Cloaked Agent runs on your own machine — the client starts it, so there is no endpoint to ping. 47 installs a week from npm. Last commit 5 Mar 2026.
Trustless spending accounts for AI agents on Solana with on-chain enforced limits.
What the code does
We read the source, 5 d ago · rules 995398eba69f
What this server is able to do. For an MCP server this is often the job itself — a terminal server runs commands because that is what it is for. Listed so you know what you are plugging in, not as an accusation.
…"},{"name":"commitment","type":{"kind":"field"},"visibility":"public"}],"return_type":null,"error_types":{}},"bytecode":"H4sIAAAAAAAA/719eTxW3df3ucwzRYjMmUOICElEZSxSGSINKElJiUpCSUVlSlKkSESDKIpKqRCKBipDIUUyFFHyvl3v+T3vvq/n+Ty7Jec+/9z3H+vs73evtb5rr3327kIj/t/DQv5302pvX1cmgrClEf/1/Od…
RUN curl -L https://raw.githubusercontent.com/noir-lang/noirup/main/install | bash
Is this your server and something here is wrong? Tell us — corrections are free and do not require a plan.
This code can reach further than it looks
We found places where it runs commands, builds paths or queries from values it is given. None of that is a flaw by itself — it becomes one when the code changes, and code changes quietly between releases. We re-read it on every one.
Connect this server
This server runs on your own machine — install it with the package manager and the client starts it for you. Package name taken from the official registry entry.
claude mcp add cloaked -e 'CLOAKED_AGENT_KEY=<CLOAKED_AGENT_KEY>' -- npx -y @cloakedagent/sdk{
"mcpServers": {
"cloaked": {
"command": "npx",
"args": [
"-y",
"@cloakedagent/sdk"
],
"env": {
"CLOAKED_AGENT_KEY": "<CLOAKED_AGENT_KEY>"
}
}
}
}[mcp_servers.cloaked]
command = "npx"
args = ["-y", "@cloakedagent/sdk"]
env = { CLOAKED_AGENT_KEY = "<CLOAKED_AGENT_KEY>" }{
"mcpServers": {
"cloaked": {
"command": "npx",
"args": [
"-y",
"@cloakedagent/sdk"
],
"env": {
"CLOAKED_AGENT_KEY": "<CLOAKED_AGENT_KEY>"
}
}
}
}{
"servers": {
"cloaked": {
"type": "stdio",
"command": "npx",
"args": [
"-y",
"@cloakedagent/sdk"
],
"env": {
"CLOAKED_AGENT_KEY": "<CLOAKED_AGENT_KEY>"
}
}
}
}Put your own value in place of
<CLOAKED_AGENT_KEY> (Base58 encoded Cloaked Agent private key).
The author’s registry entry marks it as required.
Optional settings from the registry entry, left out of the block above:
CLOAKED_BACKEND_URL (Backend relay URL (default: https://api.cloakedagent.com)), SOLANA_RPC_URL (Solana RPC endpoint URL (default: https://api.devnet.solana.com)).
Alternatives to Cloaked Agent
same job, measured the same wayWallet for AI agents with on-chain spending limits and owner approval over the limit
Hire AI agents with trustless USDC escrow on Solana from your AI assistant.
Give an AI agent a Solana spending allowance instead of your key. Chain-enforced cap, x402.
Read and post to The Agent Billboard on Solana, with spend limits in code and a reasoning log.
Non-custodial Solana swap & limit order engine for AI agents.
Non-custodial Solana swap & limit order engine for AI agents.
Non-custodial limit, stop-loss and DCA trading on Epsilon (Robinhood Chain) for AI agents
Non-custodial USDC wallet on Base with spending limits enforced in code, not in a prompt.
Cloaked Agent — questions
Answers built from our own checks of this server.