Quantum Aether / الأثير الكمومي

Post-quantum TLS security observatory

Quantum Aether measures public TLS connections, reports observed key exchange and certificate evidence, and helps teams track their post-quantum transition. It provides a free scan, documented measurement limits, business monitoring, and agent interfaces through HTTP APIs and remote MCP. A full report can be requested through x402 v2 on Base USDC by compatible agent clients, subject to the buyer wallet's own authorization policy. Direct-transfer and human checkout options remain available where configured.

Live agent endpoints and prices: service discovery, MCP guide, and OpenAPI.

Research archive: quantum experiments and digital DNA

English

The repository also preserves Qiskit Bell/GHZ experiments, a digital A/C/G/T archive with Reed-Solomon error correction, and the original TLS study and scanner research.

العربية

كما يحتفظ المستودع بأبحاث Qiskit لحالات Bell وGHZ، وأرشيف رقمي A/C/G/T مع تصحيح Reed-Solomon، وأبحاث القياس الأصلية.

MCP server (Model Context Protocol)

This repository includes a Model Context Protocol (MCP) server in mcp/, published on PyPI as quantum-aether-mcp and in the official MCP Registry as io.github.moncef00327-cloud/quantum-aether. It lets any MCP client (Claude Desktop, Cursor and others) check a website's post-quantum TLS readiness as a native tool.

Implementation: Python, built on the official MCP Python SDK (mcp, FastMCP), stdio transport. Source: mcp/quantum_aether_mcp/
No API key: it wraps the public Quantum Aether scan API.

Tool	What it does
`scan_tls(domain)`	Scans a host and returns a plain-language summary: post-quantum key exchange yes/no, the "harvest now, decrypt later" risk and the fix.
`scan_tls_raw(domain)`	Structured result: grade, key-exchange group, post-quantum yes/no, certificate, scan_id.
`buy_full_report(scan_id, consent_immediate_delivery)`	Optional: PayPal approval link for the $49 full report. Requires explicit user consent.
`start_monitoring(email, plan, consent)`	Optional: starts paid daily monitoring. Requires explicit user consent.

Install and run:

pip install quantum-aether-mcp   # or: uvx quantum-aether-mcp
quantum-aether-mcp               # starts the MCP server on stdio

Claude Desktop (claude_desktop_config.json):

{
  "mcpServers": {
    "quantum-aether": {
      "command": "uvx",
      "args": ["quantum-aether-mcp"]
    }
  }
}

Details: mcp/README.md

Study: post-quantum TLS on the top 1,000 websites (November 2026)

We scanned the Tranco top 1,000 domains on 2026-11-03. Of the 712 that answered on HTTPS, 425 (59.7%) negotiate the hybrid X25519MLKEM768 key exchange; The original published figures and files are retained. A later raw-evidence audit found 17 retry-only HelloRetryRequest responses; new measurements treat these as undetermined and exclude them from the tracker's support-percentage denominator. Do not interpret every non-PQ row as a confirmed classical negotiation. The study page includes a methodology note.

Results page: https://ather-quantum.com/study/top-1000-post-quantum-tls
Data (CC BY 4.0): data/pq_study_top1000.json, raw per-domain results in data/pq_study_top1000_raw.jsonl
Reproduce: python tools/run_study.py domains.txt results.jsonl (one domain per line)
Weekly tracker: https://ather-quantum.com/adoption re-scans the Tranco top 10,000 (monthly the top 100,000, adoption_job.py monthly) plus watchlists of government, bank and company sites in Germany, Austria and Switzerland every Monday (adoption_job.py, systemd timer quantum_adoption.timer, lists in data/adoption_watchlists.json). Data: /adoption.json and /adoption.csv (CC BY 4.0). Network names: IP-to-ASN data from iptoasn.com (PDDL). Scan policy and opt-out: https://ather-quantum.com/scanning

GitHub Action

Check on every deploy that your site still negotiates post-quantum TLS:

- uses: moncef00327-cloud/pq-tls-action@v1
  with:
    domain: example.com
    require-post-quantum: true

Details: github-action/README.md · GitHub Marketplace

Guides

Scan from the command line

pip install cryptography
python quantum_vuln_scanner.py example.com
curl -X POST https://ather-quantum.com/api/scan -H "Content-Type: application/json" -d '{"domain":"example.com"}'

Files / الملفات

File	Purpose
`quantum_saas_app.py`	Flask web app: scan pages, free API, PayPal checkout, paid report, admin
`quantum_vuln_scanner.py`	The scanner (also a CLI: `python quantum_vuln_scanner.py example.com`)
`mcp/`	MCP server (`quantum-aether-mcp`): tools `scan_tls`, `scan_tls_raw`, `buy_full_report`, `start_monitoring`
`paypal_client.py`, `sales_db.py`, `i18n.py`	PayPal Orders v2 client, SQLite storage, Arabic/English texts
`templates/`, `static/`	Web pages, styles, PayPal button script
`guides.py`	Guide pages (Arabic/English)
`data/`, `tools/run_study.py`	Top-1,000 study data and the script that produced it
`real_quantum.py`	Run GHZ on IBM hardware, or `--fetch JOB_ID` to download an existing job
`ghz_fidelity.py`	GHZ fidelity from stabilizer expectation values (`--noisy`, `--hardware`)
`quantum_teleportation.py`, `aether_decoder.py`	Teleportation protocol and Qiskit bit-order analysis
`run_bell_state.py`, `run_ghz_relay.py`, `bell_state.ipynb`	Simulator demos
`export_quantum_data.py`, `quantum_gui.py`	`quantum_data.csv` (simulator, noise model, hardware) and a Tkinter viewer
`dna_encode.py`, `bio_archive_report.py`	DNA encoding and the report archive (`archive` / `restore` / `verify`)
`save_ibm_account.py`	Save the IBM Quantum token locally without echoing it
`results/`	Recorded experiment results (JSON)
`deploy/`	Server install script, systemd unit, PayPal/admin configuration, nginx example
`tests/`	Unit tests

Run locally / التشغيل المحلي

python -m venv .venv
.venv\Scripts\activate            # Linux/macOS: source .venv/bin/activate
pip install -r requirements.txt -r requirements-quantum.txt
python -m unittest discover -s tests -t .
python quantum_saas_app.py        # http://127.0.0.1:5000

Payments are disabled until PAYPAL_CLIENT_ID and PAYPAL_CLIENT_SECRET are set; the scan itself works without them.

Deploy / النشر

On the server (Ubuntu/Debian, as root), from a copy of this repository:

bash deploy/install.sh           # installs or updates the app, keeps data and settings
bash deploy/configure.sh         # asks for the PayPal secret and admin password (hidden input)

Data lives in /var/lib/quantum_saas, settings in /etc/quantum_saas.env, and the service runs as the unprivileged user quantum behind nginx. install.sh also enables the weekly /adoption scan (quantum_adoption.timer, Mondays 03:30 UTC). To run it right away: systemctl start quantum_adoption.service.

Notes on the science / ملاحظات علمية

96.29% is the GHZ population P(000)+P(111), an upper bound on the fidelity. Use ghz_fidelity.py for the fidelity itself.
The DNA sequence is a digital encoding; nothing was synthesized.
Shor's algorithm breaks RSA and elliptic-curve keys of any size; larger RSA keys do not provide quantum safety. What protects recorded traffic today is a post-quantum key exchange such as X25519MLKEM768.

AI agent discovery and remote MCP

Agent guide: https://ather-quantum.com/agents?lang=en
Service manifest: https://ather-quantum.com/.well-known/agent-service.json
Remote MCP (Streamable HTTP, stateless JSON): https://ather-quantum.com/mcp
Methodology: https://ather-quantum.com/api/v1/agent/methodology
Archived sample: https://ather-quantum.com/api/v1/agent/example

Remote tools: scan_tls, get_tls_evidence, get_methodology, get_example_result, get_service_info. Scan summaries are free and use the existing per-client/global scan limits. Active scans store public results. Read-only tools do not start scans. See the manifest for actual limits and current full-report prices. x402 payments, signed receipts and external marketplace acceptance are not claimed by this release.

quantum-aether

Documentation