Provides trustless spending accounts for AI agents on Solana, enabling autonomous payments in SOL or USDC within on-chain enforced constraints like per-transaction limits, daily caps, and expiration dates.
This server does not currently have a deployable release on Glama. Follow the repository's setup instructions to install and configure it for your MCP client, including any required credentials and local dependencies.
Trustless spending accounts for AI agents on Solana
AI agents need to spend money autonomously. But giving them wallet access is dangerous:
Jailbroken agent? Drains your wallet
Bug in agent code? Infinite spending loop
Prompt injection? Attacker controls your funds
Agent-side limits don't work - the agent has the keys and can bypass its own rules.
Related MCP server: capline-mcp
On-chain enforced constraints that agents literally cannot bypass.
┌─────────────────────────────────────────────────────────────────┐
│ CLOAKED AGENT │
├─────────────────────────────────────────────────────────────────┤
│ Owner: Human wallet (full control) │
│ Delegate: AI agent key (can spend within limits) │
│ │
│ Constraints (enforced by Solana program): │
│ ├── max_per_tx: 0.1 SOL │
│ ├── daily_limit: 1 SOL │
│ ├── total_limit: 10 SOL │
│ ├── expires_at: 2026-02-15 │
│ └── token_limits: │
│ └── USDC: 5/tx, 50/day, 500 total │
│ │
│ Even if jailbroken, agent CANNOT exceed these limits. │
└─────────────────────────────────────────────────────────────────┘Cloaked offers dual-mode privacy:
Owner wallet linked to agent on-chain
Simple setup, lower fees
Zero-knowledge proofs hide wallet-agent link
Owner proves ownership without revealing identity
Funded anonymously via Privacy Cash
┌─────────────────────────────────────────────────────────────────┐
│ PRIVACY STACK │
├─────────────────────────────────────────────────────────────────┤
│ ZK Circuits: Noir (Aztec) │
│ Client Prover: Barretenberg (UltraHonk via WASM) │
│ On-chain Verify: Sunspot (Groth16 on Solana) │
│ Hash Function: Poseidon (ZK-friendly) │
│ Anonymous Funding: Privacy Cash (privacycash.org) │
└─────────────────────────────────────────────────────────────────┘
Private Agent Creation:
Wallet signs message → Master secret derived → Commitment generated
On-chain: owner_commitment (hash), NOT wallet address
To manage: Prove knowledge of preimage via ZK proofComponent | Technology |
Blockchain | |
RPC | |
Smart Contract | Anchor Framework |
ZK Proofs | Noir + Barretenberg + Sunspot |
Frontend | Next.js 16, React 19, TypeScript |
Backend | Express.js (Relayer) |
AI Integration | MCP (Model Context Protocol) |
Token Support | USDC |
x402 Payments | Native support |
Cloaked Program: 3yMjzAeXXc5FZRUrJ1YqP4YMPhPd5bBxHQ6npNSPCUwB
ZK Verifier: G1fDdFA16d199sf6b8zFhRK1NPZiuhuQCwWWVmGBUG3FPer-transaction limits
Daily spending caps
Lifetime limits
Expiration dates
Instant freeze
Standard mode (simple)
Private mode (ZK proofs)
Anonymous funding (Privacy Cash)
Automatic payment handling
Pay-per-use APIs
AI service payments
Create/manage multiple agents
Real-time spending visibility
One-click freeze
USDC with per-token spending constraints
Same on-chain enforcement as SOL
Token balance visibility in dashboard
{
"mcpServers": {
"cloaked": {
"command": "npx",
"args": ["cloaked-mcp"],
"env": {
"CLOAKED_AGENT_KEY": "your-agent-key-here"
}
}
}
}The agent can pay in SOL or USDC - pass token: "USDC" to cloak_pay.
npm install @cloakedagent/sdkimport { CloakedAgent } from "@cloakedagent/sdk";
// Load agent (can spend)
const agent = new CloakedAgent(agentKey, rpcUrl);
// Spend within limits
await agent.spend({
destination: recipientPubkey,
amount: 100_000_000 // 0.1 SOL
});
// Spend USDC (requires token enabled on agent)
await agent.spendToken({
destination: recipientPubkey,
mint: USDC_MINT,
amount: 5_000_000 // 5 USDC (6 decimals)
});cloaked/
├── programs/cloaked/ # Anchor program (constraints, ZK verification)
├── circuits/ # Noir ZK circuits (ownership proofs)
├── app/ # Next.js frontend (dashboard, docs)
├── backend/ # Express relayer (fee payer, ZK ops)
└── sdk/ # TypeScript SDK (@cloakedagent/sdk)
└── src/mcp/ # MCP server (cloaked-mcp binary)Full documentation available at cloakedagent.com/docs
Problem | Cloaked Solution |
AI can drain wallet | On-chain limits can't be bypassed |
No spending visibility | Real-time dashboard |
Can't stop runaway agent | Instant freeze |
Wallet identity exposed | Private mode with ZK proofs |
Complex integrations | Native x402 support |
Cloaked - Trustless spending accounts for AI agents
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
Loading tool schema changelog…
This server cannot be deployed
Give AI agents a wallet with a spending limit. Non-custodial USDC on Base, server-enforced limits.
Give your AI an allowance: pay approved people within on-chain spending limits.
Spending control for AI agents: approved budgets, a decision before each payment, signed receipts.
Wallets and rails that let AI agents spend money safely.
