HiddenContent MCP server

by hiddencontent.ai·ai.hiddencontent/mcp·v0.4.14

No reviews yet

Check a document for hidden text before your agent reads it. PDF, Office, RTF, HTML.

B79/100grade B

Write a review Run it

What users say

No reviews yet

Be the first

Safety scan

B79/100

full report

Adoption

New

71 downloads/wk

Reviews

Write one

Nobody has reviewed HiddenContent yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

HiddenContent tools

Tool list not cached yet. `describe` through the gateway fetches it live.

Public scan report

scanner v0.1.9 · 2026-09-20 · same rubric, same numbers if you re-run it

no findings

Code scan16 source files scanned25/25
Live reliabilityremote reachable in 219ms (auth required)20/20
–Tool poisoningtools not inspected (endpoint requires auth); not countedn/a
Auth qualityOAuth resource metadata advertised on 40115/15
Maintenancerepository not readable: repo not found3/15
Maintainer identityverified namespace with website, no repo4/10

Overall 79/100. Components that don't apply are left out of the denominator. Any critical finding is an F.Rubric Appeal a finding JSON

Install directly

claude mcp add --transport http mcp https://api.hiddencontent.ai/v1/mcp

Add to Cursor

HiddenContent: common questions

Is HiddenContent MCP server safe?: Mostly: it is graded B (79/100). Read the HiddenContent safety report
How do I install HiddenContent?: It runs remotely at api.hiddencontent.ai. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
Does HiddenContent need an API key?: No key to paste: it signs you in with OAuth when your client connects.
Is HiddenContent maintained?: The latest release is v0.4.14.
Is HiddenContent up?: 100% of our last 6 checks got an answer. We check remote servers about four times a day.
What can I use instead of HiddenContent?: Servers from other publishers that do the same job: Agent Wormhole MCP server, AgentMD MCP server and MCP server. Compare all HiddenContent alternatives.

Alternatives to HiddenContent

Same job from other publishers: the closest match first, then the best rated.

All HiddenContent alternatives →

Agent Wormhole
Check tokens, pages and x402 payments before your agent trusts them. Offline verdicts.
not reviewed
Growing
B
AgentMD
Convert PDF, DOCX, HTML, and URLs to clean, LLM-ready markdown with tables preserved
not reviewed
Growing
A
MCP
Authorize consequential AI agent actions before execution
not reviewed
Established
A
PDF
Agentic RAG over one PDF or a whole folder: hybrid search, selective page reads, tables, OCR.
not reviewed
Established
A
haiku.rag
Local-first agentic RAG with citations - hybrid search, reranking, multimodal document retrieval
not reviewed
Established
A

HiddenContent vs Agent Wormhole HiddenContent vs AgentMD HiddenContent vs MCP

Run it through the gateway

With the gateway added, ask your agent for it by name:

agent prompt

call ai.hiddencontent/mcp → <tool>

Free per call. Metered, capped by your key, logged for reliability.

Add the gateway (gw.mcp.market)

Rating: —
Safety grade: B · 79/100
Stars: –
Downloads/wk: 71
Price: Free
Licence: MIT
Transport: Remote · mixed
Uptime: 100% · 6/6 checks
Version: 0.4.14
Category: AI and agents
Last release: —

Credentials it needs

HCS_API_TOKENsecretAPI token for the HiddenContent service. Get one at https://hiddencontent.ai/start?ref=mcp-registry — the server refuses to start without it and says so.
HCS_URLBase URL of the service. Defaults to the hosted API; set it only when pointing at a self-hosted instance.
HCS_CAPABILITIESComma-separated list of what your agent can actually do. The only accepted values are `tool-use`, `network-egress` and `code-execution`. These turn on the checks for concealed text that instructs a model to call a tool, send data or run code — declaring more can raise severity and never lowers it, and declaring nothing leaves those checks inert. Defaults to `tool-use` in the bundle install.
HCS_API_TOKENsecretAPI token for the HiddenContent service. Get one at https://hiddencontent.ai/start?ref=mcp-registry — the server refuses to start without it and says so.
HCS_URLBase URL of the service. Defaults to the hosted API; set it only when pointing at a self-hosted instance.
HCS_CAPABILITIESComma-separated list of what your agent can actually do. The only accepted values are `tool-use`, `network-egress` and `code-execution`. These turn on the checks for concealed text that instructs a model to call a tool, send data or run code — declaring more can raise severity and never lowers it, and declaring nothing leaves those checks inert. Defaults to `tool-use` in the bundle install.

Endpoint

https://api.hiddencontent.ai/v1/mcp

streamable-http

Own this server?

Claim it to keep the listing current and reply to reviews. Claiming never changes the grade or hides a review.

Claim listing

Badge for your README

Shows the safety grade and links back to this page. It updates itself after every scan and review.

[![mcp.market](https://mcp.market/badge/hiddencontent-mcp.svg)](https://mcp.market/server/hiddencontent-mcp)

How the badge works