# io.github.nickjlamb/redacta-mcp (npm · redacta-mcp)

Pseudonymise and restore patient identifiers & PII in text — local, HIPAA Safe Harbor mode.

- Trust score: 69/100 (medium)
- Change this week: +23
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `redacta-mcp`: 69/100 (this document), [markdown](https://verifymcp.io/servers/nickjlamb-redacta-mcp/redacta-mcp.md), [page](https://verifymcp.io/servers/nickjlamb-redacta-mcp/redacta-mcp)

## Channel facts

- Registry: `npm`
- Package: `redacta-mcp`
- Version: `1.2.1`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (96 of 100), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (96 of 100), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 45/100
  - Source repository is publicly reachable at the declared URL.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT-0).
  - Actively maintained (last published 51 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 77/100
  - AI-judged instruction clarity (excellent).
  - Tool/resource definitions use about 373 tokens (~124/item across 3 items; 3 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add nickjlamb-redacta-mcp -- npx -y redacta-mcp
```

### Codex

```bash
codex mcp add nickjlamb-redacta-mcp -- npx -y redacta-mcp
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "nickjlamb-redacta-mcp": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "redacta-mcp"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add nickjlamb-redacta-mcp --command npx --arg -y --arg redacta-mcp
```

### Hermes

```yaml
mcp_servers:
  nickjlamb-redacta-mcp:
    command: "npx"
    args: ["-y", "redacta-mcp"]
```

### Other

```json
{
  "mcpServers": {
    "nickjlamb-redacta-mcp": {
      "command": "npx",
      "args": [
        "-y",
        "redacta-mcp"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-02 (score 69, +48)

- [security regression] Provenance: unverified → fail
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [functional regression] Security disclosure: fail → unverified
- [functional regression] Tool coverage: 100 → unverified
- [functional improvement] Schema quality: unverified → excellent
- [functional improvement] License: unverified → pass
- [functional improvement] Dependency health: unverified → partial
- [functional improvement] Stability: unverified → 0.20
- [functional improvement] Maintenance: unverified → pass
- [functional improvement] MCP protocol: unverified → pass
- [functional] Licence: MIT-0

### 2026-08-01 (score 21, +16)

- [functional improvement] Tool coverage: unverified → 100

### 2026-07-31 (score 5, −23)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 28, −18)

- [security regression] Malware scan: pass → unverified

### 2026-07-27 (score 46)

First indexed and scored.

## MCP tools (3)

### `redact` (~218 tokens)

Redact / pseudonymise text

Replace patient identifiers and PII in text with labelled tokens ([NHS_NUMBER_1], [PATIENT_NAME_1], ...) so it can be safely shared or processed. Deterministic patterns plus keyword-anchored names. Returns the redacted text, a report of what was replaced, and a token_map (token -> original) for later re-identification. The token_map is the key that reverses the redaction — handle it with care.

Input parameters:

- `categories` (array): Which pattern sets to apply. Defaults to clinical + general. 'clinical' = NHS/NI/DOB/MRN/postcode/SSN/ZIP/email/phone/names; 'general' = URLs, IPs, payment cards, IBANs, account numbers, vehicle regs…
- `text` (string, required): The text to redact.

### `reinstate` (~90 tokens)

Re-identify (restore originals)

Reverse a redaction: replace tokens with their original values using a token map from an earlier redact call. Use this to put real data back into output generated from redacted text.

Input parameters:

- `text` (string, required): Text containing Redacta tokens to restore.
- `token_map` (object, required): Token map, e.g. {"[NHS_NUMBER_1]": "943 476 5919"}.

### `self_check` (~65 tokens)

Self-check for residual identifiers

Scan already-redacted text for anything that still looks like an identifier (long numbers, emails, postcodes, URLs). A second pair of eyes, not a guarantee. Returns a list of possible leftovers to review.

Input parameters:

- `text` (string, required): Redacted text to re-scan.

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/nickjlamb-redacta-mcp/redacta-mcp#diagnostics

## Score history

- 2026-08-03: 69
- 2026-08-02: 69
- 2026-08-01: 21
- 2026-07-31: 5
- 2026-07-30: 28
- 2026-07-28: 46
- 2026-07-27: 46

## Links

- npm package: https://www.npmjs.com/package/redacta-mcp
- Socket report: https://socket.dev/npm/package/redacta-mcp
- Repository: https://github.com/nickjlamb/redacta
- Changelog RSS feed: https://verifymcp.io/servers/nickjlamb-redacta-mcp/redacta-mcp/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/nickjlamb-redacta-mcp/redacta-mcp/changelog.json
- HTML version of this page: https://verifymcp.io/servers/nickjlamb-redacta-mcp/redacta-mcp