MCP server

SmuggleCheck

dev.workers.mike-tusa.smugglecheck/smugglecheck

Checked 26 Oct 2026, 08:29 UTC · Connected to it and listed its tools

Find hidden prompt-injection text: ASCII smuggling, zero-width/emoji stego, bidi, homoglyphs.

Website

At a glance

Type

MCP server

Publisher

Not verified

Status

Working at last check

Tools

2

Token cost

About 761 tokens per request

Sets up in

Claude Code, Claude Desktop, Codex, Gemini CLI, Cursor, VS Code, Antigravity, ChatGPT, OpenAI API, Grok

Last checked

26 Oct 2026, 08:29 UTC

Connect it to your agent

Add to CursorAdd to VS CodeVS Code Insiders

Opens the app, which shows the server and asks you to confirm. For other apps, copy the setup below.

Claude Code

claude mcp add --transport http smugglecheck https://smugglecheck.mike-tusa.workers.dev/mcp

Claude Desktop

Settings → Connectors → Add custom connector, and paste the URL.

Codex (config.toml)

[mcp_servers.smugglecheck]
url = "https://smugglecheck.mike-tusa.workers.dev/mcp"

Gemini CLI

{"mcpServers":{"smugglecheck":{"httpUrl":"https://smugglecheck.mike-tusa.workers.dev/mcp"}}}

Cursor

{"mcpServers":{"smugglecheck":{"url":"https://smugglecheck.mike-tusa.workers.dev/mcp"}}}

VS Code

{"servers":{"smugglecheck":{"type":"http","url":"https://smugglecheck.mike-tusa.workers.dev/mcp"}}}

Antigravity

agy mcp add smugglecheck https://smugglecheck.mike-tusa.workers.dev/mcp

ChatGPT

Settings → Apps & Connectors → Advanced settings: turn on Developer mode, then Create a connector and paste the URL. Which plans can do this varies.

OpenAI API (Responses tools)

{"type":"mcp","server_label":"smugglecheck","server_url":"https://smugglecheck.mike-tusa.workers.dev/mcp","require_approval":"always"}

Grok (xAI API tools)

{"type":"mcp","server_label":"smugglecheck","server_url":"https://smugglecheck.mike-tusa.workers.dev/mcp"}

Tools

• compare_strings ~220 tokens
  Compare two strings (usernames, domains, brand or command names) with Unicode UTS #39 skeletons and say whether they can look the same to a reader: identical, confusable, confusable_ignoring_case or distinct. Also returns each string's scripts, whether it mixes scripts, and its skeleton. Up to 1024
• scan_text ~541 tokens
  Scan untrusted text for prompt-injection smuggling and deceptive Unicode before it reaches a model or a reader. Detects Unicode tag characters ("ASCII smuggling", decodes the hidden text), zero-width characters (incl. binary stego decode), variation-selector stego ("emoji smuggling", decodes the pay

Browse

• Converting to Markdown
• Calling other AI models

Related MCP servers

• Citiview Agent Market
  186 pay-per-call tools: search, LLMs, UK KYB, FRED, Census, maps, crypto. x402 USDC.
• VerifyLite
  Pay-per-call website safety and URL checks for AI agents. USDC on Base via x402, no API keys.
• Tanod Security
  Contract and agent-package scans, phishing URL and OFAC checks, domain and header checks.
• Agent Utils (x402)
  Pay-per-call US public data for agents: recalls, weather, climate, SEC filings. x402 USDC on Base.
• Prompt Injection Scanner
  Check text before your agent reads it: hidden instructions, invisible text and links that leak data.
• Fetchgate
  Fetch any URL as clean Markdown or metadata, and buy digital goods via x402 — for AI agents.
• ManyLives
  Web search, point-in-time crypto market data, verified strategy track records and 160+ agent tools.
• Cloakcheck
  Scan a page for hidden prompt-injection payloads targeting AI agents.

Badge for your README

[![AptLynx](https://aptlynx.net/badge/dev.workers.mike-tusa.smugglecheck/smugglecheck.svg)](https://aptlynx.net/servers/dev.workers.mike-tusa.smugglecheck/smugglecheck)

Listing text is written by the maker; AptLynx lists tools and does not vouch for them. Find another tool · Browse by topic · For agents