Strac MCP DLP
An open-source Model Context Protocol server that gives any AI agent - Claude, Cursor, VS Code, your own - a way to find and strip sensitive data before it reaches the model. It runs locally over stdio via the published package.
People who work with ai security, data loss prevention and dlp and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in Python.
VERIFIED ACTIVE
LAST COMMIT 2026-09-03 · ★ 7 · #82 OF 204 MAINTAINED SECURITY · VERIFIED 2026-09-18
MIT · Python servers · how we verify → /methodology
01 · Install Strac MCP DLP
before you install - you'll need
STRAC_API_KEY
Environment variables documented in the project's README - it lists which are required and which have defaults.
Claude Code
claude mcp add strac-io-strac-mcp-dlp -- uvx strac-mcp-dlp Claude Desktop / Cursor / VS Code - add to config
{
"mcpServers": {
"strac-io-strac-mcp-dlp": {
"command": "uvx",
"args": [
"strac-mcp-dlp"
]
}
}
} Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.
Using another client? Same JSON, different key
Claude Desktop · mcpServers
Cursor · mcpServers
VS Code · servers
Windsurf · mcpServers
Zed · context_servers
Cline · mcpServers
Roo Code · mcpServers
Continue · mcpServers
LibreChat · mcpServers
Gemini CLI · mcpServers
Codex CLI · mcp_servers
Full setup guides: every client.
02 · Evidence
Security posture
What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.
runs as local process (stdio) - runs on your machine with your user's permissions
repo age created 2026-09-02 - young repo, little track record yet
license MIT - declared in the repository
pypi package strac-mcp-dlp - check the name against the project README before installing (PyPI has no namespace ownership)
registry namespace io.github.strac-io is GitHub-verified and matches the repo owner
03 · What Strac MCP DLP can do
Prose above is summarized from the project's README and registry record - no invented capabilities.
Latest releases
v0.1.1 · 2026-09-03
Everything in this release was verified against the live Strac API. · Fixed · Response parsing rewritten against the live API. The published OpenAPI spec does not describe what the API returns: /redact uses snake_case…
v0.1.0 · 2026-09-03
First release. · An MCP server that exposes Strac's detection and redaction API as tools, so any MCP client can find and strip PII, PHI, PCI and secrets in text and files. · Tools · | Tool | Does | · | --- | --- | · |…
04 · Who maintains Strac MCP DLP
Strac MCP DLP is maintained by strac-io. It's the only MCP server we track from this author; the repo dates to Sep 2026.
05 · Facts
- repository
- github.com/strac-io/strac-mcp-dlp
- category
- security - ranked #82 of 204 actively-maintained security servers as of 2026-09-18.
- release cadence
- 2 releases in the last 90 days (latest 2026-09-03)
- registry
- io.github.strac-io/strac-mcp-dlp (active, first published 2026-09-03 · 2 versions)
- packages
- pypi:strac-mcp-dlp
06 · Strac MCP DLP FAQ
What is Strac MCP DLP?
An open-source Model Context Protocol server that gives any AI agent - Claude, Cursor, VS Code, your own - a way to find and strip sensitive data before it reaches the model. It runs locally over stdio via the published package.
Is Strac MCP DLP still maintained?
Yes - as of 2026-09-18, its last commit was 2026-09-03 and it shipped 2 releases in the last 90 days. We re-verify nightly.
How do I install Strac MCP DLP?
Run `uvx strac-mcp-dlp`. The README documents one environment variable (STRAC_API_KEY) to set first. You can also paste the ready-made client config above.
Does Strac MCP DLP run locally?
Yes - it's a stdio server: it runs on your machine (via uvx) with your user's permissions. Your data stays local unless the server itself calls external APIs.
07 · Alternatives to Strac MCP DLP
Alternatives to Strac MCP DLP
Maintained security servers if Strac MCP DLP isn't the fit.
- Treg To OpenRouter for tools and data. Compare catalog providers and call them from one hosted MCP endpoint. ★ 1,627 · 2026-09-18
- SafeDep Vet MCP Protect your AI agents and IDEs from malicious open-source packages. ★ 1,105 · 2026-09-16
- SonarQube MCP Server Analyze code quality and security with SonarQube Server or Cloud directly in AI assistants. ★ 652 · 2026-09-17
- HOL Guard Local-first AI agent security evidence and approval workflows through HOL Guard's stdio MCP server. ★ 625 · 2026-09-18
- Decionis CommerceGate MCP Commerce preflights, D365 authorization, signed evidence, and reports; no marketplace or ERP writes. ★ 533 · 2026-09-18
- Emisar Let AI operate servers without SSH. Choose actions, approve risky changes, and audit every step. ★ 353 · 2026-09-15
Pairs well with
Servers that cover what Strac MCP DLP doesn't - only shown when the pairing reason fits the companion.
More security MCP servers · AI AppSec · Tenant Isolation · Code Inspectus · Wass MCP
More Python MCP servers · Adam Framework · Infra Node · DB MCP Server · Polar Health Data (self-hosted) · Sugra API · see all