A side-by-side look at the PII & Secret Redactor and Ocultar Pii MCP servers: transport, auth, tools, quality signals, and the config to install either one in Claude, Cursor, Windsurf or VS Code.
Verdict: choose PII & Secret Redactor for security work; choose Ocultar Pii for security. You can also run both side by side in one mcpServers block.
detect_pii, redact_text, restore_text.OCU_MASTER_KEY, OCU_SALT, OCU_AUDITOR_TOKEN, OCU_VAULT_PATH, SLM_SIDECAR_URL, SLM_ADAPTER.Rows where the two servers differ are marked.
| Spec | P PII & Secret Redactor | |
|---|---|---|
| Category | Security | Security |
| Quality signal | 45/100 · Fair | 32/100 · Emerging |
| Install command | Not confirmed yet | Not confirmed yet |
| Transport | — | — |
| Auth | Not declared | Not declared |
| Pricing | Freemium | Not declared |
| Required env vars | None listed | OCU_MASTER_KEYOCU_SALTOCU_AUDITOR_TOKENOCU_VAULT_PATHSLM_SIDECAR_URLSLM_ADAPTER |
| Verified owner | Community listing | Community listing |
| GitHub stars | 0 | 1 |
| Directory activity | 0 views 0 installs 0 upvotes | 1 views 0 installs 0 upvotes |
| Tools | 4 | Not listed |
| Full listing | View PII & Secret Redactor | View Ocultar Pii |
detect_piifindings with type, position and a masked preview. Never echoes full values.redact_textplaceholder (stable tokens like `<EMAIL_1>`, same value gives the same token), mask, salted hash, or remove.restore_textswap placeholders back to the originals in the model's response, using the mapping you keep.list_detectorsexactly what is and is not covered.No tool names declared yet. Check the project README from the listing page.
Paste either block (or both) into your client config, e.g. claude_desktop_config.json or ~/.cursor/mcp.json. We only show a config when the install command is confirmed.
No confirmed install command for PII & Secret Redactor yet — follow the setup steps linked from its listing page rather than a guessed package name.
No confirmed install command for Ocultar Pii yet — follow the setup steps linked from its listing page rather than a guessed package name.