Omitly is launching soon — join the waitlist →

Free MCP · on-device · nothing uploaded

Check PDF redactions from Claude

Add one MCP server and ask Claude "did I actually redact this?" It checks the file on your machine and tells you whether the SSNs and account numbers are still sitting under the black boxes. The PDF never leaves your computer.

Add it to your client

Requires Node 18+. The server runs via npx — no separate install.

Claude Desktop

Edit claude_desktop_config.json (Settings → Developer → Edit Config), then fully quit and reopen.

{
  "mcpServers": {
    "omitly-leak-check": {
      "command": "npx",
      "args": ["-y", "omitly-leak-check-mcp"]
    }
  }
}
Claude Code

One command in your terminal:

claude mcp add omitly-leak-check -- npx -y omitly-leak-check-mcp
Cursor

Add to ~/.cursor/mcp.json (or .cursor/mcp.json in a project):

{
  "mcpServers": {
    "omitly-leak-check": {
      "command": "npx",
      "args": ["-y", "omitly-leak-check-mcp"]
    }
  }
}
Windsurf

Add to ~/.codeium/windsurf/mcp_config.json, then reload:

{
  "mcpServers": {
    "omitly-leak-check": {
      "command": "npx",
      "args": ["-y", "omitly-leak-check-mcp"]
    }
  }
}

Then just ask

"Did I actually redact /path/to/report.pdf?"

"Scan this PDF for any SSNs or card numbers still in the text."

"Check the exhibits in this folder and tell me which ones leak."

The tools

check_redaction

Audit a 'redacted' PDF and report any PII still in the text layer underneath the boxes.

find_sensitive_regions

List PII candidates (emails, SSNs, phone, card numbers) with page and coordinates.

locate_text

Find exact strings — names, addresses, account refs — and their positions.

All three are read-only and detect-only. They never modify a file.

This finds the problem. Omitly fixes it.

Detecting a leak is free. Removing the data for real — stripping the characters from the file, verifying nothing survives, and writing a signed audit log — is the Omitly desktop app. Detection is also pattern-based: names, addresses and image-only text aren't covered, so a clean result isn't proof of completeness, but a leak is conclusive.

Join the waitlist

Questions

What is the Omitly leak-check MCP?

It's a free Model Context Protocol server that gives Claude (or any MCP client) three tools to inspect PDFs on your machine: check whether a 'redacted' file still leaks PII, find sensitive regions, and locate specific text. It runs a WebAssembly build of Omitly's detector locally — your documents never leave the machine.

Does it upload my PDFs?

No. The detector runs inside the MCP process on your computer. Nothing is sent to a server. You can run it offline.

Can it redact a PDF for me?

No — it's detect-only by design. It tells you a redaction leaked; it never modifies a file. Actually removing the data (with independent verification and a signed audit log) is the Omitly desktop app.

Do I need to install anything?

Just Node 18+. The server runs via npx, so there's no separate install step — your MCP client downloads and runs it on demand.

Is it really free?

Yes. Detecting a leak is free and unlimited. The paid product is the Omitly desktop app that removes the data and proves it's gone.