Server data from the Official MCP Registry
Auto-detects and obfuscates PII (IPs, emails, API keys, names) so Claude never sees real client data
Auto-detects and obfuscates PII (IPs, emails, API keys, names) so Claude never sees real client data
Set these up before or after installing:
Environment variable: REDACT_AUDIT_LOG
Environment variable: REDACT_DATA_DIR
Add this to your MCP configuration file:
{
"mcpServers": {
"io-github-r3352-redact-mcp": {
"env": {
"REDACT_DATA_DIR": "your-redact-data-dir-here",
"REDACT_AUDIT_LOG": "your-redact-audit-log-here"
},
"args": [
"-y",
"@mattzam/redact-mcp"
],
"command": "npx"
}
}
}Redact MCP is a well-designed security-focused server that obfuscates PII data for pentesting. The code demonstrates proper security practices with environment-based configuration, secure default directories, and comprehensive input validation. Only minor code quality concerns were identified around error handling. Supply chain analysis found 3 known vulnerabilities in dependencies (0 critical, 3 high severity). Package verification found 1 issue.
Scanned 4 files · 6 findings
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Be the first to review this server!