@privacyscrubber/mcp-server 1.0.2 → 1.0.4

package/.well-known/mcp/server-card.json

@@ -0,0 +1,60 @@
+{
+  "serverInfo": {
+    "name": "privacyscrubber/pii-masking-mcp",
+    "version": "1.0.4"
+  },
+  "tools": [
+    {
+      "name": "sanitize_text",
+      "description": "Locally scrubs PII, secrets, and credentials (like API keys, passwords, emails, phones, names) from code, logs, or text. Replaces them with safe placeholders (e.g., [EMAIL_1], [API_KEY_1]). Keep your data secure before passing it to any LLM.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "text": {
+            "type": "string",
+            "description": "The raw text, code, or logs to sanitize."
+          },
+          "profile": {
+            "type": "string",
+            "description": "The detection profile to use. Available: 'General' (Free), or PRO profiles. Defaults to 'General'."
+          }
+        },
+        "required": ["text"]
+      }
+    },
+    {
+      "name": "reveal_text",
+      "description": "Replaces masked tokens (e.g., [EMAIL_1], [API_KEY_1]) in the LLM's response back with the original private data from the local volatile RAM-only session map.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "text": {
+            "type": "string",
+            "description": "The AI generated response containing placeholders to restore."
+          }
+        },
+        "required": ["text"]
+      }
+    },
+    {
+      "name": "sanitize_file",
+      "description": "Reads a local file, sanitizes its contents using the selected profile, and outputs the safe version for AI analysis. Securely keeps original identifiers in memory.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "file_path": {
+            "type": "string",
+            "description": "Absolute path to the file to sanitize."
+          },
+          "profile": {
+            "type": "string",
+            "description": "The detection profile to use. Available: 'General' (Free), or PRO profiles. Defaults to 'General'."
+          }
+        },
+        "required": ["file_path"]
+      }
+    }
+  ],
+  "resources": [],
+  "prompts": []
+}

package/README.md

@@ -1,53 +1,28 @@
-# @privacyscrubber/mcp-server
+# PrivacyScrubber MCP Server v1.0.3
 
-[![NPM Version](https://img.shields.io/npm/v/@privacyscrubber/mcp-server?color=blue)](https://www.npmjs.com/package/@privacyscrubber/mcp-server)
-[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
-[![Smithery Compatible](https://smithery.ai/badge/@privacyscrubber/mcp-server)](https://smithery.ai/server/@privacyscrubber/mcp-server)
-[![Security: 100% Local](https://img.shields.io/badge/Security-100%25%20Local-emerald)](https://privacyscrubber.com)
-[![Parity: 100% Core Match](https://img.shields.io/badge/Parity-100%25%20Core%20Match-blueviolet)](https://privacyscrubber.com)
+Zero-Trust Data Sanitization (ZTDS) Model Context Protocol (MCP) server for local PII and secrets masking.
 
-**Zero-Trust Data Sanitization (ZTDS) Model Context Protocol (MCP) Server.**
-Locally scrubs PII, secrets, credentials, and custom regex rules from files and text contexts before they reach remote LLM providers.
+## What's New in v1.0.3
+- **Robust Configuration Parsing**: Protected Smithery integration hooks from undefined configuration objects, ensuring reliable initialization across all MCP clients (Claude Desktop, Cursor, Windsurf).
+- **Microsoft Word (.docx) Support**: Enhanced the `sanitize_file` tool to parse and redact sensitive information from Word documents locally.
+- **Unified Branding & Metadata**: Corrected repository fields and aligned server identity across NPM, Smithery, and Glama registries.
+- **Enhanced Scanner Discovery**: Implemented static `server-card.json` configurations to support automated registry scanning.
 
----
+## Key Features & Security Guarantees
+- **100% Local Processing**: All regex scanning, PII tokenization, and reverse-scrubbing occur directly in your machine's RAM.
+- **Airplane Mode Verified**: Fully operational without an internet connection after the initial download.
+- **Zero Server Logs**: No data, credentials, or prompts are sent to external APIs or remote databases.
 
-## 🔒 Zero-Trust Data Flow
-
-All sensitive parameters, identifiers, and variables are intercepted locally inside your machine's RAM. They are replaced by tokens (e.g. `[EMAIL_1]`) before being sent to the AI. Once the AI responds, the tokens are safely swapped back to original values in your local context.
-
-```text
-[Raw Input / Files] ──> [MCP sanitize_text] ──> [Masked Tokens] ──> [LLM API]
-                               │                                       │
-                        (In-Memory Map)                             (Result)
-                               │                                       │
-[Original Output] <─── [MCP reveal_text] <─────────────────────────────┘
-```
-
----
-
-## 🚀 Installation
-
-### 1. Install via Smithery
-To automatically configure and run with your preferred client, install using Smithery:
-```bash
-npx -y @smithery/cli install @privacyscrubber/mcp-server --write-to-clients
-```
-
-### 2. Instant Run with NPX
-Run the server directly without local installation:
+## Quick Start
+Run the server instantly without local installation:
 ```bash
 npx -y @privacyscrubber/mcp-server
 ```
 
----
-
-## ⚙️ Client Integrations
+## Client Integration Examples
 
 ### Claude Desktop
-Add this to your Claude Desktop config file:
-*   **macOS:** `~/Library/Application Support/Claude/claude_desktop_config.json`
-*   **Windows:** `%APPDATA%\Claude\claude_desktop_config.json`
-
+Add to your `claude_desktop_config.json`:
 ```json
 {
   "mcpServers": {
@@ -63,93 +38,13 @@ Add this to your Claude Desktop config file:
 ```
 
 ### Cursor / Windsurf
-1. Navigate to Settings -> Features -> MCP.
-2. Add new MCP server:
-    *   **Name:** `privacyscrubber`
-    *   **Type:** `command`
-    *   **Command:** `npx -y @privacyscrubber/mcp-server`
-3. Optional: Set `PRIVACYSCRUBBER_KEY` as an environment variable in your system shell.
-
----
-
-## 🛠️ Provided Tools & JSON-RPC Specifications
-
-### 1. `sanitize_text`
-Redacts PII, secrets, API keys, and credentials from a text block and populates the volatile local replacement mapping.
-
-*   **Arguments:**
-    *   `text` (string, required): The raw content or logs to sanitize.
-    *   `profile` (string, optional): Gated industry detection profile (e.g., 'General', 'Dev', 'Medical', 'Legal', 'Compliance'). Defaults to 'General'.
-*   **JSON-RPC Call Example:**
-    ```json
-    {
-      "method": "tools/call",
-      "params": {
-        "name": "sanitize_text",
-        "arguments": {
-          "text": "Contact me at dev-key-1234 or jane.doe@company.com",
-          "profile": "General"
-        }
-      }
-    }
-    ```
-*   **Response Example:**
-    ```json
-    {
-      "content": [
-        {
-          "type": "text",
-          "text": "Contact me at [SECRET_1] or [EMAIL_1]"
-        }
-      ]
-    }
-    ```
-
-### 2. `reveal_text`
-Detokenizes the AI response back to the original values locally.
-
-*   **Arguments:**
-    *   `text` (string, required): The response from the LLM containing tokenized placeholders.
-*   **JSON-RPC Call Example:**
-    ```json
-    {
-      "method": "tools/call",
-      "params": {
-        "name": "reveal_text",
-        "arguments": {
-          "text": "Please reach out to [EMAIL_1] regarding the update."
-        }
-      }
-    }
-    ```
-*   **Response Example:**
-    ```json
-    {
-      "content": [
-        {
-          "type": "text",
-          "text": "Please reach out to jane.doe@company.com regarding the update."
-        }
-      ]
-    }
-    ```
-
-### 3. `sanitize_file`
-Reads a local file, extracts text, sanitizes it, and returns the redacted template for LLM analysis.
-*   **Supported Formats:** Plain text (source code, logs, CSV, JSON, markdown) and Microsoft Word (`.docx`) documents.
-*   **Arguments:**
-    *   `filePath` (string, required): Absolute file path to read and sanitize.
-    *   `profile` (string, optional): The industry detection profile.
-
----
-
-## 🌐 Browser Extension & Web Client
-
-Looking for real-time protection directly inside your web browser?
-*   **Chrome Extension:** Get the [PrivacyScrubber Chrome Extension](https://chromewebstore.google.com/detail/privacyscrubber-%E2%80%94-pii-red/pimoejgefeilajmmbpghifdmhdlkgjol) to sanitize prompts directly inside ChatGPT, Claude, and Gemini in real-time.
-*   **Web Sandbox:** Use the zero-server browser sanitization tools at [PrivacyScrubber Homepage](https://privacyscrubber.com/).
-
----
-
-## 📄 License & Commercial Upgrade
-Standard use is free under the **Free Tier** (limits to the `General` PII profile). To unlock 22+ specialized industry profiles (DevOps, Medical, Legal, Finance) and custom regex rules, acquire a commercial license at [privacyscrubber.com/pricing](https://privacyscrubber.com/pricing).
+Add a new command-type MCP server:
+- **Name**: `privacyscrubber`
+- **Command**: `npx -y @privacyscrubber/mcp-server`
+
+## Useful Links
+- **Official Website**: https://privacyscrubber.com
+- **Chrome Web Store Extension**: https://chromewebstore.google.com/detail/privacyscrubber-%E2%80%94-pii-red/pimoejgefeilajmmbpghifdmhdlkgjol
+- **MCP Documentation**: https://privacyscrubber.com/pii-mcp/
+- **Pricing & Licensing**: https://privacyscrubber.com/pricing/
+- **GitHub Repository**: https://github.com/moxno/privacyscrubber-mcp

package/index.js

@@ -83,8 +83,8 @@ function checkLicenseStatus() {
 // Create the MCP server
 const server = new Server(
   {
-    name: "privacyscrubber-mcp",
-    version: "1.0.0",
+    name: "privacyscrubber/pii-masking-mcp",
+    version: "1.0.4",
   },
   {
     capabilities: {
@@ -113,20 +113,6 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
             }
           },
           required: ["text"]
-        },
-        outputSchema: {
-          type: "object",
-          properties: {
-            text: {
-              type: "string",
-              description: "The sanitized text output."
-            }
-          },
-          required: ["text"]
-        },
-        annotations: {
-          priority: 1.0,
-          audience: ["developer", "user"]
         }
       },
       {
@@ -141,20 +127,6 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
             }
           },
           required: ["text"]
-        },
-        outputSchema: {
-          type: "object",
-          properties: {
-            text: {
-              type: "string",
-              description: "The detokenized text with original values restored."
-            }
-          },
-          required: ["text"]
-        },
-        annotations: {
-          priority: 1.0,
-          audience: ["developer", "user"]
         }
       },
       {
@@ -173,20 +145,6 @@ server.setRequestHandler(ListToolsRequestSchema, async () => {
             }
           },
           required: ["file_path"]
-        },
-        outputSchema: {
-          type: "object",
-          properties: {
-            text: {
-              type: "string",
-              description: "The sanitized content of the file."
-            }
-          },
-          required: ["text"]
-        },
-        annotations: {
-          priority: 1.0,
-          audience: ["developer", "user"]
         }
       }
     ]

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": "0.3",
-  "name": "privacyscrubber-mcp",
-  "version": "1.0.1",
+  "name": "privacyscrubber/pii-masking-mcp",
+  "version": "1.0.4",
   "description": "Zero-Trust Data Sanitization (ZTDS) MCP Server for AI IDEs and Claude Desktop. Locally scrubs PII, secrets, and credentials before sending context to LLMs.",
   "author": {
     "name": "PrivacyScrubber",
@@ -18,6 +18,58 @@
       }
     }
   },
+  "tools": [
+    {
+      "name": "sanitize_text",
+      "description": "Locally scrubs PII, secrets, and credentials (like API keys, passwords, emails, phones, names) from code, logs, or text. Replaces them with safe placeholders (e.g., [EMAIL_1], [API_KEY_1]). Keep your data secure before passing it to any LLM.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "text": {
+            "type": "string",
+            "description": "The raw text, code, or logs to sanitize."
+          },
+          "profile": {
+            "type": "string",
+            "description": "The detection profile to use. Available: 'General' (Free), or PRO profiles: 'Dev' (Engineering/Code), 'Medical', 'Pharma', 'Legal', 'Compliance', 'CCPA', 'Finance', 'Bizops', 'Sales', 'WealthMgmt', 'Insurance', 'Accounting', 'HR', 'Security', 'Marketing', 'Support', 'RealEstate', 'Agents', 'Academic', 'Creative', 'Tech', 'Personal'. Defaults to 'General'."
+          }
+        },
+        "required": ["text"]
+      }
+    },
+    {
+      "name": "reveal_text",
+      "description": "Replaces masked tokens (e.g., [EMAIL_1], [API_KEY_1]) in the LLM's response back with the original private data from the local volatile RAM-only session map.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "text": {
+            "type": "string",
+            "description": "The AI generated response containing placeholders to restore."
+          }
+        },
+        "required": ["text"]
+      }
+    },
+    {
+      "name": "sanitize_file",
+      "description": "Reads a local file, sanitizes its contents using the selected profile, and outputs the safe version for AI analysis. Securely keeps original identifiers in memory.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "file_path": {
+            "type": "string",
+            "description": "Absolute path to the file to sanitize."
+          },
+          "profile": {
+            "type": "string",
+            "description": "The detection profile to use. Available: 'General' (Free), or PRO profiles: 'Dev' (Engineering/Code), 'Medical', 'Pharma', 'Legal', 'Compliance', 'CCPA', 'Finance', 'Bizops', 'Sales', 'WealthMgmt', 'Insurance', 'Accounting', 'HR', 'Security', 'Marketing', 'Support', 'RealEstate', 'Agents', 'Academic', 'Creative', 'Tech', 'Personal'. Defaults to 'General'."
+          }
+        },
+        "required": ["file_path"]
+      }
+    }
+  ],
   "user_config": {
     "PRIVACYSCRUBBER_KEY": {
       "type": "string",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@privacyscrubber/mcp-server",
-  "version": "1.0.2",
+  "version": "1.0.4",
   "mcpName": "io.github.moxno/privacyscrubber-mcp",
   "description": "Zero-Trust Data Sanitization (ZTDS) MCP Server for AI IDEs and Claude Desktop. Locally scrubs PII, secrets, and credentials before sending context to LLMs.",
   "main": "index.js",
@@ -8,6 +8,15 @@
   "publishConfig": {
     "access": "public"
   },
+  "files": [
+    "index.js",
+    "scrubber-core.cjs",
+    "smithery.yaml",
+    "server.json",
+    "manifest.json",
+    "bundle.mcpb",
+    ".well-known"
+  ],
   "bin": {
     "mcp-server": "index.js",
     "privacyscrubber-mcp": "index.js"
@@ -16,7 +25,7 @@
     "start": "node index.js"
   },
   "dependencies": {
-    "@modelcontextprotocol/sdk": "^0.6.0",
+    "@modelcontextprotocol/sdk": "^1.29.0",
     "mammoth": "^1.8.0"
   },
   "keywords": [