Redacta MCP server
Pseudonymise and restore patient identifiers & PII in text — local, HIPAA Safe Harbor mode.
9 stars37 downloads/wk
Reviews
Write oneNobody has reviewed Redacta yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Redacta tools (8, 1 write)
write = sends, deletes, buys or postsRead from the package source without running it. The installed server may list more.
check_outputScan generated text for verbatim reappearance of the original
discard_sessionwrite actionDelete a session's private mapping immediately instead of waiting
protectRedact patient identifiers and PII, replacing each distinct value
redactLEGACY: like protect, but returns the token_map (token ->
reinstateLEGACY: reverse a redaction using a token map held by the
release_to_clientWARNING: returns re-identified text directly in the tool result,
release_to_fileRestore original identifiers into text produced from a protected
self_checkScan already-redacted text for anything that still looks like an
Public scan report
scanner v0.1.9 · 2026-09-23 · same rubric, same numbers if you re-run it
- Code scan11 source files scanned25/25
- –Live reliabilityno gateway calls yet and no remote to proben/a
- –Tool poisoningtools not inspected (local package is not executed); not countedn/a
- Auth qualitylocal package, no credentials required12/15
- Maintenancelast push 13 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
What the publisher says
From the Redacta repository's README, as published. We do not edit it. Read it on GitHub
Redacta
Pseudonymise medical and clinical documents before they're processed by AI or shared. Redacta replaces patient identifiers with labelled tokens — [PATIENTNAME1], [NHSNUMBER1], [DATEOFBIRTH_1], … — while leaving the clinical meaning intact, and returns a redaction report alongside the cleaned text.
It started as an Agent Skill and is now one engine shipped across eight surfaces — an iOS app, agent skill, MCP server, a self-hosted HTTP service with a Kubernetes deployment, two libraries, a CLI, and a FigJam whiteboard plugin.
Running this in production? Redacta offers a small number of fixed-price
design-partner integrations for teams shipping AI agents on clinical or patient
data — deployment in your environment, one real workflow integrated, and a
data-flow document written for your DPO.
Details →
One engine, many surfaces
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Install directly
Runs npx -y redacta-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add redacta-mcp -- npx -y redacta-mcp
Redacta: common questions
- Is Redacta MCP server safe?
- Yes, by our scan: it is graded A (92/100). Read the Redacta safety report
- How do I install Redacta?
- It runs on your machine. Copy the Claude Code, Claude Desktop or Cursor config from the install section.
- Does Redacta need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Redacta maintained?
- The last commit was 14 days ago (2026-09-10). The latest release is v2.1.0.