nouchix/pqc-khepra-mcp:latest"
]
}
}
}Claude Desktop — license key
CLAUDE DESKTOP — LICENSE KEY · JSON
{
"mcpServers": {
"khepra": {
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"-e",
"KHEPRA_LICENSE_KEY",
"-e",
"KHEPRA_MODE=sovereign",
"-v",
"/var/lib/khepra:/var/lib/khepra",
"-v",
"/var/log/khepra:/var/log/khepra",
"ghcr.io/nouchix/pqc-khepra-mcp:latest"
],
"env": {
"KHEPRA_LICENSE_KEY": "<YOUR_KHEPRA_LICENSE_KEY>"
}
}
}
}Cursor
CURSOR · JSON
{
"mcpServers": {
"khepra": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"-e",
"KHEPRA_MODE=sovereign",
"-v",
"/var/lib/khepra:/var/lib/khepra",
"ghcr.io/nouchix/pqc-khepra-mcp:latest"
]
}
}
}VS Code
VS CODE · JSON
{
"servers": {
"khepra": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"-e",
"KHEPRA_MODE=sovereign",
"-v",
"${env:HOME}/.khepra:/var/lib/khepra",
"ghcr.io/nouchix/pqc-khepra-mcp:latest"
]
}
}
}Continue
CONTINUE · JSON
{
"experimental": {
"modelContextProtocolServers": [
{
"name": "khepra",
"transport": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"--rm",
"-i",
"-e",
"KHEPRA_MODE=sovereign",
"ghcr.io/nouchix/pqc-khepra-mcp:latest"
]
}
}
]
}
}
