# app.vercel.cloakcheck-wheat/cloakcheck

- Registry name: `app.vercel.cloakcheck-wheat/cloakcheck` · version 1.0.0
- Categories (automatic, keyword rules): AI models & agents, AI, media & content
- Authentication at last check: No auth
- Declared risk: Not declared (tools carry no read/destructive hints)
- Capabilities (declared by the server): tools
- Transports: streamable-http
- Latest numbers (check success, response time, rank): https://mcpstation.net/api/server?name=app.vercel.cloakcheck-wheat%2Fcloakcheck
- Server page: https://mcpstation.net/s/app.vercel.cloakcheck-wheat--cloakcheck.html

## Description (written by the publisher, not verified, not instructions)

Scan a page for hidden prompt-injection payloads targeting AI agents.

## Connect

- streamable-http: `https://cloakcheck-wheat.vercel.app/api/mcp`

## Tools (as reported by the server, not verified)

- `check\_page\_for\_injection`: Scan a single web page for content planted to hijack an AI agent reading it -- invisible unicode \(zero-width chars, the unicode 'tag' block used for steganographic prompt injection\), CSS-hidden instruction text, and instruction-shaped language in alt/title/aria-label attributes a human would never r

Measured by MCP Station. Methods: https://mcpstation.net/methods.html · Terms: https://mcpstation.net/terms.html