KHEPRA MCP Server — Sovereign compliance engine with 36,195 STIG/CCI/NIST/CMMC mappings. Air-gappable. Zero token costs. Flat annual licensing. Run ert_scan → get a Godfather Report with dollar-denominated business impact. The only MCP compliance server that runs on your metal.
接入配置
选择客户端,复制配置,再按项目文档补齐环境变量。
claude mcp add pqc-khepra-cmmc-autopilot-ai-security-re --env KHEPRA_LICENSE_KEY='<KHEPRA_LICENSE_KEY>' --env SUPABASE_ANON_KEY='<SUPABASE_ANON_KEY>' -- docker run -i --rm -e KHEPRA_LICENSE_KEY -e SUPABASE_ANON_KEY ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0~/.codex/config.toml
[mcp_servers.pqc-khepra-cmmc-autopilot-ai-security-re]
command = "docker"
args = ["run", "-i", "--rm", "-e", "KHEPRA_LICENSE_KEY", "-e", "SUPABASE_ANON_KEY", "ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0"]
env = { KHEPRA_LICENSE_KEY = "<KHEPRA_LICENSE_KEY>", SUPABASE_ANON_KEY = "<SUPABASE_ANON_KEY>" }
# codex mcp add pqc-khepra-cmmc-autopilot-ai-security-re --env KHEPRA_LICENSE_KEY='<KHEPRA_LICENSE_KEY>' --env SUPABASE_ANON_KEY='<SUPABASE_ANON_KEY>' -- docker run -i --rm -e KHEPRA_LICENSE_KEY -e SUPABASE_ANON_KEY ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0~/.cursor/mcp.json
{
"mcpServers": {
"pqc-khepra-cmmc-autopilot-ai-security-re": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"KHEPRA_LICENSE_KEY",
"-e",
"SUPABASE_ANON_KEY",
"ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0"
],
"env": {
"KHEPRA_LICENSE_KEY": "<KHEPRA_LICENSE_KEY>",
"SUPABASE_ANON_KEY": "<SUPABASE_ANON_KEY>"
}
}
}
}.vscode/mcp.json
{
"servers": {
"pqc-khepra-cmmc-autopilot-ai-security-re": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"KHEPRA_LICENSE_KEY",
"-e",
"SUPABASE_ANON_KEY",
"ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0"
],
"env": {
"KHEPRA_LICENSE_KEY": "<KHEPRA_LICENSE_KEY>",
"SUPABASE_ANON_KEY": "<SUPABASE_ANON_KEY>"
}
}
}
}~/.gemini/settings.json
{
"mcpServers": {
"pqc-khepra-cmmc-autopilot-ai-security-re": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"KHEPRA_LICENSE_KEY",
"-e",
"SUPABASE_ANON_KEY",
"ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0"
],
"env": {
"KHEPRA_LICENSE_KEY": "<KHEPRA_LICENSE_KEY>",
"SUPABASE_ANON_KEY": "<SUPABASE_ANON_KEY>"
}
}
}
}claude_desktop_config.json
{
"mcpServers": {
"pqc-khepra-cmmc-autopilot-ai-security-re": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"KHEPRA_LICENSE_KEY",
"-e",
"SUPABASE_ANON_KEY",
"ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0"
],
"env": {
"KHEPRA_LICENSE_KEY": "<KHEPRA_LICENSE_KEY>",
"SUPABASE_ANON_KEY": "<SUPABASE_ANON_KEY>"
}
}
}
}.trae/mcp.json
{
"mcpServers": {
"pqc-khepra-cmmc-autopilot-ai-security-re": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"KHEPRA_LICENSE_KEY",
"-e",
"SUPABASE_ANON_KEY",
"ghcr.io/nouchix/pqc-khepra-mcp:v1.0.0"
],
"env": {
"KHEPRA_LICENSE_KEY": "<KHEPRA_LICENSE_KEY>",
"SUPABASE_ANON_KEY": "<SUPABASE_ANON_KEY>"
}
}
}
}需要的环境变量
KHEPRA_LICENSE_KEYSUPABASE_ANON_KEY
把占位值换成你自己的密钥;不要把密钥提交到代码仓库。