Ocultar Pii
Redact personally identifiable information locally before prompts or logs reach the model, keeping sensitive strings on your infrastructure with zero egress.
Overview
Ocultar PII is an MCP server for the Ship phase that performs local, zero-egress PII redaction for Claude by calling your Ocultar Refinery instance.
What is this MCP server?
- Zero-egress PII redaction oriented to Claude workflows via ocultar-claude-mcp (v0.1.2)
- Connects to locally running Ocultar Refinery through OCULTAR_URL
- Optional OCULTAR_API_KEY and OCULTAR_AUDITOR_TOKEN for reveal_tokens when server tokens match
- PyPI stdio package plus optional mcpb bundle release on GitHub Edu963/ocultar
- Primary package version 0.1.2 (ocultar-claude-mcp)
- Alternate mcpb artifact version 0.1.0 with published fileSha256 in manifest
- Three Ocultar-related environment variables documented in server schema
What problem does it solve?
You want AI help on real customer or test data but cannot risk PII leaking into cloud model logs or third-party pipelines.
Who is it for?
Privacy-sensitive indie SaaS builders running Claude Code who can host Ocultar Refinery beside their dev environment.
Skip if: Builders who only need casual anonymization in public docs without running a local refinery service.
What do I get? / Deliverables
With Ocultar Refinery and ocultar-claude-mcp configured, agent-bound text is redacted locally and auditor-controlled reveal stays on your network.
- Agent-callable local PII redaction before model exposure
- Zero-egress privacy posture for sensitive prompts
- Optional controlled token reveal for auditors on your network
Recommended MCP Servers
Journey fit
How it compares
Local PII redaction MCP gateway, not a cloud DLP subscription or generic regex linter skill.
Common Questions / FAQ
Who is Ocultar PII for?
Solo builders and small teams using Claude with MCP who must redact PII on their own infrastructure before agent processing.
When should I use Ocultar PII?
Use it during ship and security hardening when pasting support tickets, exports, or fixtures into the agent and you need zero-egress redaction first.
How do I add Ocultar PII to my agent?
Run Ocultar Refinery locally, set OCULTAR_URL (and optional OCULTAR_API_KEY), register ocultar-claude-mcp via PyPI or mcpb stdio, then match OCULTAR_AUDITOR_TOKEN if you need reveal_tokens.