Check a document for hidden text before your agent reads it. PDF, Office, RTF, HTML.
HiddenContent is an MCP integration. Check a document for hidden text before your agent reads it. PDF, Office, RTF, HTML.
The registry lists a streamable-http connection at https://api.hiddencontent.ai/v1/mcp.
The published npm package is @hiddencontent/mcp, version 0.4.15. Its declared MCP transport is stdio.
The package declares HCS_API_TOKEN (required): API token for the HiddenContent service. Get one at https://hiddencontent.ai/start?ref=mcp-registry — the server refuses to start without it and says so.; HCS_URL: Base URL of the service. Defaults to the hosted API; set it only when pointing at a self-hosted instance.; HCS_CAPABILITIES: Comma-separated list of what your agent can actually do. The only accepted values are tool-use, network-egress and code-execution. These turn on the checks for concealed text that instructs a model to call a tool, send data or run code — declaring more can raise severity and never lowers it, and declaring nothing leaves those checks inert. Defaults to tool-use in the bundle install..
The published mcpb package is https://github.com/AeroSpark-ai/hiddencontent-mcp/releases/download/v0.4.15/hiddencontent.mcpb. Its declared MCP transport is stdio.
Check the maintainer’s instructions for account access, authentication and the supported client configuration. Once connected, inspect the tools your client receives and try a small task that matches the server’s stated purpose. The registry description does not include a verified, complete tool list.
View the publisher’s registry entry · Project repository · Project website. This profile uses version 0.4.15 from the registry. Registration identifies the publisher namespace; it does not establish that this is a first-party integration for every service it connects.
Browse related developer tools MCP servers for tools that cover the same kind of work.
| Variable | Description | Required |
|---|---|---|
| HCS_API_TOKEN | API token for the HiddenContent service. Get one at https://hiddencontent.ai/start?ref=mcp-registry — the server refuses to start without it and says so. | Yes |
| HCS_URL | Base URL of the service. Defaults to the hosted API; set it only when pointing at a self-hosted instance. | Optional |
| HCS_CAPABILITIES | Comma-separated list of what your agent can actually do. The only accepted values are tool-use, network-egress and code-execution. These turn on the checks for concealed text that instructs a model to call a tool, send data or run code — declaring more can raise severity and never lowers it, and declaring nothing leaves those checks inert. Defaults to tool-use in the bundle install. | Optional |
Search and read your Drive — Docs, Sheets and files become context your assistant can actually use.
EU-hosted AI platform: OpenAI-compatible LLM gateway, document extraction, transcription, agents.
Paid AI utilities for web comparison, code checks, document extraction, security, and research.
Browse, generate and import Abyssale designs — banners, video, PDF — from your AI client.
MCP server with tools to search, fetch, analyze, and report on scientific papers and datasets.
Autonomous WCAG 2.1 accessibility auditor that scans, fixes, re-verifies, and generates VPAT 2.5 EN 301 549 reports using AI vision analysis + DOM scanning.