PrivacyScrubber PII Masker

CISO-Approved Zero-Trust PII & Secrets Redaction MCP Server for Cursor, Windsurf, and Claude Desktop.Locally scrubs PII, secrets, credentials, and custom regex rules from files and text contexts before they reach remote LLM providers to prevent API leaks and ensure HIPAA/SOC 2 compliance at the developer endpoint.

All sensitive parameters, identifiers, and variables are intercepted locally inside your machine's RAM. They are replaced by tokens (e.g.[EMAIL_1]) before being sent to the AI. Once the AI responds, the tokens are safely swapped back to original values in your local context.

[Raw Input / Files] ──> [MCP sanitize_text] ──> [Masked Tokens] ──> [LLM API] │ │ (In-Memory Map) (Result) │ │ [Original Output] <─── [MCP reveal_text] <─────────────────────────────┘

To automatically configure and run with your preferred client, install using Smithery:

npx -y @smithery/cli install @privacyscrubber/mcp-server --write-to-clients

Run the server directly without local installation:

Add this to your Claude Desktop config file:

- macOS:~/Library/Application Support/Claude/claude_desktop_config.json
- Windows:%APPDATA%\Claude\claude_desktop_config.json

{ "mcpServers": { "privacyscrubber": { "command": "npx", "args": ["-y", "@privacyscrubber/mcp-server"], "env": { "PRIVACYSCRUBBER_KEY": "YOUR_OPTIONAL_PRO_LICENSE_KEY" } } } }

- Navigate to Settings -> Features -> MCP.
- Add new MCP server:

- Name:privacyscrubber
- Type:command
- Command:npx -y @privacyscrubber/mcp-server

🛠️ Provided Tools & JSON-RPC Specifications

Redacts PII, secrets, API keys, and credentials from a text block and populates the volatile local replacement mapping.

- Arguments:

- text(string, required): The raw content or logs to sanitize.
- profile(string, optional): Gated industry detection profile (e.g., 'General', 'Dev', 'Medical', 'Legal', 'Compliance'). Defaults to 'General'.

{ "method": "tools/call", "params": { "name": "sanitize_text", "arguments": { "text": "Contact me at dev-key-1234 or jane.doe@company.com", "profile": "General" } } }

{ "content": [ { "type": "text", "text": "Contact me at [SECRET_1] or [EMAIL_1]" } ] }

Detokenizes the AI response back to the original values locally.

- Arguments:

- text(string, required): The response from the LLM containing tokenized placeholders.

{ "method": "tools/call", "params": { "name": "reveal_text", "arguments": { "text": "Please reach out to [EMAIL_1] regarding the update." } } }

{ "content": [ { "type": "text", "text": "Please reach out to jane.doe@company.com regarding the update." } ] }

Reads a local file, extracts text, sanitizes it, and returns the redacted template for LLM analysis.

- Supported Formats:Plain text (source code, logs, CSV, JSON, markdown) and Microsoft Word (.docx) documents.
- Arguments:

- filePath(string, required): Absolute file path to read and sanitize.
- profile(string, optional): The industry detection profile.

Looking for real-time protection directly inside your web browser?

- Chrome Extension:Get thePrivacyScrubber Chrome Extensionto sanitize prompts directly inside ChatGPT, Claude, and Gemini in real-time.
- Web Sandbox:Use the zero-server browser sanitization tools atPrivacyScrubber Homepage.

👉Acquire a PRO / TEAMS License Key at privacyscrubber.com/pricing

{ "method": "tools/call", "params": { "name": "check_status", "arguments": {} } }

╔══════════════════════════════════════════════════╗ ║ PrivacyScrubber MCP Server v1.6.6 ║ ╠══════════════════════════════════════════════════╣ ║ 🔓 Tier: FREE ║ ║ 📊 Session requests: 5 ║ ║ 📁 Input size limit: 50,000 characters per request║ ╠══════════════════════════════════════════════════╣ ║ 🏷️ Profiles: General only — PRO unlocks 22 more ║ ║ 📋 Custom rules: 🔒 Locked — requires PRO ║ ╠══════════════════════════════════════════════════╣ ║ 💳 Upgrade to PRO — $110 Lifetime ║ ║ https://privacyscrubber.com/pricing ║ ╠══════════════════════════════════════════════════╣ ║ After purchase, add your key to MCP config: ║ ║ "PRIVACYSCRUBBER_KEY": "<your-key-here>" ║ ║ Full setup guide: ║ ║ https://privacyscrubber.com/features/mcp/ ║ ╚══════════════════════════════════════════════════╝

After purchasing a PRO license atprivacyscrubber.com/pricing, you will receive a license key. Add it to your MCP client config as an environment variable:PRIVACYSCRUBBER_KEY.

{ "mcpServers": { "privacyscrubber": { "command": "npx", "args": ["-y", "@privacyscrubber/mcp-server"], "env": { "PRIVACYSCRUBBER_KEY": "YOUR_LICENSE_KEY_HERE" } } } }

- Go toSettings → Features → MCP Servers.
- Findprivacyscrubberand clickEdit.
- Add the environment variable:PRIVACYSCRUBBER_KEY=YOUR_LICENSE_KEY_HERE.
- Restart Cursor.

Alternatively, export it system-wide so all tools pick it up:

# macOS / Linux — add to ~/.zshrc or ~/.bashrc export PRIVACYSCRUBBER_KEY="YOUR_LICENSE_KEY_HERE"

Edit~/.codeium/windsurf/mcp_config.json:

{ "mcpServers": { "privacyscrubber": { "command": "npx", "args": ["-y", "@privacyscrubber/mcp-server"], "env": { "PRIVACYSCRUBBER_KEY": "YOUR_LICENSE_KEY_HERE" } } } }

After adding the key, ask your AI agent to callcheck_status:

Use the check_status tool from PrivacyScrubber MCP

The dashboard should showTier: PROand all profiles unlocked.

This is a web browser that enables your coding agent, such as Claude Code, to visit websites on your behalf and assist you in identifying bugs or creating UI test cases.

Local, privacy-preserving PII detection & redaction over MCP: the model works on shape (schemas, synthetic twins, masked output) while local code touches the real values and returns only masked, aggregated results. Deterministic (Presidio + checksums, AU ABN/ACN/TFN), no LLM calls, no runtime network.

Paid remote MCP for agent data-access boundary reviews, permission scope evidence, sensitive data notes, and governance receipts.

EXIF for AI. AKF embeds trust scores, source provenance, and compliance metadata into every file your AI touches — DOCX, PDF, images, code, and 20+ formats. 9 MCP tools: stamp, inspect, trust, audit, scan, embed, extract, detect. Audit against EU AI Act, SOX, HIPAA, NIST in one command.

Paid remote MCP for LLM trace PII scanning, payload redaction, sensitive field classification, privacy receipts, and trace audit exports.

Security and compliance layer for MCP agents. The analyze_prompt tool checks any input — user messages, RAG retrievals, tool outputs — for prompt injection (22 deterministic signatures, 7 languages) and PII before your model sees it. Every verdict returns a signed audit record (SHA-256 + UUID + UTC) you can retain as GDPR Art. 30 evidence. Free tier: 10,000 requests/month.

Allows access to DFIR / forensics data that was analyzed by the open source Autopsy platform

Connect to your CISO Adapt workspace to search, analyse, export, and manage risks and policies with natural language

CVE/SBOM security audits, licence compliance, frontend security scanning, domain intelligence, and public records — 55 tools, no API key required Category: Security (also fits: Compliance, Data)

MCP server that pseudonymizes PII before your LLM sees it and returns a cryptographically signed receipt for every response.