Ocultar Pii

This connects Claude Desktop to a local PII detection and tokenization engine that runs entirely on your infrastructure. It wraps the OCULTAR refinery, which uses a multi-tier pipeline including regex validators (Luhn for credit cards, MOD97 for IBANs), libphonenumber, entropy scoring, and an optional local LLM for named entity recognition. Tokens are deterministic SHA-256 hashes, so you can still run joins and aggregations on redacted data. The architecture is fail-closed: if the refinery is down, requests block rather than leaking plaintext. Reach for this when you're connecting Claude to customer data, support tickets, or financial records and need verifiable guarantees that sensitive fields never leave your network boundary.