HiddenContent
Check a document for hidden text before your agent reads it. PDF, Office, RTF, HTML.
Installation
Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).
claude mcp add --transport http hiddencontent 'https://api.hiddencontent.ai/v1/mcp'
{
"mcpServers": {
"hiddencontent": {
"type": "http",
"url": "https://api.hiddencontent.ai/v1/mcp"
}
}
}
@hiddencontent/mcpclaude mcp add hiddencontent -e 'HCS_API_TOKEN=<your hcs_api_token>' -e 'HCS_URL=<HCS_URL>' -e 'HCS_CAPABILITIES=<HCS_CAPABILITIES>' -- npx -y @hiddencontent/mcp@0.4.15
{
"mcpServers": {
"hiddencontent": {
"command": "npx",
"args": [
"-y",
"@hiddencontent/mcp@0.4.15"
],
"env": {
"HCS_API_TOKEN": "<your hcs_api_token>",
"HCS_URL": "<HCS_URL>",
"HCS_CAPABILITIES": "<HCS_CAPABILITIES>"
}
}
}
}
Variables d'environnement
HCS_API_TOKENobligatoire secret API token for the HiddenContent service. Get one at https://hiddencontent.ai/start?ref=mcp-registry — the server refuses to start without it and says so.HCS_URLBase URL of the service. Defaults to the hosted API; set it only when pointing at a self-hosted instance.HCS_CAPABILITIESComma-separated list of what your agent can actually do. The only accepted values are `tool-use`, `network-egress` and `code-execution`. These turn on the checks for concealed text that instructs a model to call a tool, send data or run code — declaring more can raise severity and never lowers it, and declaring nothing leaves those checks inert. Defaults to `tool-use` in the bundle install.
https://github.com/AeroSpark-ai/hiddencontent-mcp/releases/download/v0.4.15/hiddencontent.mcpbVariables d'environnement
HCS_API_TOKENobligatoire secret API token for the HiddenContent service. Get one at https://hiddencontent.ai/start?ref=mcp-registry — the server refuses to start without it and says so.HCS_URLBase URL of the service. Defaults to the hosted API; set it only when pointing at a self-hosted instance.HCS_CAPABILITIESComma-separated list of what your agent can actually do. The only accepted values are `tool-use`, `network-egress` and `code-execution`. These turn on the checks for concealed text that instructs a model to call a tool, send data or run code — declaring more can raise severity and never lowers it, and declaring nothing leaves those checks inert. Defaults to `tool-use` in the bundle install.
Questions fréquentes
Qu'est-ce que HiddenContent ?
Check a document for hidden text before your agent reads it. PDF, Office, RTF, HTML.
Comment installer HiddenContent ?
Il fonctionne comme serveur distant. Dans Claude Code : claude mcp add --transport http hiddencontent 'https://api.hiddencontent.ai/v1/mcp'. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.
Faut-il une clé API pour HiddenContent ?
Oui. Il attend HCS_API_TOKEN, à renseigner dans sa configuration.
HiddenContent est-il open source ?
Son code est public sur GitHub, mais le dépôt ne déclare pas de licence standard.
Qui maintient HiddenContent ?
Il est publié par AeroSpark-ai. AI.tn le référence sans le maintenir ni le recommander.
Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.