HiddenContent

AI Agents npmmcpbStreamable HTTP v0.4.15

Check a document for hidden text before your agent reads it. PDF, Office, RTF, HTML.

View source ↗ Website ↗ Generate config for multiple servers More servers

Install

Pin version registry version 0.4.15

npm
npx -y @hiddencontent/mcp

npm
npx -y @hiddencontent/mcp@0.4.15

mcpb
https://github.com/AeroSpark-ai/hiddencontent-mcp/releases/download/v0.4.15/hiddencontent.mcpb

Streamable HTTP
https://api.hiddencontent.ai/v1/mcp

Setup by client

Pick your client — the config below is generated for this server (both local and hosted-endpoint forms). Copy respects the “Pin version” switch above.

claude_desktop_config.json

{
  "mcpServers": {
    "mcp-86": {
      "command": "npx",
      "args": [
        "-y",
        "@hiddencontent/mcp"
      ],
      "env": {
        "HCS_API_TOKEN": "<YOUR_HCS_API_TOKEN>"
      }
    }
  }
}

{
  "mcpServers": {
    "mcp-86": {
      "command": "npx",
      "args": [
        "-y",
        "@hiddencontent/mcp@0.4.15"
      ],
      "env": {
        "HCS_API_TOKEN": "<YOUR_HCS_API_TOKEN>"
      }
    }
  }
}

Remote (hosted) endpoint

https://api.hiddencontent.ai/v1/mcp

Claude Desktop: Settings → Connectors → Add custom connector, paste this URL.

Format verified against the official Claude Desktop docs ↗.

terminal

claude mcp add --env HCS_API_TOKEN=<YOUR_HCS_API_TOKEN> mcp-86 -- npx -y @hiddencontent/mcp

claude mcp add --env HCS_API_TOKEN=<YOUR_HCS_API_TOKEN> mcp-86 -- npx -y @hiddencontent/mcp@0.4.15

terminal

claude mcp add --transport http mcp-86 https://api.hiddencontent.ai/v1/mcp

Format verified against the official Claude Code docs ↗.

.cursor/mcp.json

{
  "mcpServers": {
    "mcp-86": {
      "command": "npx",
      "args": [
        "-y",
        "@hiddencontent/mcp"
      ],
      "env": {
        "HCS_API_TOKEN": "<YOUR_HCS_API_TOKEN>"
      }
    }
  }
}

{
  "mcpServers": {
    "mcp-86": {
      "command": "npx",
      "args": [
        "-y",
        "@hiddencontent/mcp@0.4.15"
      ],
      "env": {
        "HCS_API_TOKEN": "<YOUR_HCS_API_TOKEN>"
      }
    }
  }
}

.cursor/mcp.json (hosted endpoint)

{
  "mcpServers": {
    "mcp-86": {
      "url": "https://api.hiddencontent.ai/v1/mcp"
    }
  }
}

Format verified against the official Cursor docs ↗.

.vscode/mcp.json

{
  "servers": {
    "mcp-86": {
      "command": "npx",
      "args": [
        "-y",
        "@hiddencontent/mcp"
      ],
      "env": {
        "HCS_API_TOKEN": "<YOUR_HCS_API_TOKEN>"
      }
    }
  }
}

{
  "servers": {
    "mcp-86": {
      "command": "npx",
      "args": [
        "-y",
        "@hiddencontent/mcp@0.4.15"
      ],
      "env": {
        "HCS_API_TOKEN": "<YOUR_HCS_API_TOKEN>"
      }
    }
  }
}

.vscode/mcp.json (hosted endpoint)

{
  "servers": {
    "mcp-86": {
      "type": "http",
      "url": "https://api.hiddencontent.ai/v1/mcp"
    }
  }
}

Format verified against the official VS Code docs ↗.

mcp_config.json

{
  "mcpServers": {
    "mcp-86": {
      "command": "npx",
      "args": [
        "-y",
        "@hiddencontent/mcp"
      ],
      "env": {
        "HCS_API_TOKEN": "<YOUR_HCS_API_TOKEN>"
      }
    }
  }
}

{
  "mcpServers": {
    "mcp-86": {
      "command": "npx",
      "args": [
        "-y",
        "@hiddencontent/mcp@0.4.15"
      ],
      "env": {
        "HCS_API_TOKEN": "<YOUR_HCS_API_TOKEN>"
      }
    }
  }
}

mcp_config.json (hosted endpoint)

{
  "mcpServers": {
    "mcp-86": {
      "serverUrl": "https://api.hiddencontent.ai/v1/mcp"
    }
  }
}

Format verified against the official Windsurf docs ↗.

Environment variables

Defined in the server's official registry manifest. Required secrets are shown as <YOUR_…> placeholders in the configs above.

HCS_API_TOKEN required secret — API token for the HiddenContent service. Get one at https://hiddencontent.ai/start?ref=mcp-registry — the server refuses to start without it and says so.
HCS_URL — Base URL of the service. Defaults to the hosted API; set it only when pointing at a self-hosted instance.
HCS_CAPABILITIES — Comma-separated list of what your agent can actually do. The only accepted values are `tool-use`, `network-egress` and `code-execution`. These turn on the checks for concealed text that instructs a model to call a tool,

About this server

Distributed as npm, mcpb, Streamable HTTP, listed under AI Agents. Review our MCP security guide before granting access to real data.

Frequently asked questions

How do I install HiddenContent?

Run the install command shown above, then paste the config for your client (Claude Desktop, Claude Code, Cursor, VS Code or Windsurf) into its MCP settings and restart the client.

Is HiddenContent free to use?

The MCP server itself is free to install. The source is public on https://github.com/AeroSpark-ai/hidden-content-service. Any third-party service it calls may require its own API key and account.

Which clients support HiddenContent?

Any MCP-compatible client can use it, including Claude Desktop, Claude Code, Cursor, VS Code, Windsurf and custom agents.

Add this badge

Publish this server? Link back with a badge on your README or site — copy either snippet.

Markdown

[![Listed on MCPNav](https://mcpnav.net/badge/mcp-86.svg)](https://mcpnav.net/server/mcp-86/)

HTML

<a href="https://mcpnav.net/server/mcp-86/"><img src="https://mcpnav.net/badge/mcp-86.svg" alt="Listed on MCPNav" height="20"></a>