Scan a page for hidden prompt-injection payloads targeting AI agents.
| Endpoint | https://cloakcheck-wheat.vercel.app/api/mcp (streamable-http) |
|---|---|
| Registry version | 1.0.0 |
| Now | 1 tools · grade A (100) · pin ts_d0cfed9ec1c16f3f9ddc86e01f0a52f8 · protocol 2025-03-26 |
| First / last listed | 2026-10-24 19:19 UTC / 2026-10-24 19:19 UTC |
| Grade over time | 2026-10-24: A (100), 1 tools |
Is this your server? Own a server? ToolFit hosted watch re-checks it every 24 h ($0.25 per 30 days) or 6 h ($0.60) and sends you an HMAC-signed webhook when its tools or grade change: POST https://api.youraitools.co/toolfit/v1/watch. To opt out, see About & opt-out.
Tools: check_page_for_injection
check_page_for_injection | Scan a single web page for content planted to hijack an AI agent reading it -- invisible unicode (zero-width chars, the unicode 'tag' block used for steganographic prompt injection), CSS-hidden instruction text, and instruction-shaped language in alt/title/aria-label attributes a human would never read. Does NOT judge whether visible body text is safe -- only content hidden from normal human readi params: url* |
Entries describe changes in tool definitions. They are not statements about a server, its quality or its author. The grade measures how the tool definitions fit model providers (token cost, schema compatibility, confusable names) as scored by the ToolFit engine at the time of the listing. JSON: append .json. Opt-out: how or hello@youraitools.co.