RedactRelay MCP

RedactRelay is a local, self-hosted Streamable HTTP MCP server for a privacy-mode incident handoff. It asks four fixed questions, applies a limited local pattern guard, returns a human-review draft, and lets the operator erase the temporary handoff. It never creates an external ticket.

This repository is prepared for the Amazon Developer Hackathon's Alexa+ self-hosted MCP server route. It implements MCP 2025-11-25 over Streamable HTTP. It is not an Alexa+ integration, Agent Skill, Amazon or AWS service, cloud deployment, AI model, microphone workflow, or external ticket system.

Run locally

Requires Node.js 22–26. No package installation, API key, device, or paid service is required.

npm run build
npm run verify
npm test
npm start

Open http://127.0.0.1:4174/mcp-demo.html. The browser client negotiates with the actual local endpoint at http://127.0.0.1:4174/mcp.

Related MCP server: local-evidence-mcp

What the MCP server does

The local server exposes six tools:

• start_handoff starts a temporary four-question handoff.

• record_final_answer records one sanitized answer.

• revise_final_answer replaces a completed answer without extending the expiry or retaining revision history.

• review_handoff returns a human-review draft and a non-sensitive redaction summary.

• acknowledge_redactions records the caller's local review of affected fields.

• clear_handoff removes the in-memory handoff.

The service binds to loopback only, rejects foreign Host and Origin headers, and clears each handoff on request, process exit, or after 15 minutes. The pattern guard detects only a limited set of common formats; it is not comprehensive sensitive-data detection. A person must review any draft before taking an external action.

Verify the MCP path

npm run test:mcp
npm run test:mcp:interop
npm run test:mcp:browser

The interoperability test drives the live loopback server through a separate Node client. The browser check uses synthetic data, confirms redaction of the example values, checks the field-specific review flow, clears the handoff, and rejects external browser requests.

MCP_DEMO_SCRIPT.md describes a short, synthetic-data-only walkthrough. ARCHITECTURE.md records the wider prototype boundary; its optional Cloud Pilot code is disabled by default and has never been validated against a live provider.

Scope

• No live Alexa+, Amazon, AWS, model, cloud, microphone, browser persistence, or ticket-system integration is claimed.

• No production incident, customer data, or credential should be entered into this prototype.

• The included test values are synthetic and use .invalid email domains.

MIT licensed.