ocultar pii for VS Code

io.github.edu963/ocultar-pii

Zero-egress PII redaction for Claude. Runs locally — no data leaves your infrastructure.

client:VS Code transport:stdio runtime:pypi

Install ocultar pii in VS Code

.vscode/mcp.json

{
  "inputs": [
    {
      "type": "promptString",
      "id": "ocultar-url",
      "description": "OCULTAR_URL",
      "password": true
    },
    {
      "type": "promptString",
      "id": "ocultar-api-key",
      "description": "OCULTAR_API_KEY",
      "password": true
    },
    {
      "type": "promptString",
      "id": "ocultar-auditor-token",
      "description": "OCULTAR_AUDITOR_TOKEN",
      "password": true
    }
  ],
  "servers": {
    "ocultar-pii": {
      "type": "stdio",
      "command": "uvx",
      "args": [
        "ocultar-claude-mcp"
      ],
      "env": {
        "OCULTAR_URL": "${input:ocultar-url}",
        "OCULTAR_API_KEY": "${input:ocultar-api-key}",
        "OCULTAR_AUDITOR_TOKEN": "${input:ocultar-auditor-token}"
      }
    }
  }
}

VS Code prompts for each input the first time the server starts, so no secret is written to the file. VS Code docs

ocultar pii in other clients

ocultar pii MCP server