HiddenContent MCP Server

by aerospark-aiai.hiddencontent/mcpv0.4.15

Check a document for hidden text before your agent reads it. PDF, Office, RTF, HTML.

Node.jsstdioremoteofficial registry

context tax

queued

security

queued

cold start

queued

freshness

Active12d ago

Install HiddenContent MCP server

claude mcp add aerospark-ai -e HCS_API_TOKEN='<hcs-api-token>' -- npx -y @hiddencontent/mcp

{
  "mcpServers": {
    "aerospark-ai": {
      "command": "npx",
      "args": [
        "-y",
        "@hiddencontent/mcp"
      ],
      "env": {
        "HCS_API_TOKEN": "<hcs-api-token>"
      }
    }
  }
}

Add to ~/.cursor/mcp.json (global) or .cursor/mcp.json (project).

{
  "mcpServers": {
    "aerospark-ai": {
      "command": "npx",
      "args": [
        "-y",
        "@hiddencontent/mcp"
      ],
      "env": {
        "HCS_API_TOKEN": "<hcs-api-token>"
      }
    }
  }
}

Settings → Developer → Edit Config (claude_desktop_config.json), then restart.

{
  "servers": {
    "aerospark-ai": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "@hiddencontent/mcp"
      ],
      "env": {
        "HCS_API_TOKEN": "<hcs-api-token>"
      }
    }
  }
}

Add to .vscode/mcp.json in your workspace.

{
  "mcpServers": {
    "aerospark-ai": {
      "command": "npx",
      "args": [
        "-y",
        "@hiddencontent/mcp"
      ],
      "env": {
        "HCS_API_TOKEN": "<hcs-api-token>"
      }
    }
  }
}

Add to ~/.codeium/windsurf/mcp_config.json.

Configuration

Variable	Required	Secret	Description
HCS_API_TOKEN	yes	yes	API token for the HiddenContent service. Get one at https://hiddencontent.ai/start?ref=mcp-registry — the server refuses to start without it and says so.
HCS_URL	—	—	Base URL of the service. Defaults to the hosted API; set it only when pointing at a self-hosted instance.
HCS_CAPABILITIES	—	—	Comma-separated list of what your agent can actually do. The only accepted values are `tool-use`, `network-egress` and `code-execution`. These turn on the checks for concealed text that instructs a model to call a tool, send data or run code — declaring more can raise severity and never lowers it, and declaring nothing leaves those checks inert. Defaults to `tool-use` in the bundle install.

Remote endpoints

streamable-httphttps://api.hiddencontent.ai/v1/mcp

Freshness

Active — last maintenance signal 12d ago. The newest of the signals below sets the band.

Last commit (default branch)
no data · GitHub
Latest release
no data · GitHub
Package published
no data · npm/PyPI
Registry entry updated
2026-09-27 · 12d ago · official registry · v0.4.15

FAQ

›How do I install the HiddenContent MCP server in Claude Code?

Run: claude mcp add aerospark-ai -e HCS_API_TOKEN='<hcs-api-token>' -- npx -y @hiddencontent/mcp. For Cursor, VS Code, Claude Desktop and Windsurf, use the install tabs above.

›Does HiddenContent require an API key?

Yes. It expects HCS_API_TOKEN, of which 1 is a secret.

›Can I use HiddenContent as a remote (hosted) MCP server?

Yes — it offers both a hosted endpoint and a local stdio package.

›Is HiddenContent in the official MCP registry?

Yes, as ai.hiddencontent/mcp.