@privacyscrubber/mcp-server 2.3.9 → 2.4.0

package/.well-known/mcp/server-card.json

@@ -0,0 +1,78 @@
+{
+  "serverInfo": {
+    "name": "privacyscrubber/pii-masking-mcp",
+    "version": "1.6.9"
+  },
+  "tools": [
+    {
+      "name": "sanitize_text",
+      "description": "Locally scrubs PII, secrets, and credentials (like API keys, passwords, emails, phones, names) from code, logs, or text. Replaces them with safe placeholders (e.g., [EMAIL_1], [API_KEY_1]). Keep your data secure before passing it to any LLM.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "text": {
+            "type": "string",
+            "description": "The raw text, code, or logs to sanitize."
+          },
+          "profile": {
+            "type": "string",
+            "description": "The detection profile to use. Available: 'General' (Free), or PRO profiles: 'Dev' (Engineering/Code), 'Medical', 'Pharma', 'Legal', 'Compliance', 'CCPA', 'Finance', 'Bizops', 'Sales', 'WealthMgmt', 'Insurance', 'Accounting', 'HR', 'Security', 'Marketing', 'Support', 'RealEstate', 'Agents', 'Academic', 'Creative', 'Tech', 'Personal'. Defaults to 'General'."
+          }
+        },
+        "required": ["text"]
+      }
+    },
+    {
+      "name": "reveal_text",
+      "description": "Replaces masked tokens (e.g., [EMAIL_1], [API_KEY_1]) in the LLM's response back with the original private data from the local volatile RAM-only session map.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "text": {
+            "type": "string",
+            "description": "The AI generated response containing placeholders to restore."
+          }
+        },
+        "required": ["text"]
+      }
+    },
+    {
+      "name": "sanitize_file",
+      "description": "Reads a local file, sanitizes its contents using the selected profile, and outputs the safe version for AI analysis. Securely keeps original identifiers in memory.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {
+          "file_path": {
+            "type": "string",
+            "description": "Absolute path to the file to sanitize."
+          },
+          "profile": {
+            "type": "string",
+            "description": "The detection profile to use. Available: 'General' (Free), or PRO profiles: 'Dev' (Engineering/Code), 'Medical', 'Pharma', 'Legal', 'Compliance', 'CCPA', 'Finance', 'Bizops', 'Sales', 'WealthMgmt', 'Insurance', 'Accounting', 'HR', 'Security', 'Marketing', 'Support', 'RealEstate', 'Agents', 'Academic', 'Creative', 'Tech', 'Personal'. Defaults to 'General'."
+          }
+        },
+        "required": ["file_path"]
+      }
+    },
+    {
+      "name": "create_default_config",
+      "description": "Creates a default 'privacyscrubber.json' configuration file in the active workspace root directory if one does not exist. Includes template structures for custom regex rules and exclusion bypass patterns.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {},
+        "required": []
+      }
+    },
+    {
+      "name": "check_status",
+      "description": "Returns the current PrivacyScrubber MCP tier, session usage, available profiles, and PRO upgrade instructions. Call this to see your license status or get setup help.",
+      "inputSchema": {
+        "type": "object",
+        "properties": {},
+        "required": []
+      }
+    }
+  ],
+  "resources": [],
+  "prompts": []
+}

package/LICENSE

@@ -0,0 +1,23 @@
+# PrivacyScrubber MCP Server License Agreement
+
+**Copyright (c) 2026 Ilya Sibiryakov (BrandMeWeb). All Rights Reserved.**
+
+### 1. Grant of License — Community / Development Tier
+Subject to the terms and conditions of this Agreement, BrandMeWeb grants you a personal, worldwide, non-exclusive, non-transferable license to install and run the PrivacyScrubber MCP Server (`@privacyscrubber/mcp-server`) in local IDE environments (such as Cursor, Windsurf, Claude Desktop, and CLI tools) solely for personal evaluation, development, and standard local data sanitization under published Free Tier quotas.
+
+### 2. Commercial, Multi-User & Enterprise Tier
+Use of this software within commercial organizations, production automated pipelines, CI/CD gates, high-volume batch processing, multi-seat corporate teams, or the invocation of the 30 Specialized Industry Profiles (HIPAA PHI, Financial PAN/IBAN, Legal Privilege, DevSecOps Cloud Secrets, Automotive, Telecom, Biotech) requires a valid commercial license key:
+- **PrivacyScrubber PRO**: Individual professional use ($15/mo or $110 Lifetime).
+- **PrivacyScrubber TEAMS**: Team and small enterprise seats ($99/mo flat).
+- **PrivacyScrubber Enterprise / Air-Gapped**: Dedicated corporate VPC clusters, Nitro Enclaves, and custom profile calibration ($12,000/yr).
+
+Licensing and key activation: https://privacyscrubber.com/pricing
+
+### 3. Restrictions on Reverse-Engineering & Redistribution
+Except as expressly authorized herein, you may not:
+- Decompile, disassemble, reverse-engineer, or attempt to reconstruct the underlying pattern databases, regular expression taxonomies, or proprietary tokenization finite-state machines.
+- Extract, harvest, or scrape the 30 specialized industry entity taxonomies to train competing machine learning models or build competing redaction products.
+- Distribute, sublicense, lease, or commercially exploit standalone copies of the engine without an active Enterprise OEM agreement.
+
+### 4. Disclaimer of Warranties & Limitation of Liability
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY ARISING FROM, OUT OF, OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

package/README.md

@@ -2,6 +2,8 @@
 
 [![NPM Version](https://img.shields.io/npm/v/@privacyscrubber/mcp-server?color=blue)](https://www.npmjs.com/package/@privacyscrubber/mcp-server)
 [![NPM Downloads](https://img.shields.io/npm/dm/@privacyscrubber/mcp-server?color=3b82f6)](https://www.npmjs.com/package/@privacyscrubber/mcp-server)
+[![PyPI Version](https://img.shields.io/pypi/v/privacyscrubber-mcp.svg?color=blue)](https://pypi.org/project/privacyscrubber-mcp/)
+[![PyPI Downloads](https://img.shields.io/pypi/dm/privacyscrubber-mcp.svg?color=3b82f6)](https://pypi.org/project/privacyscrubber-mcp/)
 [![NPM SDK](https://img.shields.io/npm/v/@privacyscrubber/sdk?label=%40privacyscrubber%2Fsdk&color=10b981)](https://www.npmjs.com/package/@privacyscrubber/sdk)
 [![Presidio Alternative](https://img.shields.io/badge/Presidio%20Alternative-Node.js%20%26%20TS-0078D4.svg)](https://www.npmjs.com/package/@privacyscrubber/sdk)
 [![Zero Dependencies](https://img.shields.io/badge/dependencies-0-success.svg)](https://www.npmjs.com/package/@privacyscrubber/sdk)
@@ -223,7 +225,7 @@ When AI IDEs (Cursor, Claude Desktop, Windsurf) connect to model providers, deve
    The MCP server communicates exclusively over local standard input/output (`stdio`) child processes spawned by your IDE. It opens **zero external listening ports** and initiates **zero remote network requests**.
 2. **Volatile RAM-Only Token Map**:
    The mapping table between synthetic tokens (`[AWS_KEY_1]`, `[EMAIL_1]`) and raw cleartext is maintained exclusively in ephemeral node memory and is wiped the moment your IDE session closes.
-3. **Deterministic AST Lookarounds vs Cloud Proxy Overhead**:
+3. **Local ZTDS™ In-Memory Engine vs Cloud Proxy Overhead**:
    Unlike cloud DLP gateways (Nightfall, Skyflow) that add 200–400ms latency and transmit unencrypted code to third parties, `@privacyscrubber/mcp-server` runs locally in <2ms with zero data egress.
 4. **Permanent Standards & Academic Validation**:
    - **IETF Specification**: [draft-sibiryakov-ztds-protocol-01](https://datatracker.ietf.org/doc/draft-sibiryakov-ztds-protocol/) — Revision 01 · 2026-09-23 · 13 pages
@@ -254,13 +256,50 @@ Add this to your Claude Desktop config file:
 }
 ```
 
-### Cursor / Windsurf
-1. Navigate to Settings -> Features -> MCP.
-2. Add new MCP server:
-    *   **Name:** `privacyscrubber`
-    *   **Type:** `command`
-    *   **Command:** `npx -y @privacyscrubber/mcp-server`
-3. Optional: Set `PRIVACYSCRUBBER_KEY` as an environment variable in your system shell.
+### Cursor
+
+Add to your project's `.cursor/mcp.json` (workspace) or `~/.cursor/mcp.json` (global):
+
+```json
+{
+  "mcpServers": {
+    "privacyscrubber": {
+      "command": "npx",
+      "args": ["-y", "@privacyscrubber/mcp-server"],
+      "env": {
+        "PRIVACYSCRUBBER_KEY": "YOUR_PRO_OR_TEAMS_LICENSE_KEY"
+      }
+    }
+  }
+}
+```
+
+*Or via Cursor GUI:* Open **Settings** (<kbd>Cmd/Ctrl + ,</kbd>) &rarr; **Features** &rarr; **MCP** &rarr; **+ Add New MCP Tool**:
+- **Name:** `privacyscrubber`
+- **Type:** `command`
+- **Command:** `npx -y @privacyscrubber/mcp-server`
+
+### Windsurf (Codeium)
+
+Add to `~/.codeium/windsurf/mcp_config.json`:
+
+```json
+{
+  "mcpServers": {
+    "privacyscrubber": {
+      "command": "npx",
+      "args": ["-y", "@privacyscrubber/mcp-server"],
+      "env": {
+        "PRIVACYSCRUBBER_KEY": "YOUR_PRO_OR_TEAMS_LICENSE_KEY"
+      }
+    }
+  }
+}
+```
+
+*Or via Windsurf GUI:* Open **Settings** &rarr; **MCP Settings** &rarr; add new command server `npx -y @privacyscrubber/mcp-server`.
+
+> Ready-to-copy JSON templates for all supported clients are available in [`examples/configs/`](examples/configs/).
 
 ### Cline / Roo Code
 Add to `cline_mcp_settings.json`:
@@ -443,7 +482,7 @@ Returns a visual dashboard showing your current tier, session request count, act
 *   **Response Example (Free Tier):**
     ```
     ╔══════════════════════════════════════════════════╗
-    ║       PrivacyScrubber MCP Server v2.3.8          ║
+    ║       PrivacyScrubber MCP Server v2.4.0          ║
     ╠══════════════════════════════════════════════════╣
     ║  🔓 Tier: FREE                                   ║
     ║  📊 Session requests: 5                          ║
@@ -658,8 +697,8 @@ MIT © [Ilya Sibiryakov](https://privacyscrubber.com) (BrandMeWeb)
 The Zero-Trust Data Sanitization (ZTDS) architecture, in-memory deterministic tokenization, cryptographic session handoff, and stdio execution methods implemented in this package are proprietary technology of Ilya Sibiryakov (BrandMeWeb) and are protected under **Patent Pending** status:
 
 - **Legal Status:** U.S. & International Patents Pending
-- **Priority Framework:** Paris Convention Art. 4 & 35 U.S.C. § 119 Priority (locked through September 14, 2027)
-- **Filing / Priority Date:** September 14, 2026
+- **Priority Framework:** Paris Convention Art. 4 & 35 U.S.C. § 119 Priority (Active 12-Month Window)
+- **Patent Status:** U.S. & International Patents Pending (Priority Locked)
 - **Official Title:** *SYSTEM AND METHOD FOR CLIENT-SIDE ZERO-TRUST DATA SANITIZATION AND CRYPTOGRAPHIC SESSION HANDOFF IN ARTIFICIAL INTELLIGENCE WORKFLOWS*
 - **Patent Disclosures Hub:** [privacyscrubber.com/patents/](https://privacyscrubber.com/patents/) (formal verification via counsel NDA).