Mmcp.market

Cloakcheck MCP server

by cloakcheck-wheat.vercel.app·app.vercel.cloakcheck-wheat/cloakcheck·v1.0.0

Scan a page for hidden prompt-injection payloads targeting AI agents.

C69/100grade C
What users say
No reviews yet
Be the first
Safety scan
C69/100

full report

Adoption
New

Little public usage data yet

Reviews

Write one

Nobody has reviewed Cloakcheck yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Cloakcheck tools (1)

write = sends, deletes, buys or posts
  • check_page_for_injectionFree

    Scan a single web page for content planted to hijack an AI agent reading it -- invisible unicode (zero-width chars, the unicode 'tag' block used for steganographic prompt injection), CSS-hidden instruction text, and instruction-shaped language in alt/title/aria-label attributes a human would never read. Does NOT judge whether visible body text is safe -- only content hidden from normal human reading flow is flagged, so a page that legitimately discusses prompt injection won't false-positive on itself. Call this before an autonomous shopping/browsing agent acts on a page's content (add to cart, follow instructions found on the page, etc).

Public scan report

scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it

1 low
  • Code scanremote-only server, no package to scann/a
  • Live reliabilityremote reachable in 407ms20/20
  • Tool poisoning1 tool descriptions checked15/15
  • Auth qualityopen endpoint, read-only tools10/15
  • Maintenanceno repository listed3/15
  • Maintainer identityverified namespace with website, no repo4/10

Findings (1)

  • lowNo source repository listedmaint.no-repo
Overall 69/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

Install directly

claude mcp add --transport http cloakcheck https://cloakcheck-wheat.vercel.app/api/mcp
Add to Cursor

Cloakcheck: common questions

Is Cloakcheck MCP server safe?
With care: it is graded C, so read the findings first (69/100). Read the Cloakcheck safety report
How do I install Cloakcheck?
It runs remotely at cloakcheck-wheat.vercel.app. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Cloakcheck need an API key?
Not as far as the registry entry and our scan can tell: no credentials are declared or required.
Is Cloakcheck maintained?
The latest release is v1.0.0.
Is Cloakcheck up?
100% of our last 3 checks got an answer. We check remote servers about four times a day.
What can I use instead of Cloakcheck?
Servers from other publishers that do the same job: prompt-protection MCP server, mcpm MCP server and Agent-Native Analytics MCP server. Compare all Cloakcheck alternatives.

Alternatives to Cloakcheck

Same job from other publishers: the closest match first, then the best rated.

All Cloakcheck alternatives →
  • prompt-protection
    Scan prompts, tool definitions and model output for injection, and guard agent tool calls.
    A
  • mcpm
    MCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.
    B
  • Agent-Native Analytics
    Agent-Native Amplitude/Mixpanel - connect data sources, prompt for charts
    A
  • Image
    AI image generation and editing with prompt optimization and quality presets
    B
  • llmtrim
    MCP server and proxy that compresses LLM prompts, tool output, and replies to cut token cost.
    A

More from cloakcheck-wheat.vercel.app