Detect PII in text and return the sanitized text plus a PII-free summary.

The violations summary never contains raw sensitive values — only entity types, the action applied, and confidence — so it is always safe to log. sanitized_text echoes the original text only when the server's action is warn (which reports without altering); for redact/mask/hash the sensitive values are removed.

Pass entities to narrow this call to a subset of the server's enabled types (e.g. ["EMAIL", "IBAN"]); omit it to apply every enabled filter. Requesting a type the server didn't enable is an error.

Detect PII in text and anonymize every match with action.

Unlike scan, you pick the action per call: redact drops the value ([EMAIL]), mask keeps a hint (b***@acme.com, last-4 of a card), hash yields a stable salted pseudonym ([EMAIL:3245e00b…]), and warn leaves the text untouched but still reports what was found. action defaults to the server's WARDCAT_ACTION.

The violations summary never contains raw values; sanitized_text still holds the original text under action="warn" (which reports only).

Pass entities to anonymize only a subset of the server's enabled types (e.g. ["EMAIL", "IBAN"]), leaving other detected PII untouched; omit it to anonymize everything. Requesting a type the server didn't enable is an error.

Return True if text contains sensitive information (holistic LLM gate).

Requires the on-prem LLM layer: set WARDCAT_LLM_MODEL (e.g. llama3.2:3b). Use it as a guardrail before forwarding text to an external service.

Report what this server detects and how it anonymizes by default.

Lets an agent discover the enabled entity types, the default action, and whether the NER / LLM layers are active — without probing by trial and error.