Privacyscrubber MCP
CISO-Approved Zero-Trust PII & Secrets Redaction MCP Server for Cursor, Windsurf, and Claude Desktop. Locally scrubs PII, secrets, credentials, and custom regex rules from files and text contexts before they reach remote LLM providers to prevent API leaks and ensure HIPAA/SOC 2 compliance at the developer endpoint.
People who work with data security, masking methods and pii and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in JavaScript.
VERIFIED ACTIVE
LAST COMMIT 2026-09-16 · ★ 2 · #45 OF 204 MAINTAINED SECURITY · VERIFIED 2026-09-18
MIT · JavaScript servers · how we verify → /methodology
01 · Install Privacyscrubber MCP
before you install - you'll need
PRIVACYSCRUBBER_KEY is optional or environment-specific per the README.
Claude Code
claude mcp add moxno-privacyscrubber-mcp -- npx -y @privacyscrubber/mcp-server Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"moxno-privacyscrubber-mcp": {
"command": "npx",
"args": [
"-y",
"@privacyscrubber/mcp-server"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions
license MIT - declared in the repository
npm package @privacyscrubber/mcp-server - the @privacyscrubber scope differs from the repo owner (moxno); confirm it's the project's official package
registry namespace io.github.moxno is GitHub-verified and matches the repo owner
03 · What Privacyscrubber MCP can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
Latest releases
v2.2.0 · 2026-09-14
PrivacyScrubber MCP Server v2.2.0 · Highlights · Trust Boundary & Threat Model Specification (SECURITY_MODEL.md): · - Formal documentation of in-process defense-in-depth sanitization vs network airlocks.…
04 · Who maintains Privacyscrubber MCP
privacyscrubber-mcp is maintained by moxno. It's the only MCP server we track from this author; the repo dates to Jul 2026.
05 · Facts
- repository
- github.com/moxno/privacyscrubber-mcp
- category
- security - ranked #45 of 204 actively-maintained security servers as of 2026-09-18.
- release cadence
- 1 release in the last 90 days (latest 2026-09-14)
- registry
- io.github.moxno/privacyscrubber-mcp (active, first published 2026-07-11)
- packages
- npm:@privacyscrubber/mcp-server
06 · Privacyscrubber MCP FAQ
What is Privacyscrubber MCP?
CISO-Approved Zero-Trust PII & Secrets Redaction MCP Server for Cursor, Windsurf, and Claude Desktop. Locally scrubs PII, secrets, credentials, and custom regex rules from files and text contexts before they reach remote LLM providers to prevent API leaks and ensure HIPAA/SOC 2 compliance at the developer endpoint.
Is Privacyscrubber MCP still maintained?
Yes - as of 2026-09-18, its last commit was 2026-09-16 and it shipped 1 release in the last 90 days. We re-verify nightly.
How do I install Privacyscrubber MCP?
Run `npx -y @privacyscrubber/mcp-server`. The README documents one environment variable (PRIVACYSCRUBBER_KEY) to set first. PRIVACYSCRUBBER_KEY is optional or environment-specific per the README. You can also paste the ready-made client config above.
Does Privacyscrubber MCP run locally?
Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to Privacyscrubber MCP
Alternatives to Privacyscrubber MCP
Maintained security servers if Privacyscrubber MCP isn't the fit.
- Treg To OpenRouter for tools and data. Compare catalog providers and call them from one hosted MCP endpoint. ★ 1,627 · 2026-09-18
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,105 · 2026-09-16
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 652 · 2026-09-17
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 625 · 2026-09-18
- Decionis CommerceGate MCP Commerce preflights, D365 authorization, signed evidence, and reports; no marketplace or ERP writes. ★ 533 · 2026-09-18
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 353 · 2026-09-15
Pairs well with
Servers that cover what Privacyscrubber MCP doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · Agent Bom · Mythos Agent · Server Malcolm · Repository Intelligence · pdfnative MCP - PDF generation, PAdES signing & introspection
More JavaScript MCP servers · iCloud MCP · Rippr MCP · Xendit MCP · Gitstandup · Multimail Dev MCP Server · see all