Doc Sanitizer Server

A local, containerized MCP (Model Context Protocol) server that uses a local LLM (via Ollama) to sanitize documents by removing or transforming PII before content is sent to public LLM services.

Features

• Document Support: Word (.docx), PDF, Excel (.xlsx/.xls), CSV, Plain text, Email (.eml)
• PII Detection: Names, emails, phone numbers, companies, addresses, financial data, IDs
• Flexible Actions: Delete, invent synthetic data, or keep partial information
• Profile Management: Create and manage multiple sanitization profiles via CLI
• MCP Integration: Works with Claude Desktop, Claude.ai, and Claude Code
• Privacy First: All processing happens locally - nothing sent to external services

Quick Start

Prerequisites

• Docker and Docker Compose
• Ollama (installed automatically via Docker)

Installation

git clone https://github.com/yourusername/doc-sanitizer-mcp.git
cd doc-sanitizer-mcp
./setup.sh

Configuration

Edit .env to customize settings:

# Change LLM model (no rebuild required)
OLLAMA_MODEL=phi4:14b

# Alternative models:
# OLLAMA_MODEL=qwen2.5:7b    # Faster, less RAM
# OLLAMA_MODEL=llama3.2:3b   # Fastest, minimal RAM

To switch models:

# Pull new model
docker exec doc-sanitizer-ollama ollama pull qwen2.5:7b

# Update .env
sed -i '' 's/OLLAMA_MODEL=.*/OLLAMA_MODEL=qwen2.5:7b/' .env

# Restart
docker compose restart doc-sanitizer

Claude Desktop Integration

Add to ~/Library/Application Support/Claude/claude_desktop_config.json:

{
  "mcpServers": {
    "doc-sanitizer": {
      "url": "http://localhost:8000/sse"
    }
  }
}

Usage

Via Claude (MCP Tools)

Once configured, you can ask Claude:

• "List available sanitization profiles"
• "Show me the default profile settings"
• "Sanitize this document using the high_privacy profile"

Via CLI

# List profiles
doc-sanitizer profiles list

# Create a new profile
doc-sanitizer profiles create high_privacy

# Edit profile settings
doc-sanitizer profiles edit high_privacy --set person_name=delete --set company=delete

# Sanitize a document
doc-sanitizer sanitize document.docx --profile high_privacy

Profile Management

Profiles define how each PII type is handled:

PII Type	Available Actions
person_name	delete, invent, keep_part
email	delete, keep_part
phone	delete, invent, keep_part
company	keep_part, invent
address	delete, invent
financial	delete, invent
id_numbers	delete, invent
date_of_birth	delete, invent

Profiles persist across container restarts (stored in ~/.doc-sanitizer/).

Documentation

• Installation Guide
• Usage Guide
• Profile Management
• API Reference
• Development Guide

License

MIT License - see LICENSE for details.