Skip to main content
Glama
oguzhantopcu0

wardcat-mcp

by oguzhantopcu0
OverviewSchemaSourceRelated ServersDiscussionsAdmin
Python
Local

Server Configuration

Describes the environment variables required to run the server.

NameRequiredDescriptionDefault
WARDCAT_SALTNoHashing salt (required for the `hash` action).
WARDCAT_ACTIONNo`warn` | `hash` | `redact` | `mask`.redact
WARDCAT_ENTITIESNoComma-separated entity types to enable.broad structural + name set
WARDCAT_LLM_MODELNoEnable the on-prem LLM layer via Ollama (e.g. `llama3.2:3b`).
WARDCAT_SPACY_MODELNoEnable SpaCy NER with this model (needs the `ner` extra).
WARDCAT_LLM_BASE_URLNoOllama endpoint.http://localhost:11434

Instructions

Guidance the server publishes about itself, which clients place ahead of the tool catalog so the model reads it before choosing anything.

This server publishes no instructions, or was last inspected before Glama recorded them.

Capabilities

Features and capabilities supported by this server

Protocol revision2025-11-25

CapabilityDetails
tools
{
  "listChanged": false
}
prompts
{
  "listChanged": false
}
resources
{
  "subscribe": false,
  "listChanged": false
}
experimental
{}

Tools

Functions exposed to the LLM to take actions

NameDescription
scanA

Detect PII in text and return the sanitized text plus a PII-free summary.

The violations summary never contains raw sensitive values — only entity types, the action applied, and confidence — so it is always safe to log. sanitized_text echoes the original text only when the server's action is warn (which reports without altering); for redact/mask/hash the sensitive values are removed.

Pass entities to narrow this call to a subset of the server's enabled types (e.g. ["EMAIL", "IBAN"]); omit it to apply every enabled filter. Requesting a type the server didn't enable is an error.

redactA

Detect PII in text and anonymize every match with action.

Unlike scan, you pick the action per call: redact drops the value ([EMAIL]), mask keeps a hint (b***@acme.com, last-4 of a card), hash yields a stable salted pseudonym ([EMAIL:3245e00b…]), and warn leaves the text untouched but still reports what was found. action defaults to the server's WARDCAT_ACTION.

The violations summary never contains raw values; sanitized_text still holds the original text under action="warn" (which reports only).

Pass entities to anonymize only a subset of the server's enabled types (e.g. ["EMAIL", "IBAN"]), leaving other detected PII untouched; omit it to anonymize everything. Requesting a type the server didn't enable is an error.

is_sensitiveA

Return True if text contains sensitive information (holistic LLM gate).

Requires the on-prem LLM layer: set WARDCAT_LLM_MODEL (e.g. llama3.2:3b). Use it as a guardrail before forwarding text to an external service.

server_infoA

Report what this server detects and how it anonymizes by default.

Lets an agent discover the enabled entity types, the default action, and whether the NER / LLM layers are active — without probing by trial and error.

Prompts

Interactive templates invoked by user choice

NameDescription

No prompts

Resources

Contextual data attached and managed by the client

NameDescription

No resources

Deploy Server
One endpoint for every MCP toolRayrun runs every MCP server behind one URL and holds the credentials. Each call is decided per client, tool, and argument, then recorded.ray.runAd

TDQS

A4.3/5.0

Scored across 4 tools

Disambiguation5/5

Each tool has a clearly distinct purpose: is_sensitive is a boolean guard, redact applies a specific action, scan returns sanitized text, and server_info reports configuration. No overlap in functionality.

Naming Consistency4/5

All tool names are in snake_case and descriptive, but the pattern varies: is_sensitive uses 'is_', redact and scan are single verbs, and server_info is a noun pair. While readable and consistent in style, it's not a uniform verb_noun pattern.

Tool Count5/5

Four tools is well-scoped for a PII detection and redaction server. Each tool serves a core function without unnecessary bloat or gaps, fitting the server's purpose perfectly.

Completeness4/5

The tool set covers essential operations: boolean check (is_sensitive), configurable redaction (redact), full scan with summary (scan), and configuration discovery (server_info). Minor gaps like batch processing could exist, but the core workflow is complete.

Maintenance

ActivityStale
ResponsivenessNo issues

Resources