Quantum Aether
Check a website's post-quantum TLS readiness (ML-KEM key exchange, certificate, grade)
Install
Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).
quantum-aether-mcpclaude mcp add quantum-aether -- uvx quantum-aether-mcp==1.0.1
{
"mcpServers": {
"quantum-aether": {
"command": "uvx",
"args": [
"quantum-aether-mcp==1.0.1"
]
}
}
}
Documentation
From the project's README on GitHub, refreshed weekly. Links open on GitHub.
Contents
- Quantum Aether / الأثير الكمومي
- Quantum experiments · Digital DNA archive · Post-quantum TLS scanner
- Study: post-quantum TLS on the top 1,000 websites (November 2026)
- GitHub Action
- Guides
- Scan from the command line
- Files / الملفات
- Run locally / التشغيل المحلي
- Deploy / النشر
- Notes on the science / ملاحظات علمية
Quantum Aether / الأثير الكمومي
Quantum experiments · Digital DNA archive · Post-quantum TLS scanner
English
Three parts in one project:
- Quantum experiments with Qiskit: Bell and GHZ states, teleportation, a GHZ run on IBM's ibm_marrakesh processor, and a script that measures the real GHZ fidelity.
- Digital DNA archive: text is encoded into A/C/G/T with Reed-Solomon error correction and restores byte for byte.
- Post-quantum TLS scanner (web service at ather-quatum.cloud): checks whether a website negotiates the hybrid post-quantum key exchange X25519MLKEM768 and analyzes its certificate. Free summary; $49 full report through PayPal.
العربية
ثلاثة أجزاء في مشروع واحد:
- تجارب كمومية بـ Qiskit: حالات Bell وGHZ، ونقل الحالة الكمومية، وتشغيل GHZ على معالج IBM الحقيقي ibm_marrakesh، وسكربت لقياس الدقة الفعلية لحالة GHZ.
- أرشيف DNA رقمي: ترميز النص إلى A/C/G/T مع تصحيح أخطاء Reed-Solomon، ويُسترجع حرفاً بحرف.
- ماسح جاهزية TLS لما بعد الكم (خدمة ويب على ather-quatum.cloud): يفحص هل يستخدم الموقع تبادل المفاتيح الهجين X25519MLKEM768 ويحلل شهادته. ملخص مجاني وتقرير كامل بـ 49$ عبر PayPal.
Study: post-quantum TLS on the top 1,000 websites (November 2026)
We scanned the Tranco top 1,000 domains on 2026-11-03. Of the 712 that answered on HTTPS, 425 (59.7%) negotiate the hybrid X25519MLKEM768 key exchange; the rest still use classical X25519 or ECDHE only (among them amazon.com, github.com, wikipedia.org, netflix.com and bing.com).
- Results page: https://ather-quatum.cloud/study/top-1000-post-quantum-tls
- Data (CC BY 4.0):
data/pq_study_top1000.json, raw per-domain results indata/pq_study_top1000_raw.jsonl - Reproduce:
python tools/run_study.py domains.txt results.jsonl(one domain per line) - Weekly tracker: https://ather-quatum.cloud/adoption re-scans the Tranco top 10,000 (monthly the top 100,000,
adoption_job.py monthly) plus watchlists of government, bank and company sites in Germany, Austria and Switzerland every Monday (adoption_job.py, systemd timerquantum_adoption.timer, lists indata/adoption_watchlists.json). Data:/adoption.jsonand/adoption.csv(CC BY 4.0). Network names: IP-to-ASN data from iptoasn.com (PDDL). Scan policy and opt-out: https://ather-quatum.cloud/scanning
GitHub Action
Check on every deploy that your site still negotiates post-quantum TLS:
- uses: moncef00327-cloud/pq-tls-action@v1
with:
domain: example.com
require-post-quantum: true
Details: github-action/README.md · GitHub Marketplace
Guides
- Enable X25519MLKEM768 on nginx
- Post-quantum TLS on Apache, Caddy, HAProxy and Cloudflare
- Harvest now, decrypt later: why key exchange comes first
Scan from the command line
pip install cryptography
python quantum_vuln_scanner.py example.com
curl -X POST https://ather-quatum.cloud/api/scan -H "Content-Type: application/json" -d '{"domain":"example.com"}'
Files / الملفات
| File | Purpose |
|---|---|
quantum_saas_app.py | Flask web app: scan pages, free API, PayPal checkout, paid report, admin |
quantum_vuln_scanner.py | The scanner (also a CLI: python quantum_vuln_scanner.py example.com) |
paypal_client.py, sales_db.py, i18n.py | PayPal Orders v2 client, SQLite storage, Arabic/English texts |
templates/, static/ | Web pages, styles, PayPal button script |
guides.py | Guide pages (Arabic/English) |
data/, tools/run_study.py | Top-1,000 study data and the script that produced it |
real_quantum.py | Run GHZ on IBM hardware, or --fetch JOB_ID to download an existing job |
ghz_fidelity.py | GHZ fidelity from stabilizer expectation values (--noisy, --hardware) |
quantum_teleportation.py, aether_decoder.py | Teleportation protocol and Qiskit bit-order analysis |
run_bell_state.py, run_ghz_relay.py, bell_state.ipynb | Simulator demos |
export_quantum_data.py, quantum_gui.py | quantum_data.csv (simulator, noise model, hardware) and a Tkinter viewer |
dna_encode.py, bio_archive_report.py | DNA encoding and the report archive (archive / restore / verify) |
save_ibm_account.py | Save the IBM Quantum token locally without echoing it |
results/ | Recorded experiment results (JSON) |
deploy/ | Server install script, systemd unit, PayPal/admin configuration, nginx example |
tests/ | Unit tests |
Run locally / التشغيل المحلي
python -m venv .venv
.venv\Scripts\activate # Linux/macOS: source .venv/bin/activate
pip install -r requirements.txt -r requirements-quantum.txt
python -m unittest discover -s tests -t .
python quantum_saas_app.py # http://127.0.0.1:5000
Payments are disabled until PAYPAL_CLIENT_ID and PAYPAL_CLIENT_SECRET are set; the scan itself works without them.
Deploy / النشر
On the server (Ubuntu/Debian, as root), from a copy of this repository:
bash deploy/install.sh # installs or updates the app, keeps data and settings
bash deploy/configure.sh # asks for the PayPal secret and admin password (hidden input)
Data lives in /var/lib/quantum_saas, settings in /etc/quantum_saas.env, and the service runs as the unprivileged user quantum behind nginx.
install.sh also enables the weekly /adoption scan (quantum_adoption.timer, Mondays 03:30 UTC). To run it right away: systemctl start quantum_adoption.service.
Notes on the science / ملاحظات علمية
- 96.29% is the GHZ population P(000)+P(111), an upper bound on the fidelity. Use
ghz_fidelity.pyfor the fidelity itself. - The DNA sequence is a digital encoding; nothing was synthesized.
- Shor's algorithm breaks RSA and elliptic-curve keys of any size; larger RSA keys do not provide quantum safety. What protects recorded traffic today is a post-quantum key exchange such as X25519MLKEM768.
Frequently asked questions
What is Quantum Aether?
Check a website's post-quantum TLS readiness (ML-KEM key exchange, certificate, grade)
How do I install Quantum Aether?
It runs on your machine. In Claude Code: claude mcp add quantum-aether -- uvx quantum-aether-mcp==1.0.1. For other clients, paste the JSON configuration from this page into their MCP settings.
Does Quantum Aether need an API key?
Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.
Is Quantum Aether open source?
Its code is public on GitHub, but the repository does not declare a standard license.
Who maintains Quantum Aether?
It is published by moncef00327-cloud. AI.tn lists it but does not maintain or endorse it.
From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.