Privacyscrubber MCP

CISO-Approved Zero-Trust PII & Secrets Redaction MCP Server for Cursor, Windsurf, and Claude Desktop. Locally scrubs PII, secrets, credentials, and custom regex rules from files and text contexts before they reach remote LLM providers to prevent API leaks and ensure HIPAA/SOC 2 compliance at the developer endpoint.

People who work with data security, masking methods and pii and want it reachable from Claude, Cursor, VS Code, or another MCP client. The project is written in JavaScript.

VERIFIED ACTIVE

LAST COMMIT 2026-09-16 · ★ 2 · #45 OF 204 MAINTAINED SECURITY · VERIFIED 2026-09-18

MIT · JavaScript servers · how we verify → /methodology

01 · Install Privacyscrubber MCP

before you install - you'll need

PRIVACYSCRUBBER_KEY is optional or environment-specific per the README.

Claude Code

claude mcp add moxno-privacyscrubber-mcp -- npx -y @privacyscrubber/mcp-server

Claude Desktop / Cursor / VS Code - add to config

{
  "mcpServers": {
    "moxno-privacyscrubber-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "@privacyscrubber/mcp-server"
      ]
    }
  }
}

Same JSON for Cursor. For VS Code, rename the top-level key from `mcpServers` to `servers`.

Using another client? Same JSON, different key

Claude Desktop · mcpServers

Cursor · mcpServers

VS Code · servers

Windsurf · mcpServers

Zed · context_servers

Cline · mcpServers

Roo Code · mcpServers

Continue · mcpServers

LibreChat · mcpServers

Gemini CLI · mcpServers

Codex CLI · mcp_servers

Full setup guides: every client.

02 · Evidence

Security posture

What to check before giving this server access to your agent - from the registry, GitHub, and our own probes. We don't score safety; we show what's verifiable.

runs as local process (stdio) - runs on your machine with your user's permissions

license MIT - declared in the repository

npm package @privacyscrubber/mcp-server - the @privacyscrubber scope differs from the repo owner (moxno); confirm it's the project's official package

registry namespace io.github.moxno is GitHub-verified and matches the repo owner

03 · What Privacyscrubber MCP can do

Prose above is summarized from the project's README and registry record - no invented capabilities.

Latest releases

v2.2.0 · 2026-09-14

PrivacyScrubber MCP Server v2.2.0 · Highlights · Trust Boundary & Threat Model Specification (SECURITY_MODEL.md): · - Formal documentation of in-process defense-in-depth sanitization vs network airlocks.…

04 · Who maintains Privacyscrubber MCP

privacyscrubber-mcp is maintained by moxno. It's the only MCP server we track from this author; the repo dates to Jul 2026.

05 · Facts

category
security - ranked #45 of 204 actively-maintained security servers as of 2026-09-18.
release cadence
1 release in the last 90 days (latest 2026-09-14)
registry
io.github.moxno/privacyscrubber-mcp (active, first published 2026-07-11)
packages
npm:@privacyscrubber/mcp-server

06 · Privacyscrubber MCP FAQ

What is Privacyscrubber MCP?

CISO-Approved Zero-Trust PII & Secrets Redaction MCP Server for Cursor, Windsurf, and Claude Desktop. Locally scrubs PII, secrets, credentials, and custom regex rules from files and text contexts before they reach remote LLM providers to prevent API leaks and ensure HIPAA/SOC 2 compliance at the developer endpoint.

Is Privacyscrubber MCP still maintained?

Yes - as of 2026-09-18, its last commit was 2026-09-16 and it shipped 1 release in the last 90 days. We re-verify nightly.

How do I install Privacyscrubber MCP?

Run `npx -y @privacyscrubber/mcp-server`. The README documents one environment variable (PRIVACYSCRUBBER_KEY) to set first. PRIVACYSCRUBBER_KEY is optional or environment-specific per the README. You can also paste the ready-made client config above.

Does Privacyscrubber MCP run locally?

Yes - it's a stdio server: it runs on your machine (via npx) with your user's permissions. Your data stays local unless the server itself calls external APIs.

07 · Alternatives to Privacyscrubber MCP