pasteguard

AI gets the context. Not your secrets.
Automatically hides names, emails, and API keys before you send prompts to AI.

Quick Start · Chat · Coding Tools · Documentation

Detects personal data and secrets in many languages.
Your data never leaves your machine.

Works Everywhere

Chat — Masks PII and secrets when you paste into ChatGPT, Claude, and Gemini. You see originals, AI sees placeholders.

Apps — Open WebUI, LibreChat, or any self-hosted AI setup. Optionally routes sensitive requests to a local model.

Coding Tools — Cursor, Claude Code, Copilot, Windsurf — your codebase context flows to the provider. PasteGuard masks secrets and PII before they leave.

API Integration — Sits between your code and OpenAI-compatible or Anthropic APIs. Change one URL, your users' data stays protected.

Quick Start

Run PasteGuard as a local proxy:

docker run --rm -p 3000:3000 ghcr.io/sgasser/pasteguard:latest

Open localhost:3000 for the dashboard.

Point your tools or app to PasteGuard instead of the provider:

# One line to protect your data
client = OpenAI(base_url="http://localhost:3000/openai/v1")

Detection is multilingual out of the box — no per-language images or setup. For custom config or persistent logs: Read the docs →

Chat

Open-source browser extension for ChatGPT, Claude, and Gemini.

• Paste customer data → masked before it reaches the AI
• AI responds with placeholders → you see the originals
• Works with the same detection engine as the proxy

Currently in beta. Apache 2.0.

Join the Beta → · Chat docs →

Coding Tools

Protect your codebase context and secrets when using AI coding assistants.

Claude Code:

ANTHROPIC_BASE_URL=http://localhost:3000/anthropic claude

Cursor: Settings → Models → Enable "Override OpenAI Base URL" → http://localhost:3000/openai/v1

Codex CLI: Configure a custom provider with base_url = "http://127.0.0.1:3000/codex". See the coding tools docs for the full snippet.

Coding Tools docs →

Dashboard

Every request is logged with masking details. See what was detected, what was masked, and what reached the provider.

localhost:3000

What it catches

Personal data — Names, locations, emails, phone numbers, credit cards, IBANs, IP addresses, and EU VAT numbers. Works in many languages.

Secrets — API keys (OpenAI, Anthropic, Stripe, AWS, GitHub), SSH and PEM private keys, JWT tokens, bearer tokens, passwords, connection strings.

Both detected and masked in real time, including streaming responses.

How detection works

Detection runs as a separate service that PasteGuard calls over HTTP, so you can run it wherever you like. It mixes exact checks with checksums (IBANs, credit cards, emails, phones, IPs) and a small AI model (GLiNER) for names and places. It works the same in any language. Phone numbers are international-only by default; add phone_regions if you need local formats.

Code, Docker image, and tests are in detector/.

Tech Stack

Bun · Hono · GLiNER + python-stdnum (detector/) · SQLite

Contributing

See CONTRIBUTING.md for guidelines on how to contribute.

License

Apache 2.0