English Français العربية

MCP Security Sanitizer

Official registry Productivity

Redacts common secrets, email addresses, and phone numbers.

Source code Documentation

Install

Add this to your client's MCP configuration (Claude Desktop: claude_desktop_config.json; Cursor: .cursor/mcp.json; VS Code and others use the same "mcpServers" shape).

Remote (sse)
Claude Code 
claude mcp add --transport sse mcp-security-sanitizer 'https://mcp-security-sanitizer-mk-server.onrender.com/sse'
JSON configuration (Claude Desktop, Cursor, VS Code) 
{
    "mcpServers": {
        "mcp-security-sanitizer": {
            "type": "sse",
            "url": "https://mcp-security-sanitizer-mk-server.onrender.com/sse"
        }
    }
}

Documentation

From the project's README on GitHub, refreshed weekly. Links open on GitHub.

Contents
  1. MCP Security Sanitizer
  2. Use the published server
  3. Tools
  4. Run locally
  5. Hosting
  6. Development
  7. Connect

MCP Security Sanitizer

A small MCP server that provides local, regex-based tools for redacting common secrets and personally identifiable information (PII).

Use the published server

This project is configured for publication in the official MCP Registry under the server name io.github.kansal-mukul/mcp-security-sanitizer. After publishing, search for that name and add the server to an MCP client that supports remote servers over SSE.

You can also add the endpoint directly in a client that supports SSE:

https://mcp-security-sanitizer-mk-server.onrender.com/sse

For example, in VS Code, add this to .vscode/mcp.json in your workspace:

{
  "servers": {
    "mcp-security-sanitizer": {
      "type": "sse",
      "url": "https://mcp-security-sanitizer-mk-server.onrender.com/sse"
    }
  }
}

After connecting, select one of the tools below and provide its text argument. The Render free service may take about a minute to respond when it has been idle and needs to wake up.

Regex matching only recognizes the patterns implemented here. It cannot guarantee detection of every secret or PII value. Validate the patterns against your requirements before relying on this service.

Tools

ToolBehavior
mask_api_keys_and_secrets(text)Redacts OpenAI-style sk-... keys, bearer tokens, and common named key/secret/password/token assignments.
mask_pii_data(text)Redacts email addresses and common North American phone numbers.
audit_text_for_risks(text)Counts recognizable secrets, email addresses, and phone numbers.

Run locally

Requires Python 3.11+ and uv.

uv sync
uv run server.py

The server listens on http://localhost:8000/sse.

Hosting

The public MCP server is hosted on Render at https://mcp-security-sanitizer-mk-server.onrender.com/sse. The Registry entry above points to this live service. If you want to host a separate copy, create a Render Web Service from this repository; Render can use the included render.yaml configuration and assigns the public URL and port automatically.

The service is public and has no authentication. Anyone with its URL can call the sanitizer tools, so do not send real credentials or sensitive personal data unless you add suitable access controls.

Development

Sanitization runs locally in Python and does not call an LLM. Add tests for the secret and PII formats relevant to your environment before relying on the service for compliance.

Connect

Frequently asked questions

What is MCP Security Sanitizer?

Redacts common secrets, email addresses, and phone numbers.

How do I install MCP Security Sanitizer?

It runs as a remote server. In Claude Code: claude mcp add --transport sse mcp-security-sanitizer 'https://mcp-security-sanitizer-mk-server.onrender.com/sse'. For other clients, paste the JSON configuration from this page into their MCP settings.

Does MCP Security Sanitizer need an API key?

Its registry entry lists no required key or secret. Some features may still need an account with the service it connects to.

Is MCP Security Sanitizer open source?

Its code is public on GitHub, but the repository does not declare a standard license.

Who maintains MCP Security Sanitizer?

It is published by kansal-mukul. AI.tn lists it but does not maintain or endorse it.

From the official MCP Registry. Listing is not an endorsement: review a server's code and permissions before giving it access to your data.