MCP SERVEROn npm · v0.2.0
Privent tools, in every MCP client.
@priventai/mcp-server gives Claude, Cursor, or any MCP client the Privent tools: tokenize, detokenize, risk score, and audit, backed by your Privent organization. One package, Apache-2.0, Node.js 20 or newer.
Install in two minutes.
- 1Add Privent to your MCP clientDrop this into your client's MCP configuration (Cursor shown; Claude Desktop uses the same shape). Use an AGENT_SDK API key, not an extension key, and point PRIVENT_BASE_URL at your own deployment if you self-host.mcp.jsonCopied
{ "mcpServers": { "privent": { "command": "npx", "args": ["-y", "@priventai/mcp-server"], "env": { "PRIVENT_BASE_URL": "https://api.privent.ai", "PRIVENT_API_KEY": "sk-..." } } } } - 2Or run the server directlyThe package executes with npx, so there is nothing to clone or build.shellCopied
npx -y @priventai/mcp-server
- 3Verify the connectionAsk your agent to call privent_health. It reports the backend it reached and the organization your key belongs to.
WHAT YOUR AGENT GAINS
Six tools by default.
privent_healthVerify the connection to your Privent backend.
privent_risk_scoreScore a payload's risk before it leaves the agent.
privent_tokenize_textReplace sensitive values with reversible tokens.
privent_detokenize_textRestore original values at a trusted boundary.
privent_destroy_sessionDestroy a vault session and its token mappings.
privent_audit_eventsWrite audit events your compliance report can cite.
PREVIEW TOOLSOff by default
PRIVENT_ENABLE_DOCUMENTS=1privent_document_tokenize · privent_document_detokenize · privent_document_job_status · privent_document_downloadDocument jobs run through the async job API (POST /v1/documents/jobs with an operation field), not a synchronous call.
PRIVENT_ENABLE_RISK_BATCH=1privent_risk_score_batchBatch risk scoring over multiple payloads in one call.
PRIVENT_ENABLE_TOOL_EXEC=1privent_tool_exec_evaluateEvaluates a tool execution against policy.
PRIVENT_ENABLE_DETECT=1privent_detectMonitoring detect; also needs PRIVENT_EXTENSION_API_KEY.
THE BOUNDARY
What this package is not.
- –It does not sit between your agent and other MCP servers. That job belongs to @priventai/mcp-gateway, which wraps any stdio MCP server and tokenizes tool-call arguments and results.
- –It does no vault crypto, PII detection, or policy evaluation in-process. It is an HTTP adapter over your Privent backend.
- –Nothing is blocked. The tools are there for the agent to use, and every use leaves an audit event.
- –The gateway fails open by design: when protection is unavailable the call still passes, and every such pass is recorded as a protection event.
MCP tool-call interception ships as @priventai/mcp-gateway: run it with npx in front of any stdio MCP server you already use. n8n is where in-engine interception lives today.
Guardrails-style sanitization deletes data. Privent turns ahmet@firma.com into [EMAIL_001] and can restore it.
