KHEPRA MCP Server — Sovereign compliance engine with 36,195 STIG/CCI/NIST/CMMC mappings. Air-gappable. Zero token costs. Flat annual licensing. Run ert_scan → get a Godfather Report with dollar-denominated business impact. The only MCP compliance server that runs on your metal.
Setup
Choose your client, copy the config, then fill in any required environment variables.
claude mcp add pqc-khepra-cmmc-autopilot-ai-security-re --env KHEPRA_LICENSE_KEY='<KHEPRA_LICENSE_KEY>' --env SUPABASE_ANON_KEY='<SUPABASE_ANON_KEY>' -- docker run -i --rm -e KHEPRA_LICENSE_KEY -e SUPABASE_ANON_KEY ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0~/.codex/config.toml
[mcp_servers.pqc-khepra-cmmc-autopilot-ai-security-re]
command = "docker"
args = ["run", "-i", "--rm", "-e", "KHEPRA_LICENSE_KEY", "-e", "SUPABASE_ANON_KEY", "ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0"]
env = { KHEPRA_LICENSE_KEY = "<KHEPRA_LICENSE_KEY>", SUPABASE_ANON_KEY = "<SUPABASE_ANON_KEY>" }
# codex mcp add pqc-khepra-cmmc-autopilot-ai-security-re --env KHEPRA_LICENSE_KEY='<KHEPRA_LICENSE_KEY>' --env SUPABASE_ANON_KEY='<SUPABASE_ANON_KEY>' -- docker run -i --rm -e KHEPRA_LICENSE_KEY -e SUPABASE_ANON_KEY ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0~/.cursor/mcp.json
{
"mcpServers": {
"pqc-khepra-cmmc-autopilot-ai-security-re": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"KHEPRA_LICENSE_KEY",
"-e",
"SUPABASE_ANON_KEY",
"ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0"
],
"env": {
"KHEPRA_LICENSE_KEY": "<KHEPRA_LICENSE_KEY>",
"SUPABASE_ANON_KEY": "<SUPABASE_ANON_KEY>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"pqc-khepra-cmmc-autopilot-ai-security-re": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"KHEPRA_LICENSE_KEY",
"-e",
"SUPABASE_ANON_KEY",
"ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0"
],
"env": {
"KHEPRA_LICENSE_KEY": "<KHEPRA_LICENSE_KEY>",
"SUPABASE_ANON_KEY": "<SUPABASE_ANON_KEY>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"pqc-khepra-cmmc-autopilot-ai-security-re": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"KHEPRA_LICENSE_KEY",
"-e",
"SUPABASE_ANON_KEY",
"ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0"
],
"env": {
"KHEPRA_LICENSE_KEY": "<KHEPRA_LICENSE_KEY>",
"SUPABASE_ANON_KEY": "<SUPABASE_ANON_KEY>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"pqc-khepra-cmmc-autopilot-ai-security-re": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"KHEPRA_LICENSE_KEY",
"-e",
"SUPABASE_ANON_KEY",
"ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0"
],
"env": {
"KHEPRA_LICENSE_KEY": "<KHEPRA_LICENSE_KEY>",
"SUPABASE_ANON_KEY": "<SUPABASE_ANON_KEY>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"pqc-khepra-cmmc-autopilot-ai-security-re": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"KHEPRA_LICENSE_KEY",
"-e",
"SUPABASE_ANON_KEY",
"ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0"
],
"env": {
"KHEPRA_LICENSE_KEY": "<KHEPRA_LICENSE_KEY>",
"SUPABASE_ANON_KEY": "<SUPABASE_ANON_KEY>"
}
}
}
}Environment variables
KHEPRA_LICENSE_KEYSUPABASE_ANON_KEY
Replace the placeholders with your own credentials and keep them out of version control.