Skip to content
All use cases

Use case · MCP clients

Keep private data out of MCP tool calls.

Claude Desktop, Cursor and VS Code connect to tools through MCP (Model Context Protocol, the way these apps use tools). The Vrymdor™ AI Node is an MCP server: it masks what those tools send and receive, and shows the app only the tools your policy allows.

The problem

A tool call carries arguments the model wrote, and the tool’s answer comes back into the chat.

With the AI Node

Desktop apps start a local command, so they connect through the node’s stdio bridge, which runs from the node image in Docker.

Read the MCP setup guide

  1. Download the node from your dashboard and load it into Docker.
  2. Add the vrymdor server to the app’s MCP settings with your Node Host URL, Agent ID and Agent Secret: claude_desktop_config.json for Claude Desktop, .cursor/mcp.json for Cursor, .vscode/mcp.json for VS Code.
  3. Restart the app. The Vrymdor tools appear in its tools menu.
  4. Ask it to use vrymnox_sanitize on: mail [email protected]. The tool answers mail [REDACTED:EMAIL].

Use test data for this first check, never real personal data.

Try it on a tool call’s arguments

The AI Node hides email addresses, phone numbers, card numbers, US Social Security numbers, private keys, and the API keys and tokens for OpenAI, Anthropic, Stripe, GitHub, AWS, Google and Slack, plus bearer tokens and JWTs. Each one becomes a label like [REDACTED:EMAIL], so the model still knows something was there.

Runs in your browserEdit the sample. What you type here never leaves your browser.
What the AI model reads3 masked
Tool: github__create_issue Arguments: title: Login fails for [REDACTED:EMAIL_1] body: The customer says the token [REDACTED:GITHUB_TOKEN_1] stopped working after the reset. Card on file [REDACTED:CREDIT_CARD_1].

The tool still gets a useful issue, without the address, the token or the card. Masked here: EMAIL 1, GITHUB_TOKEN 1, CREDIT_CARD 1.

This demo uses the Playground's Local engine: public, well known detectors set to the types the AI Node masks by default, in the AI Node's [REDACTED:TYPE] format. In your workflows, the Vrymdor™ AI Node does the masking.

What it does not cover

Plainly, so you know where you still need care.

Start free, upgrade when you grow.

Community is free for up to 2 agents and 10,000 requests a month, with a hard cap so nothing is ever billed. Pro is $29 a month for up to 15 agents and 100,000 requests, and Business is $99 a month for up to 50 agents and 500,000 requests, each with 14 days free. Enterprise is sized to your contract.

Questions, answered plainly

Does it mask what I type into the chat?
No. Your prompt goes to the app’s model provider before any tool runs. The AI Node masks the arguments a tool call carries and the answer that comes back.
Which tools does the app see?
vrymnox_sanitize, vrymnox_check (a dry run), vrymnox_hold_status, vrymnox_llm when a model is set up on your node, and every tool your policy allows for the agent’s role, named like github__create_issue.
Do I need Docker?
For desktop apps, yes: the bridge runs from the node image. Code that can fetch its own access token can use MCP over HTTP at /mcp on your node instead.