diff --git a/README.md b/README.md
index 690dc102..39794313 100644
--- a/README.md
+++ b/README.md
@@ -273,7 +273,6 @@ Available Commands:
 Flags:
   -c, --config string                Path to config file
       --config-stdin                 Read MCP server configuration from stdin (JSON format). When enabled, overrides --config
-      --enable-difc                  Enable DIFC enforcement for information flow control
       --env string                   Path to .env file to load environment variables
   -h, --help                         help for awmg
   -l, --listen string                HTTP server listen address (default "127.0.0.1:3000")
diff --git a/internal/cmd/flags_difc.go b/internal/cmd/flags_difc.go
index b40bec0e..91ab63be 100644
--- a/internal/cmd/flags_difc.go
+++ b/internal/cmd/flags_difc.go
@@ -20,6 +20,7 @@ var (
 func init() {
 	RegisterFlag(func(cmd *cobra.Command) {
 		cmd.Flags().BoolVar(&enableDIFC, "enable-difc", getDefaultEnableDIFC(), "Enable DIFC enforcement for information flow control")
+		cmd.Flags().MarkHidden("enable-difc")
 	})
 }