SecureMCP
Server Configuration
Describes the environment variables required to run the server.
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||
Instructions
Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.
Local masking utilities. Model-invoked tool arguments are already visible to the provider. Use the trusted client-side LocalPrivacyClient before sending confidential input. Restoration is available only in the local Python API/CLI, never as an MCP tool.
Capabilities
Features and capabilities supported by this server
Protocol revision2025-11-25
| Capability | Details |
|---|---|
| tools | {
"listChanged": false
} |
| prompts | {
"listChanged": false
} |
| resources | {
"subscribe": false,
"listChanged": false
} |
Tools
Functions exposed to the LLM to take actions
| Name | Description |
|---|---|
| mask_textB | Mask text. Tool arguments are provider-visible; pre-mask confidential data locally. mode: content_words, entities_only, code_aware, aggressive, uncommon_words. strategy: bracket, unicode, pseudoword, hash. language: auto or a supported natural-language tag. sensitive_terms forces explicit words/phrases; custom_preserve opts terms out of masking. common_vocabulary extends the local ordinary-word list in uncommon_words mode. code_language selects a code lexer when mode=code_aware. mask_numbers=True masks code numbers; the default preserves them. |
| mask_codeA | Mask identifiers/literals. Set language explicitly when auto detection is ambiguous. Numbers are preserved by default; mask_numbers=True opts into numeric masking. Supported language profiles are listed in privacy://policies and docs/LANGUAGES.md. SQL dialect: standard (lowercase folding), postgresql, sqlite. Generated code is a review representation; it is not executable anonymization. |
| create_privacy_sessionC | Create a new session. Duplicate IDs are errors; TTL is 1..86400 seconds. |
| get_session_statsD | Sanitized metrics. mode means the most recent masking policy. |
| clear_privacy_sessionB | Wait for active operations, invalidate the session and release mapping references. |
Prompts
Interactive templates invoked by user choice
| Name | Description |
|---|---|
| privacy_preserving_assistant | Instructions for a payload already masked by the trusted local client. |
| secure_code_assistant |
Resources
Contextual data attached and managed by the client
| Name | Description |
|---|---|
| get_privacy_policies | |
| get_privacy_status |
TDQS
Scored across 5 tools
The session lifecycle tools are clearly distinct, but mask_text and mask_code overlap because mask_text explicitly supports a code_aware mode while mask_code is specialized for code. Descriptions help, but an agent may still be unsure which tool to choose for code-like content.
All tool names use consistent snake_case with a verb_noun pattern: mask_text, mask_code, create_privacy_session, clear_privacy_session, and get_session_stats. The convention is predictable and readable.
Five tools is well-scoped for a session-based privacy masking server. Each tool covers a distinct lifecycle or masking operation without obvious filler.
The set covers session creation, clearing, stats, and both text and code masking. Minor gaps remain around session inspection/listing or updating session configuration, but core workflows are supported.