Waqi — AI Privacy Layer

io.github.ajprolific由 GitHub 账号 ajprolific 发布v1.0.1更新于 Oct 25, 2026

Redacts PII from your business tools before the AI sees them — with a provable audit log.

已验证Streamable HTTP可网页运行安全与监控商业与电商

概览

AI 生成的概览

一个托管型 MCP 服务器,位于业务工具与 AI 助手之间,以只读方式获取数据,并在模型看到之前对个人数据做脱敏处理。

可以做什么
从 Stripe、Xero、Zoho Books、Zoho CRM、Slack 等已连接的业务工具中以只读方式获取数据,并将姓名、邮箱、电话号码、卡号、地址等个人标识替换为脱敏值后返回给助手。为每次调用写入审计记录,记录发起人、所用工具以及拦截的敏感条目数量,日志在脱敏之后写入。通过每人独立的 MCP URL 将每次调用归属到具体团队成员,可按人撤销访问权限。连接器凭据加密存储且只写不可读。
适用场景
当助手需要基于真实的支付、会计、CRM 或沟通数据作答,但客户个人数据不能进入模型时;或需要可审计地记录 AI 看到了什么、没看到什么时使用。
运行要求
需要 Waqi 账户,以及仪表盘发放的个人 MCP URL,并在客户端中作为自定义连接器或 HTTP MCP 服务器添加。服务托管在远程端点,需要 OAuth 认证。需向 Waqi 提供各业务工具的连接器凭据。需要付费订阅。
安装前请注意
这是托管型商业服务,自助价格自每月 99 英镑起。业务数据和连接器凭据会经过第三方,连接账户前应审阅其安全与数据处理说明。MCP URL 中包含个人令牌,应视为机密。设计上为只读访问,但审计日志会记录每次调用的发起人。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Waqi — AI Privacy Layer,将其添加到工作区。
  2. 连接 所需的 凭据。它们会被私密存储,绝不会在公开页面上展示。
  3. 为需要使用其工具的对话启用该服务。

Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

Waqi — the MCP server that redacts PII before the AI sees it

Waqi (واقي, "protector") is a hosted MCP server that sits between your business tools and your AI assistant. Connect Stripe, Xero, your CRM and more to Claude or ChatGPT — Waqi fetches the data read-only, strips names, card numbers and personal details, writes a provable audit entry, and only then returns the cleaned data to the model.

Your AI gets real answers from real business data. Your customers' personal data never reaches it.

This is a hosted, commercial MCP server. This repository contains its documentation and MCP Registry manifest — the service itself runs at waqi.bilazann.com.

How it works

AI assistant ──1· tool call──▶ Waqi ──2· read-only fetch──▶ Your tools (Stripe, Xero, CRM…)     ▲                          │     └──3· redacted data only───┘   (audit log written AFTER redaction —                                     the sensitive values are never stored)
  • Redaction first. Names, emails, phone numbers, card numbers, addresses and other personal identifiers are detected and replaced before the response leaves Waqi.
  • Provable audit log. Every call is logged — who asked, which tool, how many sensitive items were caught — so you can show clients or regulators exactly what the AI never saw.
  • Per-person tokens. Each team member gets their own MCP URL; every call is individually attributed, and access is revoked per person, not per company.
  • Read-only by design. Waqi fetches; it never writes to your tools.
  • Credentials stay encrypted. Connector keys are stored encrypted and are never visible to anyone — including us.

Quickstart

You need a Waqi account (start here) — the dashboard gives each team member a personal MCP URL of the form:

https://waqi.bilazann.com/api/mcp/YOUR_TOKEN

Claude (web/desktop): Settings → Connectors → Add custom connector → paste your MCP URL.

Claude Code:

bash
claude mcp add --transport http waqi https://waqi.bilazann.com/api/mcp/YOUR_TOKEN

ChatGPT: Settings → Connectors → Advanced → Developer mode → add the same URL.

Standard MCP configuration (for clients that use a JSON config file):

json
{  "mcpServers": {    "waqi": {      "type": "http",      "url": "https://waqi.bilazann.com/api/mcp/YOUR_TOKEN"    }  }}

Step-by-step guides with screenshots for every client and every connector: bilazann.com/waqi/docs.

Tip: in Claude, an attached connector still has to be enabled in the chat you're using — if tools list but never run, that's the switch to check.

Supported connectors

Stripe · Xero · Zoho Books · Zoho CRM · Slack · and more — 16 business tools across payments, accounting, CRM, and communication, with new connectors added on request (current list).

Security & data handling

  • Connector credentials: stored encrypted, write-only (no read-back UI, not even for the account owner).
  • MCP tokens: only SHA-256 hashes are stored.
  • Audit log: written post-redaction — the log itself never contains the sensitive values.
  • Full detail: bilazann.com/waqi#trust

Pricing

Self-serve, VAT-inclusive, from £99/month (annual and team plans available) — bilazann.com/waqi.

Support


Waqi is built by Bilazann. "Bilazann" means "without doubt" — Waqi is that idea applied to AI: use it fully, without doubting what it saw.

来源:README.md,提交 77b3088

工具

0
该服务器需要 API 密钥等凭据,因此 SourceWeft 无法在没有凭据的情况下读取其工具,也未收录。

版本历史

1
  1. v1.0.1最新Sep 16, 2026

评分

已满足适用检查项的 75%

该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。

  • 近 30 天内可连通必需25 分
  • 已声明认证方式必需10 分
  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分

    请在仓库或注册中心条目中声明许可证。