Tracepiishield Mcp
Scan LLM traces and tool payloads for PII and keep redaction receipts before you ship agent features to real users.
Overview
TracePII Shield MCP is a MCP server for the Ship phase that scans LLM traces and tool payloads for PII and returns redaction receipts.
What is this MCP server?
- PII scanning across LLM traces and tool payloads
- Redaction with receipts suitable for compliance review
- Tags: pii-redaction, llm-observability, privacy, remote-mcp
- Hosted streamable-http MCP (v1.0.0) with bearer auth
- Open-source repo: clauxel/tracepii-shield-mcp on GitHub
- Server version 1.0.0
- Registry tags include pii-redaction, llm-observability, privacy, remote-mcp
- GitHub: github.com/clauxel/tracepii-shield-mcp
What problem does it solve?
Agent traces and MCP tool payloads quietly copy customer PII into logs you are about to ship without proof you redacted it.
Who is it for?
Indie SaaS and API builders adding AI support agents who must harden observability before public launch.
Skip if: Local-only experiments with synthetic data and no real user information in traces.
What do I get? / Deliverables
You get scan-and-redact handling with receipts so launch checklists can show trace hygiene instead of hoping prompts stayed clean.
- PII scan results on traces and tool payloads
- Redaction actions with retention-friendly receipts
- Ship-phase privacy control via hosted MCP integration
Recommended MCP Servers
Journey fit
How it compares
Privacy-focused MCP redaction service, not a general LLM gateway or penetration-testing suite.
Common Questions / FAQ
Who is TracePII Shield MCP for?
Builders shipping agent features who need PII detection and documented redaction on LLM traces and tool payloads.
When should I use TracePII Shield MCP?
Use it during ship security work before go-live, when wiring observability or MCP tools that may carry user data in traces.
How do I add TracePII Shield MCP to my agent?
Get a bearer token from tracepiishield.clauxel.com and configure https://tracepiishield.clauxel.com/mcp as a streamable-http remote MCP with Authorization in your client.