# tracepiishield-mcp

Scans LLM traces and tool data for personal information, with tools to redact fields and export trace audits. A bearer token is required for production requests.

- MCP server · `type=mcp` · Claude Code, Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, Gemini CLI
- Author: clauxel
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/clauxel/tracepii-shield-mcp
- Updated: 2026-05-19
- HTML: https://affpapa.org/en/nevibecode/mcp/tracepiishield-mcp

## What it does

This remote MCP service checks LLM traces and tool payloads for personally identifiable information. Its tools can redact payload values, label sensitive fields, issue privacy receipts, and export trace audit data.

The hosted service is paid and uses Streamable HTTP. Production requests need a bearer token obtained through the product website. Without that token, calls to the production service will not work.

In Claude Code, add the server with `claude mcp add --transport http tracepiishield-mcp https://tracepiishield.clauxel.com/mcp`. It also supports Codex, Cursor, GitHub Copilot, Windsurf (Devin Desktop), Cline, Zed, and Gemini CLI.

## Requirements
- Remote server: `https://tracepiishield.clauxel.com/mcp`

## Install

### Claude Code (native platform)

**Platform CLI: remote server**
```bash
claude mcp add --transport http tracepiishield-mcp https://tracepiishield.clauxel.com/mcp
```

### Codex

**Platform CLI: remote server**
```bash
codex mcp add tracepiishield-mcp --url https://tracepiishield.clauxel.com/mcp
```

### Cursor

**Config file**
File `.cursor/mcp.json`:
```json
{
    "mcpServers": {
        "tracepiishield-mcp": {
            "url": "https://tracepiishield.clauxel.com/mcp"
        }
    }
}
```

### GitHub Copilot

**Config file**
File `.vscode/mcp.json`:
```json
{
    "servers": {
        "tracepiishield-mcp": {
            "type": "http",
            "url": "https://tracepiishield.clauxel.com/mcp"
        }
    }
}
```

### Gemini CLI

**Platform CLI: remote server**
```bash
gemini mcp add -t http tracepiishield-mcp https://tracepiishield.clauxel.com/mcp
```

## When to use it
- scan an LLM trace for personal information
- redact sensitive values in a tool payload
- classify a field containing sensitive data
- issue a privacy receipt for a trace
- export trace audit data

## Example prompts
- Scan this LLM trace for personal information and list the sensitive fields.
- Redact personal data from this tool payload before it is sent.
- Classify this field and issue a privacy receipt for the trace.

## Similar
- [openai-privacy-filter](https://affpapa.org/en/nevibecode/skills/openai-privacy-filter.md) — skill · 369 installs
- [privacy-parser-pii-extraction](https://affpapa.org/en/nevibecode/skills/privacy-parser-pii-extraction.md) — skill · 310 installs
- [pii-detect](https://affpapa.org/en/nevibecode/skills/pii-detect.md) — skill · 762 installs
- [Redact MCP](https://affpapa.org/en/nevibecode/mcp/redact-mcp.md) — MCP server · ★ 6
- [blackout](https://affpapa.org/en/nevibecode/mcp/blackout.md) — MCP server
- [configuring-guardrails](https://affpapa.org/en/nevibecode/skills/configuring-guardrails.md) — skill · 2900 installs

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md