
Waqi — AI Privacy Layer
io.github.ajprolific由 GitHub 账号 ajprolific 发布v1.0.1更新于 Oct 25, 2026
Redacts PII from your business tools before the AI sees them — with a provable audit log.
概览
一个托管型 MCP 服务器,位于业务工具与 AI 助手之间,以只读方式获取数据,并在模型看到之前对个人数据做脱敏处理。
- 可以做什么
- 从 Stripe、Xero、Zoho Books、Zoho CRM、Slack 等已连接的业务工具中以只读方式获取数据,并将姓名、邮箱、电话号码、卡号、地址等个人标识替换为脱敏值后返回给助手。为每次调用写入审计记录,记录发起人、所用工具以及拦截的敏感条目数量,日志在脱敏之后写入。通过每人独立的 MCP URL 将每次调用归属到具体团队成员,可按人撤销访问权限。连接器凭据加密存储且只写不可读。
- 适用场景
- 当助手需要基于真实的支付、会计、CRM 或沟通数据作答,但客户个人数据不能进入模型时;或需要可审计地记录 AI 看到了什么、没看到什么时使用。
- 运行要求
- 需要 Waqi 账户,以及仪表盘发放的个人 MCP URL,并在客户端中作为自定义连接器或 HTTP MCP 服务器添加。服务托管在远程端点,需要 OAuth 认证。需向 Waqi 提供各业务工具的连接器凭据。需要付费订阅。
安装
在 SourceWeft 中
- 打开 控制台中的 Waqi — AI Privacy Layer,将其添加到工作区。
- 连接 所需的 凭据。它们会被私密存储,绝不会在公开页面上展示。
- 为需要使用其工具的对话启用该服务。
Web executable,通过 Streamable HTTP。 远程服务在工作区中配置后即可从网页运行时运行。
其他 MCP 客户端
参照 仓库 中的启动说明。
README
Waqi — the MCP server that redacts PII before the AI sees it
Waqi (واقي, "protector") is a hosted MCP server that sits between your business tools and your AI assistant. Connect Stripe, Xero, your CRM and more to Claude or ChatGPT — Waqi fetches the data read-only, strips names, card numbers and personal details, writes a provable audit entry, and only then returns the cleaned data to the model.
Your AI gets real answers from real business data. Your customers' personal data never reaches it.
- Website: bilazann.com/waqi
- Setup guides: bilazann.com/waqi/docs
This is a hosted, commercial MCP server. This repository contains its documentation and MCP Registry manifest — the service itself runs at
waqi.bilazann.com.
How it works
- Redaction first. Names, emails, phone numbers, card numbers, addresses and other personal identifiers are detected and replaced before the response leaves Waqi.
- Provable audit log. Every call is logged — who asked, which tool, how many sensitive items were caught — so you can show clients or regulators exactly what the AI never saw.
- Per-person tokens. Each team member gets their own MCP URL; every call is individually attributed, and access is revoked per person, not per company.
- Read-only by design. Waqi fetches; it never writes to your tools.
- Credentials stay encrypted. Connector keys are stored encrypted and are never visible to anyone — including us.
Quickstart
You need a Waqi account (start here) — the dashboard gives each team member a personal MCP URL of the form:
Claude (web/desktop): Settings → Connectors → Add custom connector → paste your MCP URL.
Claude Code:
ChatGPT: Settings → Connectors → Advanced → Developer mode → add the same URL.
Standard MCP configuration (for clients that use a JSON config file):
Step-by-step guides with screenshots for every client and every connector: bilazann.com/waqi/docs.
Tip: in Claude, an attached connector still has to be enabled in the chat you're using — if tools list but never run, that's the switch to check.
Supported connectors
Stripe · Xero · Zoho Books · Zoho CRM · Slack · and more — 16 business tools across payments, accounting, CRM, and communication, with new connectors added on request (current list).
Security & data handling
- Connector credentials: stored encrypted, write-only (no read-back UI, not even for the account owner).
- MCP tokens: only SHA-256 hashes are stored.
- Audit log: written post-redaction — the log itself never contains the sensitive values.
- Full detail: bilazann.com/waqi#trust
Pricing
Self-serve, VAT-inclusive, from £99/month (annual and team plans available) — bilazann.com/waqi.
Support
- Docs: bilazann.com/waqi/docs
- Contact: via the website
Waqi is built by Bilazann. "Bilazann" means "without doubt" — Waqi is that idea applied to AI: use it fully, without doubting what it saw.
来源:README.md,提交 77b3088
工具
0版本历史
1- v1.0.1最新Sep 16, 2026
评分
已满足适用检查项的 75%
该评分衡量此收录条目的完整程度,依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价,也不表示服务器安全或当前可用:可连通性是带日期的检查结果,评分也不包含安装量或用户评价。
- 近 30 天内可连通必需25 分
- 已声明认证方式必需10 分
- 已列出工具15 分
请让服务器在无凭据时响应 tools/list,或发布可在沙箱中无凭据启动的软件包。
- 描述必需15 分
- 图标10 分
- 文档15 分
- 许可证10 分
请在仓库或注册中心条目中声明许可证。