io.github.Edu963/ocultar-pii

Official

Zero-egress PII redaction for Claude. Runs locally — no data leaves your infrastructure.

Redact PII locally without data egress, keeping sensitive information within your infrastructure.

Install

Configuration

Environment variables

OCULTAR_URL

URL of your locally running Ocultar Refinery

OCULTAR_API_KEY

Ocultar API key (leave blank if not configured)

OCULTAR_AUDITOR_TOKEN

Enables reveal_tokens tool. Must match OCU_AUDITOR_TOKEN on the server.

claude_desktop_config.json

{
  "mcpServers": {
    "ocultar-pii": {
      "command": "uvx",
      "args": [
        "ocultar-claude-mcp"
      ],
      "env": {
        "OCULTAR_URL": "<YOUR_OCULTAR_URL>",
        "OCULTAR_API_KEY": "<YOUR_OCULTAR_API_KEY>",
        "OCULTAR_AUDITOR_TOKEN": "<YOUR_OCULTAR_AUDITOR_TOKEN>"
      }
    }
  }
}