Cloakcheck is answering right now. Last checked 14 min ago. It exposes 1 tools.
Scan a page for hidden prompt-injection payloads targeting AI agents.
Over the last week it answered 89.5% of our checks. We check every 15 minutes, so you hear about the next outage within the hour — not from your users.
Endpoint below is the one we actually reach during checks — not the one copied from a README. Last verified 14 min ago.
claude mcp add cloakcheck --transport http https://cloakcheck-wheat.vercel.app/api/mcp
https://cloakcheck-wheat.vercel.app/api/mcp
[mcp_servers.cloakcheck]
url = "https://cloakcheck-wheat.vercel.app/api/mcp"
{
"mcpServers": {
"cloakcheck": {
"url": "https://cloakcheck-wheat.vercel.app/api/mcp"
}
}
}
{
"servers": {
"cloakcheck": {
"type": "http",
"url": "https://cloakcheck-wheat.vercel.app/api/mcp"
}
}
}
Read directly from the server with tools/list, grouped by what they act on.
If a tool disappears, we record the date.
check_page_for_injection
| URL | Transport | State | Latency | Checked |
|---|---|---|---|---|
| https://cloakcheck-wheat.vercel.app/api/mcp | streamable-http | answering | 199 ms | 14 min ago |
Scan any public URL for hidden instructions aimed at AI agents (prompt injection). Free, no auth.
Scan what AI agents read for prompt injection: hidden unicode, comment instructions, exfil, lures.
Prompt-injection firewall for AI agents — scan untrusted text before LLM calls.
Email safety for AI agents: scan inbound for prompt-injection/phishing + outbound for secret leaks.
Scan AI agent skills and configs for hidden Unicode, prompt injection and exfiltration.
Scans untrusted web pages, emails, MCP responses, or A2A payloads for hidden prompt injections an.
HSM-backed vault secrets for AI agents (JIT fetch) plus prompt-injection and threat scanning.
Prompt-injection scanner for agents: risk score, categories and spans for text, pages, MCP tools
Answers built from our own checks of this server.