@privacyscrubber/mcp-server 2.0.0 → 2.0.3

package/README.md

@@ -3,6 +3,9 @@
 [![NPM Version](https://img.shields.io/npm/v/@privacyscrubber/mcp-server?color=blue)](https://www.npmjs.com/package/@privacyscrubber/mcp-server)
 [![NPM Downloads](https://img.shields.io/npm/dm/@privacyscrubber/mcp-server?color=3b82f6)](https://www.npmjs.com/package/@privacyscrubber/mcp-server)
 [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![DOI](https://zenodo.org/badge/DOI/10.5281/zenodo.22058770.svg)](https://zenodo.org/records/22058770)
+[![OSF DOI](https://img.shields.io/badge/OSF%20DOI-10.17605%2FOSF.IO%2F5BYJF-blue.svg)](https://osf.io/5byjf/)
+[![SSRN](https://img.shields.io/badge/SSRN-7335581-darkred.svg)](https://papers.ssrn.com/sol3/papers.cfm?abstract_id=7335581)
 [![smithery badge](https://smithery.ai/badge/privacyscrubber/pii-masking-mcp)](https://smithery.ai/servers/privacyscrubber/pii-masking-mcp)
 [![Security: 100% Local](https://img.shields.io/badge/Security-100%25%20Local-emerald)](https://privacyscrubber.com)
 [![Parity: 100% Core Match](https://img.shields.io/badge/Parity-100%25%20Core%20Match-blueviolet)](https://privacyscrubber.com)
@@ -148,7 +151,7 @@ Reads a local file, extracts text, sanitizes it, and returns the redacted templa
 
 Looking for real-time protection directly inside your web browser?
 *   **Chrome Extension:** Get the [PrivacyScrubber Chrome Extension](https://chromewebstore.google.com/detail/privacyscrubber-%E2%80%94-pii-red/pimoejgefeilajmmbpghifdmhdlkgjol) to sanitize prompts directly inside ChatGPT, Claude, and Gemini in real-time.
-*   **Web Sandbox:** Use the zero-server browser sanitization tools at [PrivacyScrubber Homepage](https://privacyscrubber.com/).
+*   **Web Sandbox:** Use the zero-server browser sanitization tools at [PrivacyScrubber Homepage](https://privacyscrubber.com/?utm_source=npm&utm_medium=readme&utm_campaign=mcp_server).
 
 ## 📄 License & Commercial Upgrade
 
@@ -166,7 +169,7 @@ By default, the server runs under the **Free Tier** (restricted to 50,000 charac
 | **Team Rules Sync (GPO)** | ❌ No | ❌ No | ✅ Yes (Shared Link) |
 | **Licensing Cost** | $0 | **$110 Lifetime** | **$99/mo Flat Rate** |
 
-👉 **[Acquire a PRO / TEAMS License Key at privacyscrubber.com/pricing](https://privacyscrubber.com/pricing)**
+👉 **[Acquire a PRO / TEAMS License Key at privacyscrubber.com/pricing](https://privacyscrubber.com/pricing?utm_source=npm&utm_medium=readme&utm_campaign=mcp_server)**
 
 ---
 
@@ -195,12 +198,12 @@ Returns a visual dashboard showing your current tier, session request count, act
     ║  📋 Custom rules: 🔒 Locked — requires PRO       ║
     ╠══════════════════════════════════════════════════╣
     ║  💳 Upgrade to PRO — $110 Lifetime               ║
-    ║     https://privacyscrubber.com/pricing          ║
+    ║     https://privacyscrubber.com/pricing?utm_source=npm&utm_medium=readme&utm_campaign=mcp_server          ║
     ╠══════════════════════════════════════════════════╣
     ║  After purchase, add your key to MCP config:     ║
     ║  "PRIVACYSCRUBBER_KEY": "<your-key-here>"        ║
     ║  Full setup guide:                               ║
-    ║  https://privacyscrubber.com/features/mcp/       ║
+    ║  https://privacyscrubber.com/features/mcp/?utm_source=npm&utm_medium=readme&utm_campaign=mcp_server       ║
     ╚══════════════════════════════════════════════════╝
     ```
 
@@ -208,7 +211,7 @@ Returns a visual dashboard showing your current tier, session request count, act
 
 ## 🔐 After Purchase: Activate PRO in Your MCP Client
 
-After purchasing a PRO license at [privacyscrubber.com/pricing](https://privacyscrubber.com/pricing), you will receive a license key. Add it to your MCP client config as an environment variable: `PRIVACYSCRUBBER_KEY`.
+After purchasing a PRO license at [privacyscrubber.com/pricing](https://privacyscrubber.com/pricing?utm_source=npm&utm_medium=readme&utm_campaign=mcp_server), you will receive a license key. Add it to your MCP client config as an environment variable: `PRIVACYSCRUBBER_KEY`.
 
 ### Claude Desktop
 
@@ -271,3 +274,36 @@ Use the check_status tool from PrivacyScrubber MCP
 
 The dashboard should show **Tier: PRO** and all profiles unlocked.
 
+---
+
+## 📚 Academic Foundations & Regulatory Verification
+
+PrivacyScrubber and the Zero-Trust Data Sanitization (ZTDS) protocol are backed by published scientific, clinical, and legal treatises:
+
+| Repository / Archive | DOI / Identifier | Focus Area | Regulatory & Compliance Scope |
+|---|---|---|---|
+| **Zenodo / CERN** | [`10.5281/zenodo.22058770`](https://zenodo.org/records/22058770) | Zero-Trust Data Sanitization (ZTDS) Protocol Foundation | Cross-Border AI Privacy, ISO 27001 A.8.11 |
+| **OSF (Center for Open Science)** | [`10.17605/OSF.IO/5BYJF`](https://osf.io/5byjf/) | Empirical Latency Benchmark & Memory Profiling (<2ms RAM) | Performance vs Cloud DLP Proxies |
+| **SSRN / Elsevier** | [`SSRN ID: 7335581`](https://papers.ssrn.com/sol3/papers.cfm?abstract_id=7335581) | Enterprise Generative AI Governance | EU AI Act, UK GDPR, US State Privacy |
+| **medRxiv (Cold Spring Harbor)** | [`MEDRXIV/2026/361661`](https://submit.medrxiv.org/) | Multi-Center Clinical Trial De-Identification | HIPAA Safe Harbor Section 164.514(b) |
+| **Law Archive / OSF** | [`LawArchive ID: 4wc86`](https://osf.io/preprints/lawarchive/4wc86/) | Preserving Attorney-Client Privilege in AI Workflows | ABA Model Rules & Legal Ethics |
+
+### Citing PrivacyScrubber in Research & Audits
+```bibtex
+@software{sibiryakov2026privacyscrubber,
+  author = {Sibiryakov, Ilya},
+  title = {PrivacyScrubber: Zero-Trust Data Sanitization (ZTDS) Engine & MCP Server},
+  year = {2026},
+  publisher = {Zenodo},
+  doi = {10.5281/zenodo.22058770},
+  url = {https://github.com/moxno/privacyscrubber-mcp}
+}
+```
+
+---
+
+## 📄 License
+
+MIT © [Ilya Sibiryakov](https://privacyscrubber.com) (BrandMeWeb)
+
+

package/index.js

@@ -97,6 +97,8 @@ function checkLicenseStatus() {
 
   return { isPro: true, type: result.tier, error: null };
 }
+// ── Zero-Trust Air-Gapped Operation ──────────────────────────────────────────
+// 100% local stdio execution in memory. Zero external network calls, zero telemetry.
 
 // ── Free Tier Usage Tracking (Persistent) ─────────────────────────────
 const FREE_TIER_DAILY_LIMIT = 10;
@@ -230,16 +232,6 @@ function formatAuditReceipt(telemetry) {
   return `\\n\\n> 🛡️ **PrivacyScrubber Audit Receipt**\\n> * **Risk Level:** ${icon} ${telemetry.riskLevel}\\n> * **Compliance Enforced:** ${telemetry.frameworksList.join(', ')}\\n> * **Tokens Masked:** ${telemetry.totalCount} (${entitiesList})\\n`;
 }
 
-// Build a clean upsell content block (Disabled to prevent agent-visible marketing content)
-function buildUpsellBlock(reason) {
-  return null;
-}
-
-// Decide if we should attach a soft periodic nudge (Disabled to maintain clean MCP output)
-function shouldNudge(isPro) {
-  return false;
-}
-
 // Create the MCP server
 const server = new Server(
   {
@@ -540,6 +532,7 @@ server.setRequestHandler(ReadResourceRequestSchema, async (request) => {
 // Handle tool execution calls
 server.setRequestHandler(CallToolRequestSchema, async (request) => {
   const { name, arguments: args } = request.params;
+  const toolStart = Date.now();
 
   try {
     if (name === "sanitize_text") {
@@ -567,7 +560,6 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
       const isAdvanced = targetProfile.toLowerCase() !== "general";
       const license = checkLicenseStatus();
       let finalProfile = targetProfile;
-      const extraBlocks = [];
 
       const limitStatus = checkFreeTierLimit(license.isPro);
       if (limitStatus.blocked) {
@@ -579,25 +571,10 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
 
       const charLimit = (isAdvanced && !license.isPro) ? 5000 : 15000;
       if (isAdvanced && !license.isPro) {
-        mcpLog(`${colors.yellowBold}⚠️  [PrivacyScrubber] Profile '${targetProfile}' active on Free Tier (5,000 char limit).${colors.reset}\n${colors.cyan}👉  Get a PRO key for unlimited use: https://privacyscrubber.com/pricing?utm_source=mcp_cli&utm_medium=terminal${colors.reset}\n`);
-        extraBlocks.push(buildUpsellBlock(`Profile '${targetProfile}' active (Free Tier limit: 5,000 chars). Upgrade to PRO for unlimited text.`));
+        mcpLog(`${colors.yellowBold}⚠️  [PrivacyScrubber] Profile '${targetProfile}' active on Free Tier (5,000 char limit).${colors.reset}\n`);
       }
 
-      const { processedText, wasTruncated } = truncateIfFree(text, license.isPro, charLimit);
-      if (wasTruncated) {
-        extraBlocks.push(buildUpsellBlock(`Input was truncated to ${charLimit.toLocaleString()} characters (Free Tier limit).`));
-      }
-
-      if (!license.isPro) {
-        const detected = detectSecrets(processedText);
-        if (detected.length > 0) {
-          mcpLog(`${colors.redBold}🚫  [PrivacyScrubber] API Key / Secret (${detected.join(', ')}) detected! Request BLOCKED to protect your data (Requires PRO Profile).${colors.reset}\n${colors.cyan}👉  Upgrade at: https://privacyscrubber.com/pricing?utm_source=mcp_cli&utm_medium=terminal${colors.reset}\n`);
-          return {
-            isError: true,
-            content: [{ type: "text", text: `Error: API Key / Secret (${detected.join(', ')}) detected! Request BLOCKED to protect your data. Sanitizing DevOps secrets requires a PRO license. Get a key at: https://privacyscrubber.com/pricing` }]
-          };
-        }
-      }
+      const { processedText } = truncateIfFree(text, license.isPro, charLimit);
 
       const { scrubbedText, newTokens } = performSanitization(processedText, finalProfile, sessionIgnoreList);
       
@@ -606,8 +583,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
 
       return {
         content: [
-          { type: "text", text: scrubbedText + receiptMd },
-          ...extraBlocks.filter(Boolean)
+          { type: "text", text: scrubbedText + receiptMd }
         ]
       };
     }
@@ -748,9 +724,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
           const targetProfile = profile.trim();
           const isAdvanced = targetProfile.toLowerCase() !== "general";
           const license = checkLicenseStatus();
-
           let finalProfile = targetProfile;
-          const extraBlocks = [];
 
           const limitStatus = checkFreeTierLimit(license.isPro);
           if (limitStatus.blocked) {
@@ -762,23 +736,10 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
 
           const charLimit = (isAdvanced && !license.isPro) ? 5000 : 15000;
           if (isAdvanced && !license.isPro) {
-            mcpLog(`${colors.yellowBold}⚠️  [PrivacyScrubber] Profile '${targetProfile}' active on Free Tier (5,000 char limit).${colors.reset}\n${colors.cyan}👉  Get a PRO key for unlimited use: https://privacyscrubber.com/pricing?utm_source=mcp_cli&utm_medium=terminal${colors.reset}\n`);
-            extraBlocks.push(buildUpsellBlock(`Profile '${targetProfile}' active (Free Tier limit: 5,000 chars). Upgrade to PRO for unlimited text.`));
+            mcpLog(`${colors.yellowBold}⚠️  [PrivacyScrubber] Profile '${targetProfile}' active on Free Tier (5,000 char limit).${colors.reset}\n`);
           }
 
-          const { processedText: processedContent, wasTruncated } = truncateIfFree(content, license.isPro, charLimit);
-          if (wasTruncated) extraBlocks.push(buildUpsellBlock(`File content was truncated to ${charLimit.toLocaleString()} characters (Free Tier limit).`));
-
-          if (!license.isPro) {
-            const detected = detectSecrets(processedContent);
-            if (detected.length > 0) {
-              mcpLog(`${colors.redBold}🚫  [PrivacyScrubber] API Key / Secret (${detected.join(', ')}) detected! Request BLOCKED to protect your data (Requires PRO Profile).${colors.reset}\n${colors.cyan}👉  Upgrade at: https://privacyscrubber.com/pricing?utm_source=mcp_cli&utm_medium=terminal${colors.reset}\n`);
-              return {
-                isError: true,
-                content: [{ type: "text", text: `Error: API Key / Secret (${detected.join(', ')}) detected! Request BLOCKED to protect your data. Sanitizing DevOps secrets requires a PRO license. Get a key at: https://privacyscrubber.com/pricing` }]
-              };
-            }
-          }
+          const { processedText: processedContent } = truncateIfFree(content, license.isPro, charLimit);
 
           const sanitized = performSanitization(processedContent, finalProfile, sessionIgnoreList);
           const { scrubbedText, newTokens } = sanitized;
@@ -788,8 +749,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
 
           return {
             content: [
-              { type: "text", text: combinedOutput },
-              ...extraBlocks.filter(Boolean)
+              { type: "text", text: combinedOutput }
             ]
           };
         } catch (docxError) {
@@ -813,7 +773,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
             content: [
               {
                 type: "text",
-                text: `Error: PDF and Excel file sanitization is a PRO feature. Set PRIVACYSCRUBBER_KEY to your PRO license key to unlock local document parsing. Get a key at: https://privacyscrubber.com/pricing?utm_source=mcp_cli&utm_medium=terminal`
+                text: `🔒 [PrivacyScrubber PRO] Sanitizing ${isPdf ? 'PDF' : 'Excel/XLSX'} files is a PRO feature.\n\n👉 Set your PRIVACYSCRUBBER_KEY environment variable to a valid PRO license key.\n👉 Upgrade at: https://privacyscrubber.com/pricing?utm_source=mcp_cli&utm_medium=terminal\n👉 Alternatively, sanitize plain text, code, CSV, and DOCX files for free.`
               }
             ]
           };
@@ -825,40 +785,9 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
             const data = await pdf(buffer);
             const content = data.text;
             const targetProfile = profile.trim();
-            const isAdvanced = targetProfile.toLowerCase() !== "general";
-
             let finalProfile = targetProfile;
-            const extraBlocks = [];
-
-            const limitStatus = checkFreeTierLimit(license.isPro);
-            if (limitStatus.blocked) {
-              return {
-                isError: true,
-                content: [{ type: "text", text: `Error: Free tier daily limit exhausted (${FREE_TIER_DAILY_LIMIT} requests). Please set your PRO license key to continue. Get a key at: https://privacyscrubber.com/pricing` }]
-              };
-            }
-
-            const charLimit = (isAdvanced && !license.isPro) ? 5000 : 15000;
-            if (isAdvanced && !license.isPro) {
-              mcpLog(`${colors.yellowBold}⚠️  [PrivacyScrubber] Profile '${targetProfile}' active on Free Tier (5,000 char limit).${colors.reset}\n${colors.cyan}👉  Get a PRO key for unlimited use: https://privacyscrubber.com/pricing?utm_source=mcp_cli&utm_medium=terminal${colors.reset}\n`);
-              extraBlocks.push(buildUpsellBlock(`Profile '${targetProfile}' active (Free Tier limit: 5,000 chars). Upgrade to PRO for unlimited text.`));
-            }
 
-            const { processedText: processedContent, wasTruncated } = truncateIfFree(content, license.isPro, charLimit);
-            if (wasTruncated) extraBlocks.push(buildUpsellBlock(`File content was truncated to ${charLimit.toLocaleString()} characters (Free Tier limit).`));
-
-            if (!license.isPro) {
-              const detected = detectSecrets(processedContent);
-              if (detected.length > 0) {
-                mcpLog(`${colors.redBold}🚫  [PrivacyScrubber] API Key / Secret (${detected.join(', ')}) detected! Request BLOCKED to protect your data (Requires PRO Profile).${colors.reset}\n${colors.cyan}👉  Upgrade at: https://privacyscrubber.com/pricing?utm_source=mcp_cli&utm_medium=terminal${colors.reset}\n`);
-                return {
-                  isError: true,
-                  content: [{ type: "text", text: `Error: API Key / Secret (${detected.join(', ')}) detected! Request BLOCKED to protect your data. Sanitizing DevOps secrets requires a PRO license. Get a key at: https://privacyscrubber.com/pricing` }]
-                };
-              }
-            }
-
-            const sanitized = performSanitization(processedContent, finalProfile, sessionIgnoreList);
+            const sanitized = performSanitization(content, finalProfile, sessionIgnoreList);
             const { scrubbedText, newTokens } = sanitized;
             const telemetry = buildCisoAuditTelemetry(newTokens);
             const receiptMarkdown = formatAuditReceipt(telemetry);
@@ -866,8 +795,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
 
             return {
               content: [
-                { type: "text", text: combinedOutput },
-                ...extraBlocks.filter(Boolean)
+                { type: "text", text: combinedOutput }
               ]
             };
           } catch (pdfError) {
@@ -890,40 +818,9 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
             });
 
             const targetProfile = profile.trim();
-            const isAdvanced = targetProfile.toLowerCase() !== "general";
-
             let finalProfile = targetProfile;
-            const extraBlocks = [];
-
-            const limitStatus = checkFreeTierLimit(license.isPro);
-            if (limitStatus.blocked) {
-              return {
-                isError: true,
-                content: [{ type: "text", text: `Error: Free tier daily limit exhausted (${FREE_TIER_DAILY_LIMIT} requests). Please set your PRO license key to continue. Get a key at: https://privacyscrubber.com/pricing` }]
-              };
-            }
 
-            const charLimit = (isAdvanced && !license.isPro) ? 5000 : 15000;
-            if (isAdvanced && !license.isPro) {
-              mcpLog(`${colors.yellowBold}⚠️  [PrivacyScrubber] Profile '${targetProfile}' active on Free Tier (5,000 char limit).${colors.reset}\n${colors.cyan}👉  Get a PRO key for unlimited use: https://privacyscrubber.com/pricing?utm_source=mcp_cli&utm_medium=terminal${colors.reset}\n`);
-              extraBlocks.push(buildUpsellBlock(`Profile '${targetProfile}' active (Free Tier limit: 5,000 chars). Upgrade to PRO for unlimited text.`));
-            }
-
-            const { processedText: processedContent, wasTruncated } = truncateIfFree(content, license.isPro, charLimit);
-            if (wasTruncated) extraBlocks.push(buildUpsellBlock(`File content was truncated to ${charLimit.toLocaleString()} characters (Free Tier limit).`));
-
-            if (!license.isPro) {
-              const detected = detectSecrets(processedContent);
-              if (detected.length > 0) {
-                mcpLog(`${colors.redBold}🚫  [PrivacyScrubber] API Key / Secret (${detected.join(', ')}) detected! Request BLOCKED to protect your data (Requires PRO Profile).${colors.reset}\n${colors.cyan}👉  Upgrade at: https://privacyscrubber.com/pricing?utm_source=mcp_cli&utm_medium=terminal${colors.reset}\n`);
-                return {
-                  isError: true,
-                  content: [{ type: "text", text: `Error: API Key / Secret (${detected.join(', ')}) detected! Request BLOCKED to protect your data. Sanitizing DevOps secrets requires a PRO license. Get a key at: https://privacyscrubber.com/pricing` }]
-                };
-              }
-            }
-
-            const sanitized = performSanitization(processedContent, finalProfile, sessionIgnoreList);
+            const sanitized = performSanitization(content, finalProfile, sessionIgnoreList);
             const { scrubbedText, newTokens } = sanitized;
             const telemetry = buildCisoAuditTelemetry(newTokens);
             const receiptMarkdown = formatAuditReceipt(telemetry);
@@ -931,8 +828,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
 
             return {
               content: [
-                { type: "text", text: combinedOutput },
-                ...extraBlocks.filter(Boolean)
+                { type: "text", text: combinedOutput }
               ]
             };
           } catch (xlsxError) {
@@ -970,9 +866,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
       const targetProfile = profile.trim();
       const isAdvanced = targetProfile.toLowerCase() !== "general";
       const license = checkLicenseStatus();
-
       let finalProfile = targetProfile;
-      const extraBlocks = [];
 
       const limitStatus = checkFreeTierLimit(license.isPro);
       if (limitStatus.blocked) {
@@ -984,23 +878,10 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
 
       const charLimit = (isAdvanced && !license.isPro) ? 5000 : 15000;
       if (isAdvanced && !license.isPro) {
-        mcpLog(`${colors.yellowBold}⚠️  [PrivacyScrubber] Profile '${targetProfile}' active on Free Tier (5,000 char limit).${colors.reset}\n${colors.cyan}👉  Get a PRO key for unlimited use: https://privacyscrubber.com/pricing?utm_source=mcp_cli&utm_medium=terminal${colors.reset}\n`);
-        extraBlocks.push(buildUpsellBlock(`Profile '${targetProfile}' active (Free Tier limit: 5,000 chars). Upgrade to PRO for unlimited text.`));
+        mcpLog(`${colors.yellowBold}⚠️  [PrivacyScrubber] Profile '${targetProfile}' active on Free Tier (5,000 char limit).${colors.reset}\n`);
       }
 
-      const { processedText: processedContent2, wasTruncated: wasTruncated2 } = truncateIfFree(content, license.isPro, charLimit);
-      if (wasTruncated2) extraBlocks.push(buildUpsellBlock(`File content was truncated to ${charLimit.toLocaleString()} characters (Free Tier limit).`));
-
-      if (!license.isPro) {
-        const detected = detectSecrets(processedContent2);
-        if (detected.length > 0) {
-          mcpLog(`${colors.redBold}🚫  [PrivacyScrubber] API Key / Secret (${detected.join(', ')}) detected! Request BLOCKED to protect your data (Requires PRO Profile).${colors.reset}\n${colors.cyan}👉  Upgrade at: https://privacyscrubber.com/pricing?utm_source=mcp_cli&utm_medium=terminal${colors.reset}\n`);
-          return {
-            isError: true,
-            content: [{ type: "text", text: `Error: API Key / Secret (${detected.join(', ')}) detected! Request BLOCKED to protect your data. Sanitizing DevOps secrets requires a PRO license. Get a key at: https://privacyscrubber.com/pricing` }]
-          };
-        }
-      }
+      const { processedText: processedContent2 } = truncateIfFree(content, license.isPro, charLimit);
 
       const { scrubbedText, newTokens } = performSanitization(processedContent2, finalProfile, sessionIgnoreList);
       const telemetry = buildCisoAuditTelemetry(newTokens);
@@ -1008,8 +889,7 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
 
       return {
         content: [
-          { type: "text", text: scrubbedText + receiptMd },
-          ...extraBlocks.filter(Boolean)
+          { type: "text", text: scrubbedText + receiptMd }
         ]
       };
     }
@@ -1159,8 +1039,8 @@ server.setRequestHandler(CallToolRequestSchema, async (request) => {
       const tier = license.isPro ? 'PRO' : 'FREE';
       const tierIcon = license.isPro ? '✅' : '🔓';
       const profileList = license.isPro
-        ? 'All 23 profiles active (General, Dev, Medical, Legal, Finance, HR…)'
-        : 'General only — PRO unlocks 22 industry profiles';
+        ? 'All 25 profiles active (General, Dev, Medical, Legal, Finance, HR…)'
+        : 'General only — PRO unlocks 25 industry profiles';
       const sizeLimit = license.isPro ? 'Unlimited' : '15,000 characters per request';
 
       const configPath = resolveConfigPath();

package/manifest.json

@@ -1,7 +1,7 @@
 {
   "manifest_version": "0.3",
   "name": "privacyscrubber/pii-masking-mcp",
-  "version": "1.7.1",
+  "version": "2.0.3",
   "description": "CISO-Approved Zero-Trust PII & Secrets Redaction MCP Server for Cursor, Windsurf, and Claude Desktop. Prevent API leaks and comply with HIPAA/SOC 2 locally.",
   "author": {
     "name": "PrivacyScrubber",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@privacyscrubber/mcp-server",
-  "version": "2.0.0",
+  "version": "2.0.3",
   "mcpName": "io.github.moxno/privacyscrubber-mcp",
   "description": "CISO-Approved Zero-Trust PII & Secrets Redaction MCP Server for Cursor, Windsurf, and Claude Desktop. Prevent API leaks and comply with HIPAA/SOC 2 locally.",
   "main": "index.js",

package/pii-masking-run.js

@@ -69,38 +69,20 @@ const DEVOPS_SECRETS_DETECTOR = [
   { name: 'Database/API Secret', regex: /\b(DB|POSTGRES|REDIS|MYSQL|AWS|SECRET|PASSWORD|TOKEN|API|KEY)[A-Z0-9_]*\s*[:=]\s*[^ \t\r\n"']{8,}\b/gi }
 ];
 
-const PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----
-MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1jZ9X4rO5C9U0qK57V1
-hJoYSkE4vLpcVYOt1FhRwEHs1APDSyss0HixboLz2eW2XQf2NbwajWtNlyxvgczO
-KE6ClnLomtsaKywwqB4alzdYnnnFJttFPjwmgPSO7D9AgN9sYaVkXOaOFrIZ90Ng
-TRhSHUeL7ReltWlCHwz9xf5m2FrKtxr2VBlEoyPjsFzalHMey1EX+yXe81zM7IIi
-t1Z8agLzo7WIfNBAIWmRlerTplaFFZrQgdF5g/Y0n8IIMZOtadgoY8E855psDNZV
-7wIDAQAB
------END PUBLIC KEY-----`;
+let LicenseManager = require('./ps-license-manager.js');
+if (!LicenseManager || typeof LicenseManager.validate !== 'function') {
+  LicenseManager = global.LicenseManager;
+}
 
 function checkLicenseStatus() {
   const key = (process.env.PRIVACYSCRUBBER_KEY || "").trim();
-  if (!key) return { isPro: false, error: "No license key provided." };
-
-  try {
-    const [payloadBase64, signatureBase64] = key.split('.');
-    const verifier = crypto.createVerify('SHA256');
-    verifier.update(payloadBase64);
-    const isVerified = verifier.verify(PUBLIC_KEY, signatureBase64, 'base64');
-    
-    if (!isVerified) return { isPro: false, error: "Signature verification failed." };
-
-    const payload = JSON.parse(Buffer.from(payloadBase64, 'base64').toString('utf8'));
-    if (payload.expires && payload.expires < Math.floor(Date.now() / 1000)) {
-      return { 
-        isPro: false, 
-        error: `License expired on ${new Date(payload.expires * 1000).toLocaleDateString()}` 
-      };
-    }
-    return { isPro: true, error: null };
-  } catch (e) {
-    return { isPro: false, error: "Error parsing license: " + e.message };
+  if (!key) return { isPro: false, type: null, error: "No license key provided." };
+
+  const result = LicenseManager.validate(key);
+  if (!result.valid) {
+    return { isPro: false, type: null, error: result.reason || "Invalid license format or signature." };
   }
+  return { isPro: true, type: result.tier, error: null };
 }
 
 function resolveConfigPath() {