Hidden Tokens

io.github.ai4xeduPublished by GitHub account ai4xeduv2.91.0Updated Nov 7, 2026

Anonymize client files on your computer before Claude reads them; real values restored locally.

The publisher's own server: TabTree

VerifiedSTDIODesktop onlySecurity & Monitoring

Overview

AI-generated overview

A local desktop connector that anonymizes client files on your computer before Claude reads them, restoring the real values locally.

What you can do
  • Anonymizes client files stored on the local computer before an assistant reads them.
  • Keeps the real values on the machine and restores them locally after processing.
  • Runs as a local stdio process bundled as a desktop extension, so no tool list is published in the manifest.
  • No further capabilities are documented in the supplied description, instructions or README.
When to use it
Worth considering when you want an assistant to work with sensitive client documents but prefer that identifying values are replaced before the content is read, with originals kept on your own machine.
Requirements
Runs as a local process on the user's machine via a desktop extension package (stdio transport); desktop only, not usable in a web client. No authentication, environment variables or headers are declared.
Before you install
It handles sensitive client files, so confirm how anonymization and local restoration work before relying on it. The manifest lists no tools, instructions or README, so the exact behavior and any data leaving the machine cannot be verified from the supplied information.

Installation

In SourceWeft

  1. Open Hidden Tokens in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

4
  1. v2.91.0LatestNov 7, 2026
  2. v2.60.4Nov 3, 2026
  3. v2.48.0Oct 30, 2026
  4. v2.46.0Oct 29, 2026

Score

25% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts

    Declare a GitHub repository with a README, or serve resource_documentation in the OAuth protected-resource metadata.

  • License10 pts

    Declare a license in the repository or the registry entry.

Other Tabtree integrations