Side-by-side comparison of two Model Context Protocol servers — install paths, tools, quality signals, and directory engagement so you can pick the right one for Claude, Cursor, and other MCP clients.
Post-quantum readiness for AI coding agents: scan code for quantum-vulnerable cryptography (RSA/ECDH/ECDSA/DH), explain the harvest-now-decrypt-later exposure, get NIST ML-KEM/ML-DSA/SLH-DSA (and hybrid) migration guidance, verify fixes, and check dependencies. Content-based/advisory tools only. Run local (npx @quantakrypto/mcp) or the hosted OAuth endpoint at mcp.quantakrypto.com.
vet-mcp checks open source packages—like those suggested by AI coding tools—for vulnerabilities and malicious code. It supports npm and PyPI, and runs locally via Docker or as a standalone binary for fast, automated vetting.
Quality signal
45/100 (Fair)
52/100 (Fair)
Install path
npx · high
Remote · high
Engagement
0 0 0 9
3 0 0 1,096
Tools
Not listed yet
Real-time malicious package detection via SafeDep CloudVulnerability analysis based on dependency usage evidencePolicy-as-code enforcement with CEL expressionsSupports npm, PyPI, Maven, Go, Ruby, Rust, PHP ecosystemsScans container images and SBOMsOutputs actionable reports in multiple formats
