Install
$ agentstack add mcp-postralai-masquerade ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ● Network access Used
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Masquerade MCP: Redact. Replace. Retain Control.
[](https://github.com/user-attachments/assets/80b1d8ac-a012-41ce-8e92-64d567f2427f)
🤐 Problem: Tools like Claude or GPT are incredibly powerful, but they require raw input. If you're dealing with contracts, medical records, or internal documents, that's risky.
🛡️ Solution: Masquerade acts as a privacy firewall for your files. Just paste in the file path to a PDF, and Masquerade will:
- Automatically detect sensitive data (names, emails, dates, entities)
- Redact the sensitive data
- Let you preview before sending to an LLM
Architecture
- User Input: The user asks Claude to redact a PDF by providing its file path.
- PDF Processing: MCP reads the PDF and converts it to text.
- Sensitive Data Detection: The text is sent to Tinfoil (an isolated AI platform using Llama 3.3 70B) to identify sensitive data.
- Redaction: MCP removes the sensitive data and creates a redacted PDF.
- Summary Return: MCP sends Claude a summary with:
- Masked versions of the sensitive data
- Redaction counts per page
- The path to the redacted file
- Quering PDF with Claude: The user can upload the redacted PDF to Claude if satisfied with the redactions.
Installation
[](https://github.com/user-attachments/assets/76dedb64-1ef5-4ab4-afe1-11f399b3653b)
- Install Claude desktop
- Get Tinfoil API key (create account and API key)
- Configure environment
Option 1: Automated
curl -O https://raw.githubusercontent.com/postralai/masquerade/main/setup.sh && bash setup.sh
- Restart Claude desktop app (if successfully configured)
Option 2: Manual (click to expand)
- Create a virtual environment with **Python ">=3.10,
How to use?
- Prompt Claude: "Redact sensitive information from this PDF: /path/to/filename.pdf"
- MCP opens the redacted and highlighted PDF files
- Manually upload the redacted PDF to Claude for quering
Note: Don't upload the original PDF to Claude, only the file path.
Contributing
If you have a fix or improvement, feel free to submit a pull request. For significant changes, please open an issue first to discuss your proposed updates.
See the [Developer section](docs/developers.md) for the installation of this repository.
License
This project is licensed under the MIT License - see the [LICENSE](LICENSE) file for details.
Need Help?
For questions and common issues, please see the [FAQ section](docs/faq.md) or open an issue on GitHub.
Source & license
This open-source MCP server is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: postralai
- Source: postralai/masquerade
- License: MIT
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.