mcp-privacy-shield

The Privacy Shield — the Sanitization Gate, Tiered Sovereignty, and Privacy HUD. Keeps identity out of the AI's hands, keeps the Vault on-premise, and monitors a live Compliance Score.

Implements the Privacy Shield server from the appendix of Vibe Leading The AI.

What it does

• Sanitization Gate — replaces PII with tokens like [EMAIL_01] (or category masks like [EMAIL]). The AI understands the logic but never sees the identity.

• Tiered Sovereignty — classifies data into public / internal / restricted / vault zones. Restricted PII stays in the Vault on-premise; you bring the AI to the data, not the reverse.

• Privacy HUD — monitors a Compliance Score (0-100). Snap the connection if sensitive patterns start leaking into output.

Related MCP server: chuangsiai-mcp

Install

npm install -g mcp-privacy-shield

Or run on demand with npx:

npx mcp-privacy-shield

Client configuration

Add to your MCP client config (e.g. Claude Desktop, Cursor, or opencode):

{
  "mcpServers": {
    "privacy-shield": {
      "command": "npx",
      "args": ["mcp-privacy-shield"]
    }
  }
}

Tools

Environment variables

Detected categories

• Emails, phone numbers, credit-card numbers, US SSNs, bank/routing account numbers, IPv4 addresses, URLs, and passport/ID patterns.

• Optionally, full personal names (two consecutive capitalized words) when MCP_SHIELD_NAMES=1.

What this does NOT do

This server is a gate, not a compliance guarantee. Specifically:

• It is heuristic/deterministic regex matching; it can miss novel or obfuscated PII and can produce false positives.

• No Luhn validation, no OCR, no cross-referencing against business records.

• It does not encrypt, store, or transmit anything, and it does not itself enforce legal compliance (GDPR, HIPAA, CCPA, etc.).

• Before relying on it for regulated data, pair it with a human-reviewed policy and a real data-loss-prevention layer.

Use it as one layer in a defense-in-depth strategy — not as a substitute for professional compliance review.

License & Attribution

MIT — Copyright (c) 2026 Jean Machuca (see LICENSE).

This server implements concepts from the book Vibe Leading The AI: The Corporate Race Against Machines by Jean Machuca (ISBN 9798252505008, © 2026 Jean Machuca). The book is copyrighted commercial material; this repository does not republish its text. Buy the book at https://vibeleading.org or https://a.co/d/04L5YatK. Author website: jeanmachuca.com · Support on GitHub Sponsors: github.com/sponsors/jeanmachuca. See NOTICE.