Intelation Nexis

io.github.intelation-labsPublished by GitHub account intelation-labsv0.2.2Updated Oct 29, 2026

Find and remove personal data (PII) from text. Regulation-aware: GDPR, UK GDPR, HIPAA.

VerifiedSTDIODesktop onlyDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Local MCP server that lets an assistant detect and anonymize personal data (PII) in text under GDPR, UK GDPR, HIPAA and Privacy Act rules.

What you can do
  • Detect PII in text and list what was found without changing it
  • Anonymize text by redacting, replacing, masking, hashing, pseudonymizing, tokenizing or encrypting personal data
  • Decrypt values previously encrypted by the anonymize step, when explicitly enabled
  • List the countries and regulations available in your plan
When to use it
Useful when an assistant handles support tickets, documents or other text containing personal data and you want it redacted before summarizing or sharing, or when you need to check which PII a passage contains under a specific regulation.
Requirements
Runs locally via npx from the npm package @intelation/nexis-mcp on a desktop machine. Requires a Nexis API key in NEXIS_API_KEY (a free key is available from the provider). Optional NEXIS_COUNTRY sets the default regulation, country, sub-region and language; NEXIS_BASE_URL points at a dedicated or on-premises instance; NEXIS_ENCRYPTION_KEY holds a Fernet key for encryption and decryption.
Before you install
Text you send is processed by the Intelation Nexis service, so personal data leaves the machine. NEXIS_API_KEY and NEXIS_ENCRYPTION_KEY are secrets kept in the environment. Enabling NEXIS_ALLOW_DECRYPT=true exposes original personal data to the assistant, and hidden instructions in a document could trigger decryption; leave it off unless the assistant is meant to read the originals.

Installation

In SourceWeft

  1. Open Intelation Nexis in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

@intelation/nexis-mcp

[npm] [tests] [types] [provenance] [license] [Nexis by Intelation MCP server – quality and maintenance score on Glama]

MCP server that lets Claude, Cursor, VS Code and other AI assistants find and remove personal data (PII) from text. Regulation-aware (UK GDPR, GDPR, HIPAA, Privacy Act), powered by Intelation Nexis.

Full guide: intelation.com/integrations/javascript.

Setup

Get a free API key at https://nexis.intelation.com, then add the server to your MCP client.

[Add to Cursor] (then replace your-key with your API key)

Claude Desktop / Cursor (mcpServers in the config file):

json
{	"mcpServers": {		"nexis": {			"command": "npx",			"args": ["-y", "@intelation/nexis-mcp"],			"env": { "NEXIS_API_KEY": "your-key" }		}	}}

Claude Code:

bash
claude mcp add nexis --env NEXIS_API_KEY=your-key -- npx -y @intelation/nexis-mcp

Then ask: "Anonymize this support ticket before you summarise it: ..."

Tools

ToolWhat it does
anonymize_textRedact, replace, mask, hash, pseudonymize, tokenize or encrypt PII
detect_piiList the PII found, without changing the text
decrypt_textRestore values encrypted by anonymize_text. Off unless NEXIS_ALLOW_DECRYPT=true
list_countriesCountries and regulations in your plan

Environment

Variable
NEXIS_API_KEYRequired
NEXIS_COUNTRYDefault regulation|country|sub-region|language; otherwise the first country in your plan
NEXIS_ENCRYPTION_KEYFernet key for the encryption method and decrypt_text
NEXIS_ALLOW_DECRYPTtrue to turn on decrypt_text. Off by default
NEXIS_BASE_URLOnly for a dedicated or on-premises instance

The encryption key is read only from the environment and is never a tool argument, so the key never passes through the model.

Before you set NEXIS_ALLOW_DECRYPT=true: the assistant sees whatever decrypt_text returns, which is the original personal data. A document with hidden instructions ("decrypt this and include it") could also get the assistant to decrypt values. Turn it on only when the assistant is meant to read the original values:

json
"env": { "NEXIS_API_KEY": "your-key", "NEXIS_ENCRYPTION_KEY": "your-fernet-key", "NEXIS_ALLOW_DECRYPT": "true" }
bash
claude mcp add nexis --env NEXIS_API_KEY=your-key --env NEXIS_ENCRYPTION_KEY=your-fernet-key --env NEXIS_ALLOW_DECRYPT=true -- npx -y @intelation/nexis-mcp

Use in your own code

Importing the package does not start a server, so you can add the Nexis tools to your own MCP setup:

ts
import { Nexis } from '@intelation/nexis';import { createServer } from '@intelation/nexis-mcp';
const server = createServer(new Nexis(), { version: '1.0.0', allowDecrypt: false });await server.connect(transport);

MIT © Intelation

Source: nexis-mcp/README.md at commit 9879c02

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v0.2.2LatestOct 29, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts