Side-by-Side Model Context Protocol Comparison
Privacyscrubber MCP vs Ocultar Pii
In-depth architectural comparison of the Privacyscrubber MCP and Ocultar Pii MCP servers. Compare execution transports, security boundaries, tool capabilities, quality scores, and ready-to-paste client installation snippets for Claude, Cursor, Windsurf, and VS Code.
At a Glance & Executive Verdict
Privacyscrubber MCP
Security · Local stdio
Quality: 65/100 (Great) | Auth: API Key required
Ocultar Pii
Security · Local stdio
Quality: 31/100 (Emerging) | Auth: No auth required
Verdict Summary: Choose Privacyscrubber MCP if you need specialized Security tools running via a local process. Choose Ocultar Pii if your workspace requires Security integration with local subprocess execution. Both servers can be configured concurrently in your client's
mcpServers manifest.Which MCP Server Should You Choose?
Choose Privacyscrubber MCP when:
- You need dedicated capabilities in the Security domain.
- You prefer local stdio subprocess transport architecture.
- Your security boundary fits: API Key required (Freemium).
- Primary tools included: audit_context, sanitize_text, scrub_text.
Choose Ocultar Pii when:
- You need dedicated capabilities in the Security domain.
- You prefer local stdio subprocess transport architecture.
- Your security boundary fits: No auth required (Free / Open Source).
- You have access to required keys:
OCU_MASTER_KEY, OCU_SALT, OCU_AUDITOR_TOKEN, OCU_VAULT_PATH, SLM_SIDECAR_URL, SLM_ADAPTER. - Primary tools included: Local PII and PHI masking, Deterministic reversible tokens, Encrypted DuckDB vault.
Feature & Specification Comparison
Tools & Capabilities Breakdown
Privacyscrubber MCP Tools (23)
audit_context
STEP 0 (Pre-Flight): Non-destructive security inspection of raw prompts or document chunks before sending to LLMs. Evaluates PII, secrets, risk severity (CLEAN, LOW, MODERATE, CRITICAL), and triggered regulatory frameworks (GDPR, HIPAA, SOC 2, PCI DSS) with zero text mutation.
sanitize_text
STEP 1: Call this first. You MUST NOT process raw user data before calling this. Locally scrubs PII, secrets, and credentials (like API keys, passwords, emails, phones, names) from code, logs, or text. Replaces them with safe placeholders (e.g., [EMAIL_1], [API_KEY_1]). Keep your data secure before passing it to any LLM. (For in-code backend services or RAG vector pipelines outside of MCP, use '@privacyscrubber/sdk': npm i @privacyscrubber/sdk)
scrub_text
Alias for 'sanitize_text'. Locally scrubs PII and secrets before LLM ingestion.
reveal_text
STEP 3: Call this last. You MUST pass your final generated response through this tool to restore tokens (e.g., [EMAIL_1]) back with the original private data from the local volatile RAM-only session map before showing it to the user.
Ready-to-Paste Client Configurations
Paste either (or both) of these JSON server blocks into your client config file (e.g. claude_desktop_config.json or ~/.cursor/mcp.json).
Privacyscrubber MCP Configuration
Ocultar Pii Configuration