Cloakcheck MCP server
Scan a page for hidden prompt-injection payloads targeting AI agents.
Little public usage data yet
Reviews
Write oneNobody has reviewed Cloakcheck yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Cloakcheck tools (1)
write = sends, deletes, buys or postscheck_page_for_injectionFreeScan a single web page for content planted to hijack an AI agent reading it -- invisible unicode (zero-width chars, the unicode 'tag' block used for steganographic prompt injection), CSS-hidden instruction text, and instruction-shaped language in alt/title/aria-label attributes a human would never read. Does NOT judge whether visible body text is safe -- only content hidden from normal human reading flow is flagged, so a page that legitimately discusses prompt injection won't false-positive on itself. Call this before an autonomous shopping/browsing agent acts on a page's content (add to cart, follow instructions found on the page, etc).
Public scan report
scanner v0.1.5 · 2026-09-19 · same rubric, same numbers if you re-run it
- –Code scanremote-only server, no package to scann/a
- Live reliabilityremote reachable in 407ms20/20
- Tool poisoning1 tool descriptions checked15/15
- Auth qualityopen endpoint, read-only tools10/15
- Maintenanceno repository listed3/15
- Maintainer identityverified namespace with website, no repo4/10
Findings (1)
- lowNo source repository listed
maint.no-repo
Install directly
claude mcp add --transport http cloakcheck https://cloakcheck-wheat.vercel.app/api/mcp
Cloakcheck: common questions
- Is Cloakcheck MCP server safe?
- With care: it is graded C, so read the findings first (69/100). Read the Cloakcheck safety report
- How do I install Cloakcheck?
- It runs remotely at cloakcheck-wheat.vercel.app. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Cloakcheck need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Cloakcheck maintained?
- The latest release is v1.0.0.
- Is Cloakcheck up?
- 100% of our last 3 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Cloakcheck?
- Servers from other publishers that do the same job: prompt-protection MCP server, mcpm MCP server and Agent-Native Analytics MCP server. Compare all Cloakcheck alternatives.
Alternatives to Cloakcheck
Same job from other publishers: the closest match first, then the best rated.
- prompt-protectionScan prompts, tool definitions and model output for injection, and guard agent tool calls.not reviewedGrowingA
- mcpmMCP security guard + package manager: trust-scored installs, blocks prompt injection and rug-pulls.not reviewedGrowingB
- Agent-Native AnalyticsAgent-Native Amplitude/Mixpanel - connect data sources, prompt for chartsnot reviewedEstablishedA
- ImageAI image generation and editing with prompt optimization and quality presetsnot reviewedEstablishedB
- llmtrimMCP server and proxy that compresses LLM prompts, tool output, and replies to cut token cost.not reviewedEstablishedA