npm - @privacyscrubber/mcp-server - Versions diffs - 2.1.0 → 2.2.1 - Mend

@privacyscrubber/mcp-server 2.1.0 → 2.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (10) hide show

package/README.md CHANGED Viewed

@@ -14,6 +14,8 @@
 [![There's An AI For That](https://img.shields.io/badge/There's_An_AI_For_That-Live-06b6d4.svg)](https://theresanaiforthat.com/ai/privacy-scrubber/)
 [![Security: 100% Local](https://img.shields.io/badge/Security-100%25%20Local-emerald)](https://privacyscrubber.com)
 [![Parity: 100% Core Match](https://img.shields.io/badge/Parity-100%25%20Core%20Match-blueviolet)](https://privacyscrubber.com)
+[![Patent Pending](https://img.shields.io/badge/Patent-Pending%20(ILPO%20331905)-06b6d4.svg)](https://privacyscrubber.com/patents/)
+[![GitHub Stars](https://img.shields.io/github/stars/moxno/privacyscrubber-mcp?style=social)](https://github.com/moxno/privacyscrubber-mcp)
 **CISO-Approved Zero-Trust PII & Secrets Redaction MCP Server for Cursor, Windsurf, and Claude Desktop.**
 Locally scrubs PII, secrets, credentials, and custom regex rules from files and text contexts before they reach remote LLM providers to prevent API leaks and ensure HIPAA/SOC 2 compliance at the developer endpoint.
@@ -96,6 +98,28 @@ Add this to your Claude Desktop config file:
     *   **Command:** `npx -y @privacyscrubber/mcp-server`
 3. Optional: Set `PRIVACYSCRUBBER_KEY` as an environment variable in your system shell.
+### Cline / Roo Code
+Add to `cline_mcp_settings.json`:
+```json
+{
+  "mcpServers": {
+    "privacyscrubber": {
+      "command": "npx",
+      "args": ["-y", "@privacyscrubber/mcp-server"],
+      "env": {
+        "PRIVACYSCRUBBER_KEY": "YOUR_OPTIONAL_PRO_LICENSE_KEY"
+      }
+    }
+  }
+}
+```
+### Claude Code CLI
+Add directly from your terminal:
+```bash
+claude mcp add privacyscrubber -- npx -y @privacyscrubber/mcp-server
+```
 ---
 ## 🛠️ Provided Tools & JSON-RPC Specifications
@@ -167,35 +191,47 @@ Reads a local file, extracts text, sanitizes it, and returns the redacted templa
     *   `filePath` (string, required): Absolute file path to read and sanitize.
     *   `profile` (string, optional): The industry detection profile.
----
+### 4. `guard_exec` (Command Execution Firewall)
+Safely executes terminal commands in an isolated child process, masking stdout/stderr PII, database credentials, and API keys in local RAM before passing them to the AI agent. Includes a CISO audit receipt in stderr.
-## 🌐 Browser Extension & Web Client
+*   **Arguments:**
+    *   `command` (string, required): The shell command to execute (e.g. `cat .env`, `docker logs web`, `git diff`).
+    *   `cwd` (string, optional): Working directory.
+    *   `profile` (string, optional): Detection profile (defaults to `Dev`).
+    *   `timeout_ms` (number, optional): Timeout in ms (defaults to `15000`).
-Looking for real-time protection directly inside your web browser?
-*   **Chrome Extension:** Get the [PrivacyScrubber Chrome Extension](https://chromewebstore.google.com/detail/privacyscrubber-%E2%80%94-pii-red/pimoejgefeilajmmbpghifdmhdlkgjol) to sanitize prompts directly inside ChatGPT, Claude, and Gemini in real-time.
-*   **Web Sandbox:** Use the zero-server browser sanitization tools at [PrivacyScrubber Homepage](https://privacyscrubber.com/?utm_source=npm&utm_medium=readme&utm_campaign=mcp_server).
+### 5. `guard_read_file` (Credential-Masking File Reader)
+Reads files (.env, configs, source code, database dumps) and tokenizes all passwords, JWTs, and PII in volatile memory, returning safe redacted content for AI reasoning.
-## 📄 License & Commercial Upgrade
+*   **Arguments:**
+    *   `file_path` (string, required): Path to file.
+    *   `profile` (string, optional): Detection profile (defaults to `Dev`).
+    *   `max_lines` (number, optional): Line cap for large files (defaults to `500`).
-By default, the server runs under the **Free Tier** (restricted to 15,000 characters per request and the basic `General` PII profile). To unlock 25 specialized engineering, medical, legal, and financial PII profiles, as well as team-wide custom rules, you can purchase a commercial license.
+### 6. `guard_git_diff` (Pre-Commit & Diff Sanitizer)
+Inspects staged (`--cached`) or unstaged repository diffs, redacting any newly introduced secrets or PII in local RAM before AI code review or commit message generation.
-### Feature Comparison
+*   **Arguments:**
+    *   `staged` (boolean, optional): If `true`, inspects staged changes (`git diff --cached`). Defaults to `false`.
+    *   `cwd` (string, optional): Working directory.
+    *   `profile` (string, optional): Detection profile (defaults to `Dev`).
-| Feature | Free Tier | PRO Tier | TEAMS Tier |
-| :--- | :--- | :--- | :--- |
-| **Volatile Tokenization** | ✅ Yes | ✅ Yes | ✅ Yes |
-| **Standard PII Masking** | ✅ Yes | ✅ Yes | ✅ Yes |
-| **Max Character Length** | 15,000 chars | ♾️ Unlimited | ♾️ Unlimited |
-| **Industry Profiles** | General Only | 25 Profiles | 25 Profiles |
-| **Custom Regex Rules** | ❌ Locked | ♾️ Unlimited | ♾️ Unlimited |
-| **Team Rules Sync (GPO)** | ❌ No | ❌ No | ✅ Yes (Shared Link) |
-| **Licensing Cost** | $0 | **$110 Lifetime** | **$99/mo Flat Rate** |
+### 7. `guard_apply_patch` (Safe Patch Applicator)
+Reverses token placeholders (`[API_KEY_1]`, `[SECRET_1]`) in AI-generated code or text by looking up the local RAM session map, creating a `.bak` backup, and writing authentic cleartext directly to disk. The remote LLM never sees real secrets.
-👉 **[Acquire a PRO / TEAMS License Key at privacyscrubber.com/pricing](https://privacyscrubber.com/pricing?utm_source=npm&utm_medium=readme&utm_campaign=mcp_server)**
+*   **Arguments:**
+    *   `file_path` (string, required): Path to target file.
+    *   `content` (string, required): Content containing tokens to restore on disk.
+    *   `create_backup` (boolean, optional): Backup existing file before write (defaults to `true`).
----
+### 8. `create_agent_rules` (1-Click Agent Rule Injection)
+Automatically scaffolds CISO-grade Zero-Trust directives into `.cursorrules`, `.windsurfrules`, `CLAUDE.md`, `.github/copilot-instructions.md`, or `.clinerules`.
-### 4. `check_status`
+*   **Arguments:**
+    *   `agent_types` (array, optional): `["all"]`, `["cursor"]`, `["windsurf"]`, `["claude_code"]`, `["copilot"]`, `["cline"]`. Defaults to `["all"]`.
+    *   `workspace_dir` (string, optional): Workspace directory.
+### 9. `check_status`
 Returns a visual dashboard showing your current tier, session request count, active profiles, and upgrade instructions. Use it at any time to check your license status or get setup help.
@@ -210,7 +246,7 @@ Returns a visual dashboard showing your current tier, session request count, act
 *   **Response Example (Free Tier):**
     ```
     ╔══════════════════════════════════════════════════╗
-    ║       PrivacyScrubber MCP Server v1.7.1          ║
+    ║       PrivacyScrubber MCP Server v2.2.0          ║
     ╠══════════════════════════════════════════════════╣
     ║  🔓 Tier: FREE                                   ║
     ║  📊 Session requests: 5                          ║
@@ -231,6 +267,52 @@ Returns a visual dashboard showing your current tier, session request count, act
 ---
+## 🛡️ Standalone CLI: `ps-guard`
+PrivacyScrubber bundles `ps-guard` for Unix pipe, pre-commit, and agentic workflows:
+```bash
+# Pipe any output through RAM redaction
+cat .env | npx ps-guard --profile dev
+# Execute commands through the ZTDS safety wrapper
+npx ps-guard -- npm test
+# Review git diff with secrets redacted
+npx ps-guard --diff --staged
+# Generate rules for all AI IDEs (.cursorrules, .windsurfrules, CLAUDE.md, copilot, cline)
+npx ps-guard --rules
+```
+---
+## 🌐 Browser Extension & Web Client
+Looking for real-time protection directly inside your web browser?
+*   **Chrome Extension:** Get the [PrivacyScrubber Chrome Extension](https://chromewebstore.google.com/detail/privacyscrubber-%E2%80%94-pii-red/pimoejgefeilajmmbpghifdmhdlkgjol) to sanitize prompts directly inside ChatGPT, Claude, and Gemini in real-time.
+*   **Web Sandbox:** Use the zero-server browser sanitization tools at [PrivacyScrubber Homepage](https://privacyscrubber.com/?utm_source=npm&utm_medium=readme&utm_campaign=mcp_server).
+## 📄 License & Commercial Upgrade
+By default, the server runs under the **Free Tier** (restricted to 15,000 characters per request and the basic `General` PII profile). To unlock 25 specialized engineering, medical, legal, and financial PII profiles, as well as team-wide custom rules, you can purchase a commercial license.
+### Feature Comparison
+| Feature | Free Tier | PRO Tier | TEAMS Tier |
+| :--- | :--- | :--- | :--- |
+| **Volatile Tokenization** | ✅ Yes | ✅ Yes | ✅ Yes |
+| **Standard PII Masking** | ✅ Yes | ✅ Yes | ✅ Yes |
+| **Max Character Length** | 15,000 chars | ♾️ Unlimited | ♾️ Unlimited |
+| **Industry Profiles** | General Only | 25 Profiles | 25 Profiles |
+| **Custom Regex Rules** | ❌ Locked | ♾️ Unlimited | ♾️ Unlimited |
+| **Team Rules Sync (GPO)** | ❌ No | ❌ No | ✅ Yes (Shared Link) |
+| **Licensing Cost** | $0 | **$110 Lifetime** | **$99/mo Flat Rate** |
+👉 **[Acquire a PRO / TEAMS License Key at privacyscrubber.com/pricing](https://privacyscrubber.com/pricing?utm_source=npm&utm_medium=readme&utm_campaign=mcp_server)**
+---
 ## 🔐 After Purchase: Activate PRO in Your MCP Client
 After purchasing a PRO license at [privacyscrubber.com/pricing](https://privacyscrubber.com/pricing?utm_source=npm&utm_medium=readme&utm_campaign=mcp_server), you will receive a license key. Add it to your MCP client config as an environment variable: `PRIVACYSCRUBBER_KEY`.
@@ -294,7 +376,16 @@ After adding the key, ask your AI agent to call `check_status`:
 Use the check_status tool from PrivacyScrubber MCP
 ```
-The dashboard should show **Tier: PRO** and all profiles unlocked.
+---
+## 🔗 Ecosystem & Production Architecture Guides
+- 🌐 **Web App**: [https://privacyscrubber.com](https://privacyscrubber.com)
+- 📦 **Node.js / TypeScript SDK**: [@privacyscrubber/sdk](https://www.npmjs.com/package/@privacyscrubber/sdk)
+- 🧩 **Chrome Extension**: [Chrome Web Store](https://chromewebstore.google.com/detail/privacyscrubber-%E2%80%94-zero-tr/pimoejgefeilajmmbpghifdmhdlkgjol)
+- 🛡️ **RAG & Vector Databases**: [Sanitizing PII Before Vector DB Ingestion (Pinecone, Chroma, Qdrant)](https://privacyscrubber.com/solutions/dev/rag-vector-database-pii-masking/)
+- 🤖 **LangChain & LlamaIndex**: [In-Memory PII Middleware for AI Agent Pipelines](https://privacyscrubber.com/solutions/agents/langchain-llamaindex-pii-anonymizer/)
+- ⚡ **AWS Comprehend Alternative**: [In-Memory Redaction Without Egress or Cloud Overhead](https://privacyscrubber.com/solutions/dev/aws-comprehend-pii-alternative/)
 ---
@@ -328,4 +419,16 @@ PrivacyScrubber and the Zero-Trust Data Sanitization (ZTDS) protocol are backed
 MIT © [Ilya Sibiryakov](https://privacyscrubber.com) (BrandMeWeb)
+---
+## ⚖️ Intellectual Property & Virtual Patent Marking
+The Zero-Trust Data Sanitization (ZTDS) architecture, in-memory deterministic tokenization, cryptographic session handoff, and stdio execution methods implemented in this package are proprietary technology of Ilya Sibiryakov (BrandMeWeb) and are protected under **Patent Pending** status:
+- **Patent Office:** State of Israel Ministry of Justice, Patent Office (ILPO)
+- **Application Number:** `331905` (Tracking ID: `94221`)
+- **Filing / Priority Date:** September 14, 2026 (Paris Convention Art. 4 & 35 U.S.C. § 119 Priority)
+- **Official Title:** *SYSTEM AND METHOD FOR CLIENT-SIDE ZERO-TRUST DATA SANITIZATION AND CRYPTOGRAPHIC SESSION HANDOFF IN ARTIFICIAL INTELLIGENCE WORKFLOWS*
+- **Virtual Patent Marking:** [privacyscrubber.com/patents/](https://privacyscrubber.com/patents/) in accordance with 35 U.S.C. § 287(a).