redacted-context-mcp
Read-only, redacted local knowledge-base context for coding agents.
Active since 2026-06, version 0.10.0, MIT licence. Python and MCP.
An MCP server and CLI that lets a coding agent search, navigate and read a private local folder without seeing the raw names in it. Every client name, person, email address, URL, phone number, secret and meaningful file name is replaced with a stable, salted placeholder before it leaves the process.
Read-only by default, no runtime dependencies, and honest about its limits: it’s a practical privacy guardrail, not anonymisation.
notes/kickoff.md Raw, stays on your machine
Avery Example: Example Lantern Labs wants the search prototype for PROJECT-LANTERN-042 reviewed by Friday.
Avery Example: Send the findings to avery@example.com, or call +1 202-555-0147.
drafts/reply.md What the agent wrote
Hi [PERSON_31ce220d…],
The review of [SENSITIVE_d5020227…] is done. I'll send the findings to [ORG_a5481015…] on Friday, with a copy to [EMAIL_8eb768ff…].
Posts about it
Hiding names from an AI is easy. Keeping it useful is the hard part.
redacted-context-mcp lets a coding agent work with all of your private notes, and write emails and documents that name the right people, without those names ever leaving your machine. How it works, what the first version got wrong, and why it redacts at the source.