Provides trustless spending accounts for AI agents on Solana, enabling autonomous payments in SOL or USDC within on-chain enforced constraints like per-transaction limits, daily caps, and expiration dates.
Click on "Deploy Server".
Wait a few minutes for the server to deploy. Once ready, it will show a "Started" state.
In the chat, type @ followed by the MCP server name and your instructions, e.g., "@Cloaked MCP Server Pay 0.05 SOL to wallet 8xYz... for API service"
That's it! The server will respond to your query, and you can continue using it as needed.
Here is a step-by-step guide with screenshots.
Trustless spending accounts for AI agents on Solana
AI agents need to spend money autonomously. But giving them wallet access is dangerous:
Jailbroken agent? Drains your wallet
Bug in agent code? Infinite spending loop
Prompt injection? Attacker controls your funds
Agent-side limits don't work - the agent has the keys and can bypass its own rules.
Related MCP server: ows-mcp-wallet
On-chain enforced constraints that agents literally cannot bypass.
┌─────────────────────────────────────────────────────────────────┐
│ CLOAKED AGENT │
├─────────────────────────────────────────────────────────────────┤
│ Owner: Human wallet (full control) │
│ Delegate: AI agent key (can spend within limits) │
│ │
│ Constraints (enforced by Solana program): │
│ ├── max_per_tx: 0.1 SOL │
│ ├── daily_limit: 1 SOL │
│ ├── total_limit: 10 SOL │
│ ├── expires_at: 2026-02-15 │
│ └── token_limits: │
│ └── USDC: 5/tx, 50/day, 500 total │
│ │
│ Even if jailbroken, agent CANNOT exceed these limits. │
└─────────────────────────────────────────────────────────────────┘Cloaked offers dual-mode privacy:
Owner wallet linked to agent on-chain
Simple setup, lower fees
Zero-knowledge proofs hide wallet-agent link
Owner proves ownership without revealing identity
Funded anonymously via Privacy Cash
┌─────────────────────────────────────────────────────────────────┐
│ PRIVACY STACK │
├─────────────────────────────────────────────────────────────────┤
│ ZK Circuits: Noir (Aztec) │
│ Client Prover: Barretenberg (UltraHonk via WASM) │
│ On-chain Verify: Sunspot (Groth16 on Solana) │
│ Hash Function: Poseidon (ZK-friendly) │
│ Anonymous Funding: Privacy Cash (privacycash.org) │
└─────────────────────────────────────────────────────────────────┘
Private Agent Creation:
Wallet signs message → Master secret derived → Commitment generated
On-chain: owner_commitment (hash), NOT wallet address
To manage: Prove knowledge of preimage via ZK proofComponent | Technology |
Blockchain | |
RPC | |
Smart Contract | Anchor Framework |
ZK Proofs | Noir + Barretenberg + Sunspot |
Frontend | Next.js 16, React 19, TypeScript |
Backend | Express.js (Relayer) |
AI Integration | MCP (Model Context Protocol) |
Token Support | USDC |
x402 Payments | Native support |
Cloaked Program: 3yMjzAeXXc5FZRUrJ1YqP4YMPhPd5bBxHQ6npNSPCUwB
ZK Verifier: G1fDdFA16d199sf6b8zFhRK1NPZiuhuQCwWWVmGBUG3FPer-transaction limits
Daily spending caps
Lifetime limits
Expiration dates
Instant freeze
Standard mode (simple)
Private mode (ZK proofs)
Anonymous funding (Privacy Cash)
Automatic payment handling
Pay-per-use APIs
AI service payments
Create/manage multiple agents
Real-time spending visibility
One-click freeze
USDC with per-token spending constraints
Same on-chain enforcement as SOL
Token balance visibility in dashboard
{
"mcpServers": {
"cloaked": {
"command": "npx",
"args": ["cloaked-mcp"],
"env": {
"CLOAKED_AGENT_KEY": "your-agent-key-here"
}
}
}
}The agent can pay in SOL or USDC - pass token: "USDC" to cloak_pay.
npm install @cloakedagent/sdkimport { CloakedAgent } from "@cloakedagent/sdk";
// Load agent (can spend)
const agent = new CloakedAgent(agentKey, rpcUrl);
// Spend within limits
await agent.spend({
destination: recipientPubkey,
amount: 100_000_000 // 0.1 SOL
});
// Spend USDC (requires token enabled on agent)
await agent.spendToken({
destination: recipientPubkey,
mint: USDC_MINT,
amount: 5_000_000 // 5 USDC (6 decimals)
});cloaked/
├── programs/cloaked/ # Anchor program (constraints, ZK verification)
├── circuits/ # Noir ZK circuits (ownership proofs)
├── app/ # Next.js frontend (dashboard, docs)
├── backend/ # Express relayer (fee payer, ZK ops)
└── sdk/ # TypeScript SDK (@cloakedagent/sdk)
└── src/mcp/ # MCP server (cloaked-mcp binary)Full documentation available at cloakedagent.com/docs
Problem | Cloaked Solution |
AI can drain wallet | On-chain limits can't be bypassed |
No spending visibility | Real-time dashboard |
Can't stop runaway agent | Instant freeze |
Wallet identity exposed | Private mode with ZK proofs |
Complex integrations | Native x402 support |
Cloaked - Trustless spending accounts for AI agents
This server cannot be deployed
Give AI agents a wallet with a spending limit. Non-custodial USDC on Base, server-enforced limits.
Payment infrastructure for AI agents: spending rules, approval flows, single-use virtual cards.
Wallet-signed Solana RPC for AI agents. No API keys, LLM-safe amounts, pay-per-call in SOL.
AI agent spending controls. Set limits, blocklists, and caps. Approve transactions from your phone.
