A side-by-side look at the PII & Secret Redactor and Sieve MCP MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.
Verdict: choose PII & Secret Redactor for security work; choose Sieve MCP for security. You can also run both side by side in one mcpServers block.
detect_pii, redact_text, restore_text.sieve_health_status, sieve_self_test, sieve_findings_list.Rows where the two servers differ are marked.
| Spec | P PII & Secret Redactor | |
|---|---|---|
| Category | Security | Security |
| Quality signal | 45/100 · Fair | 51/100 · Good |
| Install command | Not confirmed yet | Not confirmed yet |
| Transport | — | — |
| Auth | Not declared | No auth required |
| Pricing | Freemium | Free |
| Required env vars | None listed | None listed |
| Verified owner | Community listing | Community listing |
| GitHub stars | 0 | 1 |
| Directory activity | 0 views 0 installs 0 upvotes | 2 views 0 installs 0 upvotes |
| Tools | 4 | 9 |
| Full listing | View PII & Secret Redactor | View Sieve MCP |
detect_piifindings with type, position and a masked preview. Never echoes full values.redact_textplaceholder (stable tokens like `<EMAIL_1>`, same value gives the same token), mask, salted hash, or remove.restore_textswap placeholders back to the originals in the model's response, using the mapping you keep.list_detectorsexactly what is and is not covered.sieve_health_statusReturns service health and finding counts.sieve_self_testVerifies scanner rules and transcript source coverage are healthy.sieve_findings_listLists findings from the most recent scan.sieve_issue_listLists scanner health issues — unreadable sources, permission errors, parse failures.sieve_scan_historyReturns past scan job summaries.sieve_scan_statusReturns status of the current or most recent scan.sieve_check_textChecks whether text contains secrets. **Returns boolean only — never echoes input or detected values.**sieve_redact_textRedacts secrets from text, replacing values with `sieve://` placeholders.sieve_vault_runExecutes a command with macOS Keychain-resolved secrets injected as env vars. Secrets never transit the MCP channel.Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.
No confirmed install command for PII & Secret Redactor yet — follow the setup steps linked from its listing page rather than a guessed package name.
No confirmed install command for Sieve MCP yet — follow the setup steps linked from its listing page rather than a guessed package name.