MCP Security Sanitizer

io.github.kansal-mukulPublished by GitHub account kansal-mukulv2.0.0Updated Oct 24, 2026

Redacts common secrets, email addresses, and phone numbers.

VerifiedSSEWeb executableDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

A remote MCP server that redacts common secrets, email addresses and phone numbers from text, and audits text for such risks.

What you can do
Redact secrets: mask OpenAI-style keys, bearer tokens and named key/secret/password/token assignments in supplied text. Redact PII: mask email addresses and common North American phone numbers. Audit text: count recognizable secrets, email addresses and phone numbers without changing the text.
When to use it
Useful when you want an assistant to scrub pasted logs, config snippets or sample data before sharing them, or to get a quick count of secrets and PII in a block of text. It is a convenience filter, not a compliance guarantee.
Requirements
A client that supports remote MCP servers over SSE, pointed at the published endpoint. No account, API key or header is declared. The free hosting may take about a minute to wake from idle. Running a private copy needs Python 3.11+ and uv.
Before you install
The public service has no authentication, so anyone with the URL can call it; do not send real credentials or sensitive personal data. Detection is regex-based and cannot guarantee finding every secret or PII value, so validate patterns before relying on it for compliance.

Installation

In SourceWeft

  1. Open MCP Security Sanitizer in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Web executable via SSE. Remote servers run from the web runtime once configured in a workspace.

Use with an agent

Paste this prompt into Claude Code, Codex, Cursor or another agent — or into SourceWeft chat. The agent reads this server's install guide, shows you its publisher, endpoint and sign-in, and adds it to your client once you agree. Keys never go into a command.

Read https://sourceweft.com/mcp/io.github.kansal-mukul%2Fmcp-security-sanitizer/install.md and connect the MCP server it describes to my client. Before changing any config, show me its publisher, endpoint and sign-in method and wait for my OK. Never put an API key in a command or in a file I would commit; ask me where it should come from.

Read the install guide the agent follows

Other MCP clients

Add this to your client's mcpServers config.

{
  "mcpServers": {
    "security-sanitizer": {
      "type": "sse",
      "url": "https://mcp-security-sanitizer-mk-server.onrender.com/sse"
    }
  }
}

README

MCP Security Sanitizer

A small MCP server that provides local, regex-based tools for redacting common secrets and personally identifiable information (PII).

Use the published server

This project is configured for publication in the official MCP Registry under the server name io.github.kansal-mukul/mcp-security-sanitizer. After publishing, search for that name and add the server to an MCP client that supports remote servers over SSE.

[MCP Security Sanitizer listed in the official MCP Registry]

You can also add the endpoint directly in a client that supports SSE:

text
https://mcp-security-sanitizer-mk-server.onrender.com/sse

For example, in VS Code, add this to .vscode/mcp.json in your workspace:

json
{  "servers": {    "mcp-security-sanitizer": {      "type": "sse",      "url": "https://mcp-security-sanitizer-mk-server.onrender.com/sse"    }  }}

After connecting, select one of the tools below and provide its text argument. The Render free service may take about a minute to respond when it has been idle and needs to wake up.

Regex matching only recognizes the patterns implemented here. It cannot guarantee detection of every secret or PII value. Validate the patterns against your requirements before relying on this service.

Tools

ToolBehavior
mask_api_keys_and_secrets(text)Redacts OpenAI-style sk-... keys, bearer tokens, and common named key/secret/password/token assignments.
mask_pii_data(text)Redacts email addresses and common North American phone numbers.
audit_text_for_risks(text)Counts recognizable secrets, email addresses, and phone numbers.

Run locally

Requires Python 3.11+ and uv.

bash
uv syncuv run server.py

The server listens on http://localhost:8000/sse.

Hosting

The public MCP server is hosted on Render at https://mcp-security-sanitizer-mk-server.onrender.com/sse. The Registry entry above points to this live service. If you want to host a separate copy, create a Render Web Service from this repository; Render can use the included render.yaml configuration and assigns the public URL and port automatically.

The service is public and has no authentication. Anyone with its URL can call the sanitizer tools, so do not send real credentials or sensitive personal data unless you add suitable access controls.

Development

Sanitization runs locally in Python and does not call an LLM. Add tests for the secret and PII formats relevant to your environment before relying on the service for compliance.

Connect

Source: README.md at commit 64e43c4

Tools

0
SourceWeft has not read this server's tools yet.

Version history

1
  1. v2.0.0LatestOct 24, 2026

Score

75% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 daysRequired25 pts
  • Auth declaredRequired10 pts
  • Tools listedRequired15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts

    Declare a license in the repository or the registry entry.