MCP.Market

Redact MCP server

by r3352·io.github.r3352/redact-mcp·v2.0.4·6 stars
No reviews yet

Auto-detects and obfuscates PII (IPs, emails, API keys, names) so Claude never sees real client data

B75/100grade B
Write a reviewInstall
What users say
No reviews yet
Be the first
Safety scan
B75/100

full report

Adoption
New

6 stars

Reviews

Write one

Nobody has reviewed Redact MCP yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Redact MCP tools (8, 1 write)

write = sends, deletes, buys or posts

Read from the package source without running it. The installed server may list more.

  • redact_add_mapping

    Manually add a specific real→fake mapping. Use this when you know a specific value should be redacted (e.g., a client company name, internal hostname).

  • redact_audit_log

    View recent audit log entries showing what was redacted and when. Requires REDACT_AUDIT_LOG=true environment variable to be set.

  • redact_deobfuscate

    Reverses obfuscation — replaces all fake values back with the original real values. Use this when generating final reports or deliverables for the client.

  • redact_obfuscate

    Takes raw text and returns an obfuscated version with all detected PII replaced by consistent fake values. Uses regex + AI-based NER detection. Use this to sanitize any pasted text, command output, or data before analysis.

  • redact_proxy_request

    Makes a real HTTP request to the target, then obfuscates the entire response before returning it. Use this INSTEAD of curl/fetch for all pentest HTTP requests. The URL, headers, and body are deobfuscated first (in case you're using already-obfuscated values), then the real request is made, and the response is fully sanitized.

  • redact_read_file

    Reads a file from disk and returns its content with all detected PII obfuscated. Use this INSTEAD of the Read tool for any client data files, config files, or logs that may contain sensitive information.

  • redact_remove_mappingwrite action

    Remove a mapping by its real value. Use this to undo a false positive detection.

  • redact_show_mappings

    Display all current real→fake mappings, grouped by type. Shows what is currently being redacted.

Public scan report

scanner v0.1.10 · 2026-09-27 · same rubric, same numbers if you re-run it

no findings
  • Code scan15 source files scanned25/25
  • –Live reliabilityno gateway calls yet and no remote to proben/a
  • –Tool poisoningtools not inspected (local package is not executed); not countedn/a
  • Auth qualitylocal package, no credentials required12/15
  • Maintenancelast push 188 days ago4/15
  • Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Overall 75/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Redact MCP compares

Against every graded MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
75/100
higher than 45% of 48,255 servers
Tools
8
the typical server has 7
Tools that change things
13%
typical: 0%. Fewer write tools means less an agent can break
GitHub stars
6
more than 85% of 28,688 servers

What its tools let an agent do: 7 read · 1 change

Install Redact MCP in Claude Code, Cursor or VS Code

Runs npx -y @mattzam/redact-mcp on your machine. Read the scan report first; the gateway never runs local packages.

claude mcp add redact-mcp -- npx -y @mattzam/redact-mcp
Add to Cursor

What the publisher says

From the Redact MCP repository's README, as published. We do not edit it. Read it on GitHub

Redact MCP — Automatic PII Obfuscation for Claude Code

An MCP server (and Claude Code plugin) that automatically detects and obfuscates sensitive data before Claude ever sees it. Uses regex pattern matching and AI-powered Named Entity Recognition (NER) to catch IPs, hostnames, emails, API keys, person names, organization names, locations, private keys, connection strings, and more.

Built for penetration testers who need Claude's analysis capabilities without exposing client data to a third party.

How It Works

Raw data with real PII ──► Regex + NER detection ──► Claude sees only fake values
                                                              │
Final report for client ◄── Real values restored ◄── /redact:export

The server maintains a bidirectional mapping table. Every sensitive value gets a consistent, deterministic fake replacement that persists across the entire session:

Same real value always maps to the same fake value. obfuscate(text) -> deobfuscate(result) === text is guaranteed.

Install

Quick install via npx (recommended)

claude mcp add @mattzam/redact-mcp -- npx @mattzam/redact-mcp

That's it. Claude Code will launch the server via npx on each session. The NER model (~110MB) downloads automatically on first use and is cached for subsequent runs.

To enable audit logging:

claude mcp add @mattzam/redact-mcp -e REDACT_AUDIT_LOG=true -- npx @mattzam/redact-mcp

As a Claude Code plugin (full features: hooks + skills)

git clone https://github.com/r3352/redact-mcp.git redact
cd redact/server
npm install
npm run build
cd ../..

# Load as a plugin (includes hooks for leak detection + slash commands)
claude --plugin-dir ./redact

The plugin mode adds hooks (automatic leak detection on raw tool output) and skills (/redact:status, /redact:add, /redact:export) on top of the MCP server.

Manual MCP configuration

Add to your Claude Code MCP config (~/.claude/mcp.json or project .mcp.json):

{
  "mcpServers": {
    "redact-server": {
      "command": "npx",
      "args": ["redact-mcp"],
      "env": {
        "REDACT_DATA_DIR": "/path/to/data/directory",
        "REDACT_AUDIT_LOG": "true"
      }
    }
  }
}

Environment Variables

What Gets Detected

Regex Patterns (19 types)

Zero configuration required. Detected automatically:

NER Detection (AI-powered)

When @huggingface/transformers is installed (included by default), the server loads Xenova/bert-base-NER (~110MB ONNX model, downloaded on first use) to detect:

Shortened. The full README is on GitHub.

Nothing above is checked by us. What we check is on the safety report.

Redact MCP: common questions

Is Redact MCP server safe?
Mostly: it is graded B (75/100). Read the Redact MCP safety report
How do I install Redact MCP?
It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
Does Redact MCP need an API key?
No secret keys are declared. It reads 2 settings from the environment.
Is Redact MCP maintained?
The last commit was 226 days ago (2026-03-23). The latest release is v2.0.4.
How does Redact MCP compare with other MCP servers?
safety score 75/100 (higher than 45% of 48,255 servers); tools 8 (the typical server has 7); tools that change things 13% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.