# Cloaked Agent

> Trustless spending accounts for AI agents on Solana with on-chain enforced limits.

- **Type:** MCP server
- **Install:** `agentstack add mcp-cloakedagent-cloaked`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [CloakedAgent](https://agentstack.voostack.com/s/cloakedagent)
- **Installs:** 0
- **Category:** [Integrations](https://agentstack.voostack.com/c/integrations)
- **Latest version:** 0.1.3
- **License:** MIT
- **Upstream author:** [CloakedAgent](https://github.com/CloakedAgent)
- **Source:** https://github.com/CloakedAgent/cloaked
- **Website:** https://cloakedagent.com

## Install

```sh
agentstack add mcp-cloakedagent-cloaked
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Cloaked

**Trustless spending accounts for AI agents on Solana**

[](https://www.npmjs.com/package/@cloakedagent/sdk)
[](LICENSE)

[cloakedagent.com](https://cloakedagent.com)

---

## The Problem

AI agents need to spend money autonomously. But giving them wallet access is dangerous:

- **Jailbroken agent?** Drains your wallet
- **Bug in agent code?** Infinite spending loop
- **Prompt injection?** Attacker controls your funds

Agent-side limits don't work - the agent has the keys and can bypass its own rules.

## The Solution

**On-chain enforced constraints that agents literally cannot bypass.**

```
┌─────────────────────────────────────────────────────────────────┐
│                      CLOAKED AGENT                              │
├─────────────────────────────────────────────────────────────────┤
│  Owner: Human wallet (full control)                             │
│  Delegate: AI agent key (can spend within limits)               │
│                                                                 │
│  Constraints (enforced by Solana program):                      │
│  ├── max_per_tx: 0.1 SOL                                        │
│  ├── daily_limit: 1 SOL                                         │
│  ├── total_limit: 10 SOL                                        │
│  ├── expires_at: 2026-02-15                                     │
│  └── token_limits:                                              │
│       └── USDC: 5/tx, 50/day, 500 total                        │
│                                                                 │
│  Even if jailbroken, agent CANNOT exceed these limits.          │
└─────────────────────────────────────────────────────────────────┘
```

---

## Privacy Architecture

Cloaked offers **dual-mode privacy**:

### Standard Mode
- Owner wallet linked to agent on-chain
- Simple setup, lower fees

### Private Mode (ZK)
- **Zero-knowledge proofs** hide wallet-agent link
- Owner proves ownership without revealing identity
- Funded anonymously via **[Privacy Cash](https://privacycash.org)**

```
┌─────────────────────────────────────────────────────────────────┐
│                    PRIVACY STACK                                │
├─────────────────────────────────────────────────────────────────┤
│  ZK Circuits:      Noir (Aztec)                                 │
│  Client Prover:    Barretenberg (UltraHonk via WASM)            │
│  On-chain Verify:  Sunspot (Groth16 on Solana)                  │
│  Hash Function:    Poseidon (ZK-friendly)                       │
│  Anonymous Funding: Privacy Cash (privacycash.org)              │
└─────────────────────────────────────────────────────────────────┘

Private Agent Creation:
  Wallet signs message → Master secret derived → Commitment generated
  On-chain: owner_commitment (hash), NOT wallet address
  To manage: Prove knowledge of preimage via ZK proof
```

---

## Technology Stack

| Component | Technology |
|-----------|------------|
| Blockchain | [Solana](https://solana.com) |
| RPC | [Helius](https://helius.dev) |
| Smart Contract | Anchor Framework |
| ZK Proofs | [Noir](https://noir-lang.org) + Barretenberg + Sunspot |
| Frontend | Next.js 16, React 19, TypeScript |
| Backend | Express.js (Relayer) |
| AI Integration | MCP (Model Context Protocol) |
| Token Support | USDC |
| x402 Payments | Native support |

### Program IDs (Devnet)

```
Cloaked Program: 3yMjzAeXXc5FZRUrJ1YqP4YMPhPd5bBxHQ6npNSPCUwB
ZK Verifier:     G1fDdFA16d199sf6b8zFhRK1NPZiuhuQCwWWVmGBUG3F
```

---

## Key Features

### 1. On-Chain Constraints
- Per-transaction limits
- Daily spending caps
- Lifetime limits
- Expiration dates
- Instant freeze

### 2. Privacy Options
- Standard mode (simple)
- Private mode (ZK proofs)
- Anonymous funding (Privacy Cash)

### 3. x402 Protocol Support
- Automatic payment handling
- Pay-per-use APIs
- AI service payments

### 4. Multi-Agent Dashboard
- Create/manage multiple agents
- Real-time spending visibility
- One-click freeze

### 5. USDC Token Support
- USDC with per-token spending constraints
- Same on-chain enforcement as SOL
- Token balance visibility in dashboard

---

## Quick Start

### For AI Agents (MCP)

```json
{
  "mcpServers": {
    "cloaked": {
      "command": "npx",
      "args": ["cloaked-mcp"],
      "env": {
        "CLOAKED_AGENT_KEY": "your-agent-key-here"
      }
    }
  }
}
```

The agent can pay in SOL or USDC - pass `token: "USDC"` to `cloak_pay`.

### For Developers (SDK)

```bash
npm install @cloakedagent/sdk
```

```typescript
import { CloakedAgent } from "@cloakedagent/sdk";

// Load agent (can spend)
const agent = new CloakedAgent(agentKey, rpcUrl);

// Spend within limits
await agent.spend({
  destination: recipientPubkey,
  amount: 100_000_000  // 0.1 SOL
});

// Spend USDC (requires token enabled on agent)
await agent.spendToken({
  destination: recipientPubkey,
  mint: USDC_MINT,
  amount: 5_000_000  // 5 USDC (6 decimals)
});
```

---

## Project Structure

```
cloaked/
├── programs/cloaked/     # Anchor program (constraints, ZK verification)
├── circuits/             # Noir ZK circuits (ownership proofs)
├── app/                  # Next.js frontend (dashboard, docs)
├── backend/              # Express relayer (fee payer, ZK ops)
└── sdk/                  # TypeScript SDK (@cloakedagent/sdk)
    └── src/mcp/          # MCP server (cloaked-mcp binary)
```

---

## Documentation

Full documentation available at [cloakedagent.com/docs](https://cloakedagent.com/docs)

---

## Why Cloaked?

| Problem | Cloaked Solution |
|---------|------------------|
| AI can drain wallet | On-chain limits can't be bypassed |
| No spending visibility | Real-time dashboard |
| Can't stop runaway agent | Instant freeze |
| Wallet identity exposed | Private mode with ZK proofs |
| Complex integrations | Native x402 support |

---

*Cloaked - Trustless spending accounts for AI agents*

## Source & license

This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [CloakedAgent](https://github.com/CloakedAgent)
- **Source:** [CloakedAgent/cloaked](https://github.com/CloakedAgent/cloaked)
- **License:** MIT
- **Homepage:** https://cloakedagent.com

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.3 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.3** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/mcp-cloakedagent-cloaked
- Seller: https://agentstack.voostack.com/s/cloakedagent
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.