← Documentation

EVIDIQ Redact

Deterministic detection and removal of sensitive data — before an agent sends anything anywhere. Redact finds sensitive values by structure rather than by guesswork, removes them in the mode you choose, and returns a signed report of exactly what was found and where. No model in the hot path, and nothing is stored.

Quickstart

Connect the Streamable HTTP MCP endpoint, then preflight for free before paying.

claude mcp add --transport http evidiq-redact https://mcp.evidiq.dev/redact/mcp

Or probe the live pricing discovery endpoint:

curl -s https://mcp.evidiq.dev/redact/x402

Prefer a Skill file? Fetch the agent-readable EVIDIQ Redact Skill:

curl -s https://mcp.evidiq.dev/redact/skill.md

What Redact is for

Ten MCP tools

Five free tools cover discovery, preflight, and offline verification. Five paid tools handle detection, redaction, policy evaluation, and dataset de-identification.

Paid detection & redaction

• redact_text — Detect and redact one text blob; returns redacted text, findings with offsets, and a signed report. (0.005 USDT0)
• scan_document — Inventory only, no rewriting: which sensitive entities exist, where, and at what confidence. (0.01 USDT0)
• redact_document — Structure-preserving redaction of markdown, HTML, CSV, JSON, NDJSON, or plain text. (0.015 USDT0)
• policy_check — Evaluate content against a named policy profile and return PASS, REVIEW, or BLOCK with violations. (0.02 USDT0)
• deidentify_dataset — Column-aware pseudonymization with stable tokens and re-identification-risk warnings. (0.03 USDT0)

Free preflight and verification

• redact_capabilities — Detector catalog and versions, policy profiles, limits, redaction modes, and full pricing. (free)
• validate_input — Validate size, format, and encoding and return the finding count — without returning content or charging. (free)
• estimate_cost — Quote the immutable cost of any paid tool. (free)
• verify_redaction_report — Recompute the report digest and verify its EIP-191 signature. (free)
• get_artifact — Retrieve a redacted artifact by id, within its in-memory TTL. (free)

Engine limits

Policy profiles: pii-basic, pci-lite, health-lite, crypto-hygiene, pre-prompt. Live values come from the free redact_capabilities tool.

Recommended workflow

Settlement happens before a paid tool runs, so a malformed argument is still a paid call. Preflight for free first.

1. Call redact_capabilities for the detector set version, profiles, and prices.
2. Call validate_input — it returns the finding count for free, so you can decide whether redaction is worth buying.
3. Call estimate_cost for the intended operation.
4. Submit one paid call per request. Redact enforces strict x402 payment authorization.
5. Verify offline with verify_redaction_report, and re-fetch output with get_artifact while its TTL lasts.

What a report proves, and what it does not

A report proves that this exact input, under this detector set version and this policy version, produced this exact output and these findings. Anyone can re-run and compare digests. It does not prove the content is now free of sensitive data: deterministic detection has a recall limit, and unstructured personal names and postal addresses are the weak spot. They are reported at low confidence and can never alone drive a BLOCK.

Findings carry offsets and detector ids, never the matched values. A report that quoted what it found would itself be a leak, and reports get pasted into tickets.

{
  "engine": "EVIDIQ-Redact/1.0",
  "detectorSetVersion": "1.0.0",
  "policy": "pre-prompt",
  "findings": [
    { "detector": "BIP39_MNEMONIC", "family": "crypto_secret",
      "confidence": "validated", "start": 812, "end": 913, "action": "remove" }
  ],
  "verdict": "BLOCK",
  "integrity": { "algorithm": "SHA-256", "digest": "...", "signature": "0x...", "signer": "0x8a3c7524..." }
}

x402 pricing

Payments use x402 v2 exact scheme with USDT0 (6 decimals) on X Layer (eip155:196). The public discovery endpoint lists all ten tools.

Verification and settlement run through the official OKX Onchain OS Payment SDK (@okxweb3/x402-core and @okxweb3/x402-evm). The OKX facilitator verifies each authorization and settles it on X Layer before any detection runs. Each price reaches the SDK as an explicit USD₮0 atomic asset amount rather than a USD string, so neither the fee nor its token can be substituted by conversion.

Licensing

EVIDIQ owns and licenses its original Redact code under MIT. Third-party dependencies maintain their own open-source licenses preserved in THIRD_PARTY_NOTICES.md.

← Back to docs