能力标签

🔌

MCP工具

PIIShield

基于 TypeScript · 让 AI 助手直接操作你的系统与工具

英文名：PII-Shield

⭐ 99 Stars 🍴 21 Forks 💻 TypeScript 📄 MIT 🏷 AI 8.0分

8.0AI 综合评分

mcptypescriptpii

⬇ 下载源码 ZIP ⚙️ 配置说明

✦ AI Skill Hub 推荐

PIIShield 是 AI Skill Hub 本期精选MCP工具之一。综合评分 8.0 分，整体质量较高。我们强烈推荐将其纳入你的 AI 工具库，帮助提升工作效率。

📚 深度解析

PIIShield 是一款基于 MCP（Model Context Protocol）标准协议的 AI 工具扩展。MCP 协议由 Anthropic 开发并开源，旨在建立 AI 模型与外部工具之间的标准化通信接口，目前已被 Claude Desktop、Claude Code、Cursor 等主流 AI 工具采纳。

通过安装 PIIShield，你的 AI 助手将获得额外的工具调用能力，可以用自然语言直接操控该工具的功能，无需学习复杂的命令行语法。MCP 工具的核心价值在于"一次配置，永久增强"——配置完成后，每次与 AI 对话时都可以无缝调用这些工具。

在技术实现上，MCP 工具通过标准的 JSON-RPC 协议与 AI 客户端通信，工具的功能以"工具列表"的形式暴露给 AI 模型，AI 可以按需调用。PIIShield 提供了结构化的工具调用接口，使 AI 模型能够精确地理解和使用每个功能点，显著降低 AI 在工具使用上的错误率。

与传统的 API 集成相比，MCP 工具的优势在于无需编写代码——用户只需在配置文件中添加几行 JSON，即可让 AI 获得全新能力。AI Skill Hub 将 PIIShield 评为 AI 评分 8.0 分，属于同类工具中的优质选择。

📋 工具概览

PIIShield 是一款遵循 MCP（Model Context Protocol）标准协议的 AI 工具扩展。通过 MCP 协议，它可以让 Claude、Cursor 等主流 AI 客户端直接访问和操作外部工具、数据源和服务，实现 AI 能力的无缝扩展。无论是文件操作、数据库查询还是 API 调用，都可以通过自然语言在 AI 对话中直接触发，极大提升生产效率。

GitHub Stars

⭐ 99

开发语言

TypeScript

支持平台

Windows / macOS / Linux

维护状态

轻量级项目，按需更新

开源协议

MIT

AI 综合评分

8.0 分

工具类型

MCP工具

Forks

📖 中文文档

以下内容由 AI Skill Hub 根据项目信息自动整理，如需查看完整原始文档请访问底部「原始来源」。

📌 核心特色

通过标准 MCP 协议与 Claude、Cursor 等主流 AI 客户端深度集成
提供结构化工具调用接口，显著降低 AI 集成复杂度
支持 Claude Desktop 和 Claude Code 无缝接入，开箱即用
可与其他 MCP 工具组合叠加，构建完整 AI 工作站
轻量无侵入设计，不影响现有系统架构

🎯 主要使用场景

在 Claude Desktop 对话中直接调用本地工具，实现 AI 与系统的深度联动
通过自然语言驱动复杂的多步骤自动化任务，代替繁琐手动操作
将多个 MCP 工具组合使用，构建个人专属 AI 工作站

以下安装命令基于项目开发语言和类型自动生成，实际以官方 README 为准。

安装命令

# 方式一：通过 Claude Code CLI 一键安装
claude skill install https://github.com/gregmos/PII-Shield

# 方式二：手动配置 claude_desktop_config.json
{
  "mcpServers": {
    "piishield": {
      "command": "npx",
      "args": ["-y", "pii-shield"]
    }
  }
}

# 配置文件位置
# macOS: ~/Library/Application Support/Claude/claude_desktop_config.json
# Windows: %APPDATA%/Claude/claude_desktop_config.json

📋 安装步骤说明

确认已安装 Node.js（v18 或以上版本）
打开 Claude Desktop 或 Claude Code 的 MCP 配置文件
按「交给 Agent 安装 → Claude Desktop」标签中的 JSON 配置填入 mcpServers 字段
保存配置文件并重启 Claude 客户端
重启后，在对话中即可使用本工具

以下用法示例由 AI Skill Hub 整理，涵盖最常见的使用场景。

常用命令 / 代码示例

# 安装后在 Claude 对话中直接使用
# 示例：
用户: 请帮我用 PIIShield 执行以下任务...
Claude: [自动调用 PIIShield MCP 工具处理请求]

# 查看可用工具列表
# 在 Claude 中输入："列出所有可用的 MCP 工具"

以下配置示例基于典型使用场景生成，具体参数请参照官方文档调整。

配置示例

// claude_desktop_config.json 配置示例
{
  "mcpServers": {
    "piishield": {
      "command": "npx",
      "args": ["-y", "pii-shield"],
      "env": {
        // "API_KEY": "your-api-key-here"
      }
    }
  }
}

// 保存后重启 Claude Desktop 生效

📑 README 深度解析真实文档完整度 58/100 查看 GitHub 原文 →

以下内容由系统直接从 GitHub README 解析整理，保留代码块、表格与列表结构。

简介

<p align="center"> <h1 align="center">🛡️ PII Shield</h1> <p align="center"> <strong>Anonymize documents before Claude sees them. Restore real data after analysis.</strong> </p> <p align="center"> <a href="https://github.com/gregmos/PII-Shield/stargazers"><img src="https://img.shields.io/github/stars/gregmos/PII-Shield?style=flat-square&color=yellow" alt="GitHub Stars"></a> <a href="https://github.com/gregmos/PII-Shield/network/members"><img src="https://img.shields.io/github/forks/gregmos/PII-Shield?style=flat-square" alt="GitHub Forks"></a> <a href="LICENSE"><img src="https://img.shields.io/badge/license-MIT-blue?style=flat-square" alt="License: MIT"></a> <a href="https://nodejs.org/"><img src="https://img.shields.io/badge/node-22%2B-339933?style=flat-square&logo=nodedotjs&logoColor=white" alt="Node.js 22+"></a> </p> </p>

---

PII Shield reads your documents locally, replaces all personal data with placeholders (<PERSON_1>, <ORG_1>, etc.), and — when you want analysis — sends only the anonymized text to an LLM. After analysis, PII Shield restores the original data into the final document — entirely on your machine. PII never enters the API.

Document ──> [PII Shield on your machine] ──> anonymized text ──> [LLM analyzes] ──> [PII Shield restores] ──> Result
              John Smith  → <PERSON_1>                                                <PERSON_1> → John Smith
              Acme Corp.  → <ORG_1>                                                   <ORG_1>    → Acme Corp.

Two ways to use it, sharing the same engine:

Form	Who it's for	Install
Standalone CLI (`pii-shield`)	Anyone — anonymize files locally for any LLM (or just for compliance / GDPR). Pure offline.	`npm install -g pii-shield`
Claude Desktop / Code extension (`.mcpb` + `.skill`)	Claude Desktop and Claude Code users — get tools + skill + in-chat HITL panel.	Drag the `.mcpb` from a release into Settings → Extensions, then upload the `.skill`

v2 is a complete Node.js rewrite. The original Python product is still available — see What happened to v1? below.

Features

	Feature	Details
🔒	Zero PII in API	`anonymize_file` reads the document on your machine and returns only a file path + session id. Claude reads the anonymized file from disk — PII never enters an API request.
🧠	GLiNER zero-shot NER	[`knowledgator/gliner-pii-base-v1.0`](https://huggingface.co/knowledgator/gliner-pii-base-v1.0) over `onnxruntime-node` + `@xenova/transformers` (pinned triplet 1.22.0, deterministic `npm ci`). Handles ALL-CAPS, domain-specific names, multilingual text. No Python, no PyTorch.
👤	Human-in-the-Loop review	MCP Apps iframe UI rendered directly in Claude Desktop. Remove false positives, add missed entities — all occurrences updated automatically, no localhost browser detour.
📄	PDF + DOCX + plain text	`.pdf`, `.docx` (formatting + tracked changes preserved), `.txt`, `.md`, `.csv`. Pure-JS `.docx` pipeline — reads, edits, restores without a Word / LibreOffice install.
🇪🇺	17 EU + UK pattern recognizers	UK (NIN, NHS, passport, CRN, driving licence), DE (tax ID, social security), FR (NIR, CNI), IT (fiscal code, VAT), ES (DNI, NIE), CY (TIC, ID card), EU-wide (VAT, passport) — on top of the generic pack (email, phone, IBAN, credit card, crypto, US IDs, medical licence). 33 entity types in total.
🔗	Entity deduplication	"Acme" → `<ORG_1>`, "Acme Corp." → `<ORG_1a>`, "Acme Corporation" → `<ORG_1b>`. Canonical form picked once; every variant maps back to the same real value on deanonymize.
💾	Cross-session deanonymize	Each anonymized `.docx` carries its `session_id` in Word custom properties. Weeks later, in a brand new chat, drop the file in and `deanonymize_docx` restores PII from the embedded id — nothing to remember.
📦	Multi-file sessions	Anonymize N related documents under one `session_id`; identical entities share the same placeholder across files. One `deanonymize_text` / `deanonymize_docx` call restores PII everywhere.
🤝	Team handoff	`export_session(passphrase)` packs the mapping + anonymized documents into an encrypted `.pii-session` archive (AES-GCM via scrypt). Colleague runs `import_session` with the passphrase — PII never transits.
📊	Audit logging	Every tool call + response logged locally to `~/.pii_shield/audit/mcp_audit.log`. NER bootstrap trace, session lifecycle, dropped stderr — all on disk, appendable, off-network.

Prerequisites

Claude Desktop (any recent version)
Windows or Linux: Claude Desktop ships a compatible Node runtime. Nothing to install separately.
macOS: the macOS .mcpb below bundles its own Node 24.15.0. Nothing to install separately.

No terminal commands. No model download upfront. PII Shield handles model install in-chat via a panel that appears the first time you anonymize.

Step 2 — install the MCP extension

Claude Desktop → Settings → Extensions → Advanced Settings → Install extension → select your .mcpb.

On the first tool call PII Shield runs npm ci --ignore-scripts to install a pinned, deterministic set of runtime deps (onnxruntime-node, @xenova/transformers, gliner) into ~/.pii_shield/deps/installs/<slug>/. 2–3 minutes once per machine, instant thereafter.

Install exact-pinned dev deps

npm ci --ignore-scripts --legacy-peer-deps

Build the thin .mcpb (Windows / Linux + darwin via platform overrides)

npm run build:plugin

Also build the darwin-universal .mcpb (downloads Node 24.15.0 arm64 + x64)

npm run build:plugin:mac

Focused clean-install smoke for the sharp shim + transformers + gliner

npm run smoke:sharp-shim


<details>
<summary>Project structure</summary>

PII-Shield/ ├── nodejs-v2/ # The product │ ├── src/ │ │ ├── index.ts # MCP tool handlers │ │ ├── engine/ner-backend.ts # GLiNER + ONNX runtime boot │ │ ├── docx/ pdf/ mapping/ audit/ # Document pipelines │ │ └── portability/ # session export/import │ ├── plugin/ │ │ ├── build-plugin.mjs # thin .mcpb builder │ │ ├── build-mac-binary.mjs # darwin-universal .mcpb builder (bundles Node 24.15.0) │ │ └── skills/ │ │ ├── pii-contract-analyze/ # canonical skill source (SKILL.md + references/*.md) │ │ └── pii-contract-analyze.zip # release artefact — auto-rebuilt from the source dir by build-plugin.mjs │ ├── scripts/ │ │ ├── smoke-protocol.mjs # MCP protocol round-trip smoke │ │ ├── smoke-setup-panel.mjs # Setup-panel + install-tool smoke │ │ └── smoke-sharp-shim.mjs # Clean-install sharp-shim smoke │ ├── manifest.json # MCPB manifest (server.type=node) │ └── package.json ├── .github/workflows/test.yml # Node CI (ubuntu + windows + macos, Node 22 + 24) ├── LICENSE └── README.md ```

</details>

Standalone CLI — `pii-shield`

If you don't use Claude Desktop / Claude Code, install the CLI globally and run it on any file. Works on 20–30 documents in one session with shared placeholders across files.

```bash npm install -g pii-shield

pii-shield doctor # health check pii-shield install-model # download GLiNER (~634 MB, one-off)

Troubleshooting

Problem	Solution
First run is slow	First-ever call does `npm ci` into `~/.pii_shield/deps/` (~2–3 min). Subsequent runs are instant.
Install panel says "ZIP not found"	Click the panel's Download model button first. The browser saves to `~/Downloads` by default; PII Shield also scans OneDrive variants, Desktop, Documents. If your browser saves elsewhere, set Settings → Extensions → PII Shield → Model Downloads Folder and click Install again.
Install panel doesn't appear at all	The panel needs Claude Desktop ≥ 0.10 (renders `ui://` resources). On older hosts, ask Claude to call `start_model_setup` directly, or check `~/.pii_shield/audit/pii_shield_server.log`.
`Unsupported model IR version: 9`	Old `onnxruntime-node` cached. Delete `~/.pii_shield/deps/` — next run reinstalls with the pinned 1.22.0 triplet.
`Cannot find module '../build/Release/sharp-*.node'`	`sharp` has no native addon for your platform. PII Shield's shim intercepts `sharp` loads (text-only NER doesn't use it). If you still see this, you're on an older build — upgrade to v2.1.0.
macOS: server immediately disconnects after install	Make sure you installed `pii-shield-v2.1.0-macos.mcpb`, not `windows-linux`. The Mac variant bundles its own Node to dodge a Claude Desktop darwin host-runtime launch bug.
Review panel blank	Check `~/.pii_shield/audit/pii_shield_server.log` for MCP Apps resource errors. Claude Desktop version < 0.10 doesn't render `ui://` resources.
Tools not appearing	Restart Claude Desktop or send any message — the tool list refreshes on reconnect.