Tamperlens MCP server
{
"mcpServers": {
"tamperlens": {
"command": "npx",
"args": [
"-y",
"tamperlens-mcp@latest",
"tamperlens-mcp"
],
"env": {
"TAMPERLENS_API_KEY": "<tamperlens_api_key>",
"TAMPERLENS_BASE_URL": "https://..."
}
}
}
}{
"mcpServers": {
"tamperlens": {
"command": "npx",
"args": [
"-y",
"tamperlens-mcp@latest",
"tamperlens-mcp"
],
"env": {
"TAMPERLENS_API_KEY": "<tamperlens_api_key>",
"TAMPERLENS_BASE_URL": "https://..."
}
}
}
}{
"mcpServers": {
"tamperlens": {
"command": "npx",
"args": [
"-y",
"tamperlens-mcp@latest",
"tamperlens-mcp"
],
"env": {
"TAMPERLENS_API_KEY": "<tamperlens_api_key>",
"TAMPERLENS_BASE_URL": "https://..."
}
}
}
}{
"servers": {
"tamperlens": {
"command": "npx",
"args": [
"-y",
"tamperlens-mcp@latest",
"tamperlens-mcp"
],
"env": {
"TAMPERLENS_API_KEY": "${input:tamperlens_api_key}",
"TAMPERLENS_BASE_URL": "${input:tamperlens_base_url}"
}
}
},
"inputs": [
{
"id": "tamperlens_api_key",
"type": "promptString",
"description": "Tamperlens api key",
"password": true
},
{
"id": "tamperlens_base_url",
"type": "promptString",
"description": "Tamperlens base url",
"password": true
}
]
}{
"mcpServers": {
"tamperlens": {
"command": "npx",
"args": [
"-y",
"tamperlens-mcp@latest",
"tamperlens-mcp"
],
"env": {
"TAMPERLENS_API_KEY": "<tamperlens_api_key>",
"TAMPERLENS_BASE_URL": "https://..."
}
}
}
}file .mcp.json (in your project root)file claude_desktop_config.jsonfile ~/.cursor/mcp.jsonfile .vscode/mcp.jsonfile ~/.codeium/windsurf/mcp_config.jsoninstall npx -y tamperlens-mcpversion 1.36.0
What it does
An MCP server that analyzes documents before they reach a model's context, checking whether they have been edited, whether redactions actually removed content, and whether they contain text addressed to language models rather than human readers. It is for developers building agents that handle untrusted or sensitive documents.
- Check if a PDF or Word document has been tampered with, edited after signing, or contains hidden content before passing it to an agent.
- Verify that redactions in a document actually removed the text and were not just visual coverings.
- Scan documents for text hidden in metadata, comments, or XMP fields that may be instructions aimed at the model rather than content for human readers.
Tools this server exposes
| Tool | Does |
|---|---|
| inspect_document | Analyzes a document for signs of editing, signature coverage, hidden text, macros, AI-generator traces in images, and text addressed to language models; accepts |
| triage_document | Performs a lightweight pre-flight check of document structure, metadata, and signatures to assess risk band and ingestion cost without reading full page content |
| check_redaction | Verifies whether a redaction actually removed text from a document or merely covered it visually. |
| compare_documents | Compares two documents to determine if they are identical and unchanged. |
Before you enable it
An MCP server runs with whatever access you give it. Start with a development account rather than production, and check which tools the server exposes before you let an agent call them unattended.