Septum MCP server — stdio / streamable-http / sse. PII masking tools for any MCP client.
1.0K
Stdio / streamable-http / sse MCP server exposing Septum's local PII masking pipeline to any MCP-aware client — Claude Code, Claude Desktop, Cursor, Windsurf, Zed, ChatGPT Desktop. Bundles septum-core so detection runs in-process; raw PII never touches the network.
| Transport | Use when |
|---|---|
stdio (default) | Local clients that launch the server as a subprocess |
streamable-http | Remote agents, browser extensions, shared team servers — bearer-token gated |
sse | Legacy clients that haven't migrated to streamable-http |
docker run --name septum-mcp -p 8765:8765 \
-e SEPTUM_MCP_HTTP_TOKEN=$(openssl rand -hex 32) \
-e SEPTUM_REGULATIONS=gdpr,kvkk \
byerlikaya/septum-mcp
Point your MCP client at http://localhost:8765/mcp with Authorization: Bearer <token>.
| Tool | Purpose |
|---|---|
mask_text | Mask PII in a snippet and return a session id |
unmask_response | Restore originals in an LLM reply using the session id |
detect_pii | Read-only scan — returns entities without retaining a session |
scan_file | Read a local file (txt / md / csv / json / pdf / docx) and scan it |
list_regulations | List the 17 built-in regulation packs |
get_session_map | Return {original → placeholder} for local debugging |
| Tag | Contents |
|---|---|
latest, 1, 1.0, 1.0.0 | Multi-arch (amd64 + arm64), CPU-only PyTorch |
Content type
Image
Digest
sha256:9d4f2d380…
Size
404.2 MB
Last updated
5 months ago
docker pull byerlikaya/septum-mcp