KO | EN

GitLite

Minimalist Open Source Repository Search Engine

gitlite — search

#developer-tools #typescript #claude-code #codex #dsh #dsh-plugin #ai-agent #ai-agents #deepseek-harness #agent-skills #macos #cli

pasteguard

★ 733 Open GitHub ↗

AI gets the context. Not your private data. Local-first privacy proxy for browser chat, AI APIs, and coding agents.

// repository documentation

Was this content helpful?

★ 0 (0 ratings)

AI gets the context. Not your private data. 
 PasteGuard masks PII and secrets before they reach ChatGPT, Claude, Gemini, your API provider, Codex, or Claude Code.

<a href="#browser-chat">Browser Chat</a> ·
 <a href="#apps--apis">Apps & APIs</a> ·
 <a href="#coding-agents">Coding Agents</a> ·
 <a href="https://pasteguard.com/docs">Documentation</a>

You keep the originals. Providers see placeholders. 
 Run it locally or self-host it in your own infrastructure.

## What PasteGuard Protects

PasteGuard is a local-first privacy layer for teams that cannot send raw client data, customer records, logs, credentials, or production details directly to model providers.

It works in three places:

### Browser Chat

**ChatGPT, Claude, and Gemini.** Paste customer notes, contracts, support tickets, candidate details, or internal context without sending the raw private values to the chat provider. You see the originals; the AI sees placeholders.

The experimental browser extension is available for ChatGPT, Claude, and Gemini.

**[Install the extension →](https://pasteguard.com/browser-extension)** · **[Chat docs →](https://pasteguard.com/docs/use-cases/chat)**

### Apps & APIs

**Apps, SDKs, and internal AI products.** Point your application to PasteGuard instead of the provider directly.

Change one base URL. PasteGuard masks the request, forwards it to the configured provider, and restores supported placeholders in the response.

**[Apps & APIs docs](https://pasteguard.com/docs/use-cases/api-integration)**

### Coding Agents

**Codex, Claude Code, Cursor, Windsurf, Copilot, and other coding agents.** Agent prompts often include logs, stack traces, tickets, config files, test fixtures, and codebase context. PasteGuard masks secrets and PII before that context leaves your machine.

**[Coding Agents docs](https://pasteguard.com/docs/use-cases/coding-tools)**

## Built For Strict Privacy Rules

PasteGuard is a privacy control point before AI providers. It can support regulated workflows, but it does not replace your legal, security, or compliance program.

Use it when your current options are:

- Do not use cloud AI for sensitive work
- Redact client or production data manually
- Switch to a local model even when a cloud provider would give better results
- Build one-off masking code inside every app

## Quick Start

Run PasteGuard as a local proxy:

```bash
docker run --rm -p 3000:3000 ghcr.io/sgasser/pasteguard:latest
```

Open [localhost:3000](http://localhost:3000) for the dashboard.

Point your app or agent to PasteGuard instead of the provider:

| Target | PasteGuard URL | Original URL |
|----------|----------------|--------------|
| OpenAI | `http://localhost:3000/openai/v1` | `https://api.openai.com/v1` |
| Anthropic | `http://localhost:3000/anthropic` | `https://api.anthropic.com` |
| Codex CLI | `http://localhost:3000/codex` | `https://chatgpt.com/backend-api/codex` |

```python
from openai import OpenAI

client = OpenAI(base_url="http://localhost:3000/openai/v1")
```

Both `client.chat.completions.create(...)` and `client.responses.create(...)` pass through PasteGuard's privacy pipeline.

For custom config, persistent logs, Docker Compose, or
[custom GLiNER models](https://pasteguard.com/docs/configuration/gliner):
**[Read the docs](https://pasteguard.com/docs/installation)**.

## Privacy Modes

Mask Mode replaces PII and secrets with placeholders before sending the request to the upstream AI provider. Supported responses are restored before they return to the user.

</details>

<details>
<summary>Route Mode</summary>

Route Mode sends requests containing sensitive data to a local LLM such as Ollama, vLLM, or llama.cpp. Requests without sensitive data can still go to the configured cloud provider.

**[Route Mode docs](https://pasteguard.com/docs/concepts/route-mode)**

</details>

## What It Catches

**Personal data**: Names, locations, emails, phone numbers, credit cards, IBANs, IP addresses, and EU VAT numbers. Detection is multilingual.

**Secrets**: API keys for providers such as OpenAI, Anthropic, Stripe, AWS, and GitHub; SSH and PEM private keys; JWT tokens; bearer tokens; passwords; and connection strings.

Both are detected and masked in real time, including streaming responses.

## Dashboard

Every request is logged with masking details. See what was detected, what was masked, and what reached the provider.

[localhost:3000](http://localhost:3000)

## How Detection Works

The detector combines checksums and format checks for structured values with a
semantic backend for names and places. GLiNER is currently the only backend.
See [Semantic Backends](https://pasteguard.com/docs/configuration/semantic-backends).

## Tech Stack

[Bun](https://bun.sh) · [Hono](https://hono.dev) · [GLiNER](https://github.com/urchade/GLiNER) + [python-stdnum](https://arthurdejong.org/python-stdnum/) ([`detector/`](detector/)) · SQLite or Postgres

## Contributing

See [CONTRIBUTING.md](CONTRIBUTING.md) for guidelines on how to contribute.

## License

[Apache 2.0](LICENSE)

pasteguard

Explore Similar Repositories

Was this content helpful?

Recent Feedback

Download README