Qector Claude Plugin MCP Server

QECTOR Claude Plugin 2.0.1

Air-gapped, schema-validated, audited quantum error correction for Claude Code and Claude Desktop, built on qector-decoder-v3==1.0.1.

Every correction returned by an MCP tool is checked against the parity relation H c = s (mod 2) before it leaves the process. Every request is validated against a JSON Schema 2020-12 input schema before any decoder code runs, and every response is validated against the tool's advertised output schema before it is written. The default server opens no listening socket, launches no process, verifies its own files at startup, and can keep a hash-chained audit log.

1 secure MCP server (12 tools default, 41 in research profile) · 3 standalone servers · 11 commands · 5 agents · 28 skills · contract 2.0 · mcp 1.30+ and 2.x · Python 3.10–3.13 · air-gapped by default

Why 2.0.0

The 1.0.x line made claims its process could not enforce. 2.0.0 turns those claims into mechanisms and states what remains:

Installation

Claude Code

claude plugin marketplace add GuillaumeLessard/qector-claude-plugin
claude plugin install qector@qector-tools

The plugin registers qector-secure (mcp/mcp_server_secure.py --profile safe, QECTOR_AIR_GAPPED=1). Interpreter resolution goes through scripts/qector-python (QECTOR_PYTHON → python3.13…python3.10 → python3 → python → well-known Homebrew / python.org / pyenv locations, 3.10–3.13), a POSIX sh script.

Windows (Claude Code): a plugin manifest has one command for every platform and a sh script is not a Win32 executable, so on native Windows the plugin's server starts only where sh is on PATH (Git for Windows with "Unix tools" selected, or WSL). Otherwise register the server once by hand with the Windows launcher, which also serves the hooks:

claude mcp add qector-secure -e QECTOR_AIR_GAPPED=1 -e QECTOR_INTEGRITY_STRICT=1 -e QECTOR_SILENT=1 -- cmd /c "<plugin root>\scripts\qector-python.cmd" "<plugin root>\mcp\mcp_server_secure.py" --profile safe

The Claude Desktop extension does not have this limitation: its manifest carries a win32 override that launches scripts/qector-python.ps1 through powershell.exe.

The hooks (hooks/hooks.json) run in shell form, which Claude Code executes with Git Bash on Windows; without Git for Windows they report an error on each session start and the (optional) usage log is not written. The server itself is unaffected.

Claude Desktop

Install qector-claude-desktop-2.0.1.mcpb (Settings → Extensions → Advanced → Install Extension). The bundle runs the same secure server in strict-integrity mode; the optional Audit log directory setting enables the hash-chained log. A platform-specific bundle with the runtime vendored into server/lib can be built with scripts/build_release.py --desktop --bundle-lib <wheelhouse>.

Air-gapped laboratory

See AIRGAP.md: build a wheelhouse on a connected host (scripts/build_wheelhouse.py), carry it with SHA256SUMS, run scripts/install_offline.sh / .ps1 on the lab machine, and apply a host egress rule.

From source

git clone https://github.com/GuillaumeLessard/qector-claude-plugin.git
cd qector-claude-plugin
python -m pip install -r requirements.lock      # exact tested closure (Python 3.10-3.13)
QECTOR_SILENT=1 python scripts/qector_runtime_check.py

The tool surface

Control-plane tools of the secure server: airgap_status, integrity_check, schema_catalog, audit_log_status. Full contract in MCP_API.md; every schema in schemas/.

Verification gates

python scripts/release_validate.py                 # manifests, pins, disclosures
python scripts/validate_source.py                  # tree shape
python scripts/export_schemas.py --check           # schemas/ in sync with the servers
python scripts/generate_integrity_manifest.py --check
QECTOR_SILENT=1 python -m unittest discover -s tests -v   # unit, contract and live stdio conformance tests
python mcp/tests/test_mcp_stdio.py                 # 5 servers over real stdio
ruff check .
python scripts/build_release.py --all --signing-key <pem> && python scripts/validate_plugin_bundle.py
python scripts/sign_release.py --verify dist --pubkey <published key>     # see SECURITY.md

CI runs the suite on Python 3.10–3.13 against both mcp 1.x (patched) and mcp 2.x.

System requirements

Security and privacy

SECURITY.md (trust boundaries, tool classification, startup gates, the wheel's native network surface), THREAT_MODEL.md (assets, actors, controls, residual risks), PRIVACY.md, AIRGAP.md. Vulnerability reports: admin@qector.store.

Documentation

License

Proprietary. Copyright © 2026 Guillaume Lessard / iD01t Productions. See LICENSE.md. The qector-decoder-v3 backend is free for personal, academic, educational and non-commercial research; commercial use requires a licence from qector.store/pricing.

Website https://www.qector.store · Licensing, support and security disclosure admin@qector.store