Back to Browse

Security Sanitizer Server MCP Server

SecurityUse Caution2.5MCP RegistryLocalRemote
Free

Server data from the Official MCP Registry

Redacts common secrets, email addresses, and phone numbers.

About

Redacts common secrets, email addresses, and phone numbers.

Remote endpoints: sse: https://mcp-security-sanitizer-mk-server.onrender.com/sse

Security Report

2.5
Use Caution2.5Critical Risk

The server is a small, local-logic regex sanitizer with no malicious code, hardcoded secrets, or shell/file access. Its main concern is design: the public SSE endpoint has no authentication, so any text users send, including real secrets or PII, is transmitted to and processed by a third-party host, which the README acknowledges. Regex coverage is partial and there is no input size limit, so the score stays in the fair range. Supply chain analysis found 5 known vulnerabilities in dependencies (1 critical, 3 high severity).

3 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

How to Install & Connect

Available as Local & Remote

This plugin can run on your machine or connect to a hosted endpoint. during install.

Documentation

View on GitHub

From the project's GitHub README.

MCP Security Sanitizer

A small MCP server that provides local, regex-based tools for redacting common secrets and personally identifiable information (PII).

Use the published server

This project is configured for publication in the official MCP Registry under the server name io.github.kansal-mukul/mcp-security-sanitizer. After publishing, search for that name and add the server to an MCP client that supports remote servers over SSE.

MCP Security Sanitizer listed in the official MCP Registry

You can also add the endpoint directly in a client that supports SSE:

https://mcp-security-sanitizer-mk-server.onrender.com/sse

For example, in VS Code, add this to .vscode/mcp.json in your workspace:

{
  "servers": {
    "mcp-security-sanitizer": {
      "type": "sse",
      "url": "https://mcp-security-sanitizer-mk-server.onrender.com/sse"
    }
  }
}

After connecting, select one of the tools below and provide its text argument. The Render free service may take about a minute to respond when it has been idle and needs to wake up.

Regex matching only recognizes the patterns implemented here. It cannot guarantee detection of every secret or PII value. Validate the patterns against your requirements before relying on this service.

Tools

ToolBehavior
mask_api_keys_and_secrets(text)Redacts OpenAI-style sk-... keys, bearer tokens, and common named key/secret/password/token assignments.
mask_pii_data(text)Redacts email addresses and common North American phone numbers.
audit_text_for_risks(text)Counts recognizable secrets, email addresses, and phone numbers.

Run locally

Requires Python 3.11+ and uv.

uv sync
uv run server.py

The server listens on http://localhost:8000/sse.

Hosting

The public MCP server is hosted on Render at https://mcp-security-sanitizer-mk-server.onrender.com/sse. The Registry entry above points to this live service. If you want to host a separate copy, create a Render Web Service from this repository; Render can use the included render.yaml configuration and assigns the public URL and port automatically.

The service is public and has no authentication. Anyone with its URL can call the sanitizer tools, so do not send real credentials or sensitive personal data unless you add suitable access controls.

Development

Sanitization runs locally in Python and does not call an LLM. Add tests for the secret and PII formats relevant to your environment before relying on the service for compliance.

Connect

Reviews

No reviews yet

Be the first to review this server!