NEWPrivent 2.0 is here.
Privent
MCP SERVEROn npm · v0.2.0

Privent tools, in every MCP client.

@priventai/mcp-server gives Claude, Cursor, or any MCP client the Privent tools: tokenize, detokenize, risk score, and audit, backed by your Privent organization. One package, Apache-2.0, Node.js 20 or newer.

Install in two minutes.

  1. 1
    Add Privent to your MCP clientDrop this into your client's MCP configuration (Cursor shown; Claude Desktop uses the same shape). Use an AGENT_SDK API key, not an extension key, and point PRIVENT_BASE_URL at your own deployment if you self-host.
    mcp.json
    Copied
    {
      "mcpServers": {
        "privent": {
          "command": "npx",
          "args": ["-y", "@priventai/mcp-server"],
          "env": {
            "PRIVENT_BASE_URL": "https://api.privent.ai",
            "PRIVENT_API_KEY": "sk-..."
          }
        }
      }
    }
  2. 2
    Or run the server directlyThe package executes with npx, so there is nothing to clone or build.
    shell
    Copied
    npx -y @priventai/mcp-server
  3. 3
    Verify the connectionAsk your agent to call privent_health. It reports the backend it reached and the organization your key belongs to.
WHAT YOUR AGENT GAINS

Six tools by default.

privent_healthVerify the connection to your Privent backend.
privent_risk_scoreScore a payload's risk before it leaves the agent.
privent_tokenize_textReplace sensitive values with reversible tokens.
privent_detokenize_textRestore original values at a trusted boundary.
privent_destroy_sessionDestroy a vault session and its token mappings.
privent_audit_eventsWrite audit events your compliance report can cite.
PREVIEW TOOLSOff by default
PRIVENT_ENABLE_DOCUMENTS=1privent_document_tokenize · privent_document_detokenize · privent_document_job_status · privent_document_downloadDocument jobs run through the async job API (POST /v1/documents/jobs with an operation field), not a synchronous call.
PRIVENT_ENABLE_RISK_BATCH=1privent_risk_score_batchBatch risk scoring over multiple payloads in one call.
PRIVENT_ENABLE_TOOL_EXEC=1privent_tool_exec_evaluateEvaluates a tool execution against policy.
PRIVENT_ENABLE_DETECT=1privent_detectMonitoring detect; also needs PRIVENT_EXTENSION_API_KEY.
THE BOUNDARY

What this package is not.

  • –It does not sit between your agent and other MCP servers. That job belongs to @priventai/mcp-gateway, which wraps any stdio MCP server and tokenizes tool-call arguments and results.
  • –It does no vault crypto, PII detection, or policy evaluation in-process. It is an HTTP adapter over your Privent backend.
  • –Nothing is blocked. The tools are there for the agent to use, and every use leaves an audit event.
  • –The gateway fails open by design: when protection is unavailable the call still passes, and every such pass is recorded as a protection event.

MCP tool-call interception ships as @priventai/mcp-gateway: run it with npx in front of any stdio MCP server you already use. n8n is where in-engine interception lives today.

Guardrails-style sanitization deletes data. Privent turns ahmet@firma.com into [EMAIL_001] and can restore it.