Privacyscrubber MCP

Zero-Trust PII & secrets sanitizer for AI agents with in-memory local redaction.

Connector by moxno · GitHub account verified by the MCP Registry

IndexedLicense unknownLocal (stdio)★ 2

Install

Works with Claude Code, Codex, VS Code, Cursor, Windsurf, Claude Desktop. Read the repository before you give any tool access to your data.

npx agentmarket install connector/moxno-privacyscrubber-mcp

Asks which of your tools to add it to (Claude Code, Codex, Cursor, VS Code, Windsurf, Gemini CLI, Claude Desktop) and shows the change first. See https://agentmart.dev/cli.

Get the weekly diff

The weekly diff: one email a week with new agent tools, notable updates and grade changes, plus security alerts for tools you follow. Double opt-in, one-click unsubscribe.

About

Zero-Trust PII & secrets sanitizer for AI agents with in-memory local redaction.

Reviews

Write a review

No reviews yet. Installed it? Reviews come from verified installers only. How reviews work

Permissions

What this server can do and what it asks for, from its tool list, install config and code. Checked Oct 25, 2026.

Tools: 8 read · 9 write · 1 delete · 7 not yet classified
Secrets: 1 (API keys, tokens or passwords)
Install scripts: None found
Runs as: Node.js package

Tools by what they do 25

Read from the source code; the running server may list different tools.

Read 8 · Look things up without changing anything.

audit_context
audit_directory_for_pii
check_status
export_audit_log
guard_git_diff
guard_read_file
guard_session_info
sanitize_file

Write 9 · Create, change, send or run things.

create_agent_rules
create_default_config
guard_apply_patch
guard_rag_restore
mark_false_positive
reveal_text
sanitize_text
scrub_text
stream_reveal_text

Delete 1 · Delete, drop, revoke or wipe things.

guard_session_reset

Not yet classified 7 · We could not tell from the name and description.

generate_compliance_report
generate_procurement_memo
guard_exec
guard_rag_chunk
guard_unmask_args
redact_file
scrub_file

Secrets and settings it asks for

Secrets: values you paste in that let it act as you.

PRIVACYSCRUBBER_KEY

Network hosts it talks to 4

github.com · found in code
glama.ai · found in code
privacyscrubber.com · found in code
smithery.ai · found in code

Files it touches

/etc/passwd
/etc/shadow
/Users/ilya/Desktop/PrivacyScrubber/PrivacyScrubber_Zero_Trust_Data_Sanitization.pdf
/var/log/privacyscrubber.log
Your home directory (~)
~/privacyscrubber.json
Any path the agent passes to its tools

Tools (25)

Read from the source code; the running server may differ. Descriptions are the server’s own words; hidden characters are shown as [U+…].

audit_context
STEP 0 (Pre-Flight): Non-destructive security inspection of raw prompts or document chunks before sending to LLMs. Evaluates PII, secrets, risk severity (CLEAN, LOW, MODERATE, CRITICAL), and triggered regulatory frameworks (GDPR, HIPAA, SOC 2, PCI DSS) with zero text mutation.
audit_directory_for_pii
Scans a local directory for leaks of secrets, keys, and PII. Returns a summary report. Use this tool for Security Auditing.
check_status
Returns the current PrivacyScrubber MCP tier, session usage, available profiles, and PRO upgrade instructions. Call this to see your license status or get setup help.
create_agent_rules
Zero-Trust Agentic Guard: Scaffolds CISO-grade AI Agent Rules in workspace (.cursorrules, .windsurfrules, CLAUDE.md, .github/copilot-instructions.md, .clinerules). Guides autonomous agents to route all file reads, git diffs, and shell commands through PrivacyScrubber Guard tools.
create_default_config
Creates a default 'privacyscrubber.json' configuration file in the active workspace root directory if one does not exist. Includes template structures for custom regex rules and exclusion bypass patterns.
export_audit_log
Zero-Trust Enterprise Compliance: Exports an immutable, tamper-evident audit log in SIEM standard formats (CEF / ArcSight, RFC 5424 Syslog, JSONL, or JSON) with zero plaintext PII leakage. Can write directly to a local log file or stream.
generate_compliance_report
Generates an official Zero-Trust Compliance Audit Certificate (GDPR, HIPAA, EU AI Act, SOC 2) for the current MCP session. Returns cryptographic session hash, masked entities breakdown, and compliance certification.
generate_procurement_memo
Zero-Trust Enterprise Procurement: Generates an executive-ready Procurement & ROI Memorandum for Chief Information Security Officers (CISO), Data Protection Officers (DPO), and VP of Engineering. Compares TCO of traditional Cloud DLP ($1.5k–$4k/mo) vs PrivacyScrubber TEAMS ($99/mo flat) or Developer SDK ($299/mo flat), citing statutory frameworks (GDPR Art. 4/28, HIPAA §164.514, SOC 2 Type II, PCI DSS v4.0, NIST SP 800-53, EU AI Act Art. 50).
guard_apply_patch
Zero-Trust Agentic Guard: Reverses token placeholders ([API_KEY_1], [SECRET_1]) in AI-generated code or text, restores authentic values from local volatile RAM, and writes real content directly to target file on disk. Remote LLM never learns actual secrets.
guard_exec
Zero-Trust Agentic Guard: Safely executes a shell/terminal command locally in isolated process, sanitizes stdout and stderr in volatile RAM, tokenizes any API keys, credentials, database URIs, or PII before sending output to LLM. Maps original values in memory for safe local restoration.
guard_git_diff
Zero-Trust Agentic Guard: Inspects unstaged or staged git diffs locally, sanitizes any newly added or modified credentials, tokens, or PII in RAM, and returns safe diff for AI commit generation or code review.
guard_rag_chunk
Zero-Trust Agentic Guard: Sanitizes an array of document chunks or knowledge base records before sending to embedding models or vector databases (Chroma, Pinecone, Qdrant). Keeps authentic data in local RAM with zero network leakage.
guard_rag_restore
Zero-Trust Agentic Guard: Re-hydrates retrieved vector search results or chunks by restoring token placeholders with authentic data from the volatile RAM session before presenting to the user.
guard_read_file
Zero-Trust Agentic Guard: Reads a sensitive local file (.env, config, credentials, source code, database dumps), sanitizes all credentials and PII in volatile RAM, and returns safe tokenized content for AI agent context.
guard_session_info
Zero-Trust Agentic Guard: Returns diagnostic metrics on active in-memory sessions, token counts, and memory footprint with zero plaintext leakage.

Show 10 more tools

guard_session_reset
Zero-Trust Agentic Guard: Explicitly purges the in-memory token map for a specific session_id or all sessions upon agent task completion.
guard_unmask_args
Zero-Trust Agentic Guard: Detokenizes parameters, JSON objects, or arguments in local RAM before dispatching to local tools or APIs without sending cleartext secrets back to the LLM.
mark_false_positive
Marks a previously detected token as a false positive. The original plaintext value will be excluded from all future sanitize_text calls in this session. Returns the restored original value and updated ignore list size.
redact_file
Action/Redact: In-place redaction of a local file. Replaces PII and secrets with tokens and saves the file. By default, creates a .bak backup. Use dry_run=true to test without modifying.
reveal_text
STEP 3: Call this last. You MUST pass your final generated response through this tool to restore tokens (e.g., [EMAIL_1]) back with the original private data from the local volatile RAM-only session map before showing it to the user. Supports both standard batch mode and real-time streaming mode (stream: true).
sanitize_file
Reads a local file, sanitizes its contents using the selected profile, and outputs the safe version for AI analysis. Securely keeps original identifiers in memory.
sanitize_text
STEP 1: Call this first. You MUST NOT process raw user data before calling this. Locally scrubs PII, secrets, and credentials (like API keys, passwords, emails, phones, names) from code, logs, or text. Replaces them with safe placeholders (e.g., [EMAIL_1], [API_KEY_1]). Keep your data secure before passing it to any LLM. Supports General and all 30 specialized industry profiles in RAM session map. (For in-code backend services or RAG vector pipelines outside of MCP, use '@privacyscrubber/sdk': npm i @privacyscrubber/sdk)
scrub_file
Alias for 'sanitize_file'. Reads and sanitizes a local file.
scrub_text
Alias for 'sanitize_text'. Locally scrubs PII, secrets, and credentials from prompts or text before LLM ingestion. Supports General and all 30 specialized industry profiles in RAM session map.
stream_reveal_text
STEP 3 (Streaming): Real-time streaming token detokenizer for LLM Server-Sent Events (SSE) and stdio chunk pipelines. Buffers split token candidates across chunk boundaries (e.g. '[EM' + 'AIL_1]') so no characters or tokens are corrupted. Pass 'flush: true' on the final chunk.

Compare and alternatives

Featured in

Best MCP servers for privacy and PII

Signals

Stars: 2
Forks: 0
Open issues: 0
Last commit: Oct 23, 2026 (5 days ago)
Last release: Oct 23, 2026 (5 days ago)

From GitHub (fetched Oct 24, 2026).

Details

Registry name: io.github.moxno/privacyscrubber-mcp
Version: 2.2.5
Auth: API key
Packages: npm @privacyscrubber/mcp-server
License: License unknown
Repository: github.com/moxno/privacyscrubber-mcp
First seen: Oct 24, 2026
Last checked: Oct 24, 2026
Source: Official MCP Registry github-graphql

More from moxno

Cite this page

Privacyscrubber MCP. Agent Mart. https://agentmart.dev/connectors/moxno-privacyscrubber-mcp (last updated 2026-10-24)