MCP Security Sanitizer
Redacts common secrets, email addresses, and phone numbers.
Installation
Ajoutez ceci à la configuration MCP de votre client (Claude Desktop : claude_desktop_config.json ; Cursor : .cursor/mcp.json ; VS Code et les autres utilisent la même forme « mcpServers »).
claude mcp add --transport sse mcp-security-sanitizer 'https://mcp-security-sanitizer-mk-server.onrender.com/sse'{
"mcpServers": {
"mcp-security-sanitizer": {
"type": "sse",
"url": "https://mcp-security-sanitizer-mk-server.onrender.com/sse"
}
}
}Documentation
Tirée du README du projet sur GitHub, actualisée chaque semaine. Les liens ouvrent GitHub.
MCP Security Sanitizer
A small MCP server that provides local, regex-based tools for redacting common secrets and personally identifiable information (PII).
Use the published server
This project is configured for publication in the
official MCP Registry
under the server name io.github.kansal-mukul/mcp-security-sanitizer.
After publishing, search for that name and add the server to an MCP client
that supports remote servers over SSE.
You can also add the endpoint directly in a client that supports SSE:
https://mcp-security-sanitizer-mk-server.onrender.com/sseFor example, in VS Code, add this to .vscode/mcp.json in your workspace:
{
"servers": {
"mcp-security-sanitizer": {
"type": "sse",
"url": "https://mcp-security-sanitizer-mk-server.onrender.com/sse"
}
}
}After connecting, select one of the tools below and provide its text
argument. The Render free service may take about a minute to respond when it
has been idle and needs to wake up.
Regex matching only recognizes the patterns implemented here. It cannot guarantee detection of every secret or PII value. Validate the patterns against your requirements before relying on this service.
Tools
| Tool | Behavior |
|---|---|
mask_api_keys_and_secrets(text) | Redacts OpenAI-style sk-... keys, bearer tokens, and common named key/secret/password/token assignments. |
mask_pii_data(text) | Redacts email addresses and common North American phone numbers. |
audit_text_for_risks(text) | Counts recognizable secrets, email addresses, and phone numbers. |
Run locally
Requires Python 3.11+ and uv.
uv sync
uv run server.pyThe server listens on http://localhost:8000/sse.
Hosting
The public MCP server is hosted on Render at
https://mcp-security-sanitizer-mk-server.onrender.com/sse.
The Registry entry above points to this live service. If you want to host a
separate copy, create a Render Web Service from this repository; Render can
use the included render.yaml configuration and assigns the public URL and
port automatically.
The service is public and has no authentication. Anyone with its URL can call the sanitizer tools, so do not send real credentials or sensitive personal data unless you add suitable access controls.
Development
Sanitization runs locally in Python and does not call an LLM. Add tests for the secret and PII formats relevant to your environment before relying on the service for compliance.
Connect
- GitHub: MCP Security Sanitizer
- MCP Registry: View the server listing
- LinkedIn: Mukul Kansal
Questions fréquentes
Qu'est-ce que MCP Security Sanitizer ?
Redacts common secrets, email addresses, and phone numbers.
Comment installer MCP Security Sanitizer ?
Il fonctionne comme serveur distant. Dans Claude Code : claude mcp add --transport sse mcp-security-sanitizer 'https://mcp-security-sanitizer-mk-server.onrender.com/sse'. Pour les autres clients, collez la configuration JSON de cette page dans leurs réglages MCP.
Faut-il une clé API pour MCP Security Sanitizer ?
Son entrée au registre n'indique aucune clé ni secret obligatoire. Certaines fonctions peuvent tout de même demander un compte auprès du service auquel il se connecte.
MCP Security Sanitizer est-il open source ?
Son code est public sur GitHub, mais le dépôt ne déclare pas de licence standard.
Qui maintient MCP Security Sanitizer ?
Il est publié par kansal-mukul. AI.tn le référence sans le maintenir ni le recommander.
Issu du registre MCP officiel. Être listé n'est pas une recommandation : vérifiez le code et les permissions d'un serveur avant de lui donner accès à vos données.