A side-by-side look at the Sieve MCP and PII & Secret Redactor MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.
Verdict: choose Sieve MCP for security work; choose PII & Secret Redactor for security. You can also run both side by side in one mcpServers block.
sieve_health_status, sieve_self_test, sieve_findings_list.detect_pii, redact_text, restore_text.Rows where the two servers differ are marked.
| Spec | P PII & Secret Redactor | |
|---|---|---|
| Category | Security | Security |
| Quality signal | 51/100 · Good | 45/100 · Fair |
| Install command | Not confirmed yet | Not confirmed yet |
| Transport | — | — |
| Auth | No auth required | Not declared |
| Pricing | Free | Freemium |
| Required env vars | None listed | None listed |
| Verified owner | Community listing | Community listing |
| GitHub stars | 1 | 0 |
| Directory activity | 2 views 0 installs 0 upvotes | 0 views 0 installs 0 upvotes |
| Tools | 9 | 4 |
| Full listing | View Sieve MCP | View PII & Secret Redactor |
sieve_health_statusReturns service health and finding counts.sieve_self_testVerifies scanner rules and transcript source coverage are healthy.sieve_findings_listLists findings from the most recent scan.sieve_issue_listLists scanner health issues — unreadable sources, permission errors, parse failures.sieve_scan_historyReturns past scan job summaries.sieve_scan_statusReturns status of the current or most recent scan.sieve_check_textChecks whether text contains secrets. **Returns boolean only — never echoes input or detected values.**sieve_redact_textRedacts secrets from text, replacing values with `sieve://` placeholders.sieve_vault_runExecutes a command with macOS Keychain-resolved secrets injected as env vars. Secrets never transit the MCP channel.detect_piifindings with type, position and a masked preview. Never echoes full values.redact_textplaceholder (stable tokens like `<EMAIL_1>`, same value gives the same token), mask, salted hash, or remove.restore_textswap placeholders back to the originals in the model's response, using the mapping you keep.list_detectorsexactly what is and is not covered.Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.
No confirmed install command for Sieve MCP yet — follow the setup steps linked from its listing page rather than a guessed package name.
No confirmed install command for PII & Secret Redactor yet — follow the setup steps linked from its listing page rather than a guessed package name.