AIScrubber

AIScrubber is a browser-local privacy toolkit for cleaning sensitive text and images before they are shared with an AI service, issue tracker, or another person.

Open the web app · Report a bug

What it does

• Text Scrubber replaces detected credentials, email addresses, IP addresses, payment cards, IDs, and other sensitive values with stable tokens.
• Prompt Masker exports a local session key so placeholders in an AI response can be restored later.
• Unicode Cleaner removes selected zero-width characters, Tag Plane tokens, unusual spaces, and confusables. Optional phrase rules clean common AI-style copy patterns.
• Metadata Desk inspects JPEG, PNG, and WebP images and removes supported EXIF, GPS, PNG text, and C2PA-compatible metadata markers.
• Media Redactor permanently burns blur, pixelation, or blackout regions into an exported image.

The browser tools process user content in local memory. The site loads Google Fonts and fetches the repository's public GitHub star count. Neither request includes pasted text, files, mappings, or session keys.

Use the CLI

Run it without installing globally:

npx aiscrubber scrub ./incident.log --output ./incident.clean.log
npx aiscrubber mask ./prompt.txt --key ./session.aiscrub.json
npx aiscrubber unmask ./ai-response.txt --key ./session.aiscrub.json
npx aiscrubber clean-watermarks ./draft.md --output ./draft.clean.md
npx aiscrubber strip-metadata ./photo.jpg ./screenshot.png
npx aiscrubber inspect ./incident.log --json

strip-metadata writes sanitized copies for JPEG, PNG, and WebP files, preserving originals and refusing to overwrite existing outputs. PDF rewriting is unsupported. inspect scans UTF-8 text; use the browser Metadata Desk to inspect images. Metadata editing supports JPEG and PNG only. C2PA signatures are not verified.

Use npx aiscrubber help <command> for command-specific examples.

Use as a pre-commit gate

Scan committed files or git staged diff for credentials before pushing:

# Scan git staged changes (ACM)
npx aiscrubber check --staged

# Scan specific files or directories
npx aiscrubber check ./src ./config --json

Exit codes: 0 when clean, 1 when secrets are found, 2 on configuration error.

lint-staged configuration

{
  "lint-staged": {
    "*": "npx aiscrubber check --staged"
  }
}

.pre-commit-config.yaml (repo: local)

repos:
  - repo: local
    hooks:
      - id: aiscrubber-check
        name: aiscrubber secret check
        entry: npx aiscrubber check --staged
        language: system
        pass_filenames: false

Large files & streaming

For large server logs, database dumps, or crash files, AIScrubber automatically streams in chunks with bounded memory (peak RSS < 400 MiB on 100+ MiB files):

# Automatically streams files >64 MiB
npx aiscrubber scrub ./production-dump.log --output ./production-clean.log

# Force streaming mode on any file size
npx aiscrubber scrub ./server.log --stream --output ./clean.log

Rule packs & .aiscrubrc.json

Configure custom regex patterns, tokens, allowlists, and pre-built domain packs via .aiscrubrc.json in your project root:

{
  "version": 1,
  "extends": ["devops", "india-ids"],
  "customRules": [
    {
      "id": "internal-token",
      "label": "Internal Service Token",
      "token": "SERVICE_TOKEN",
      "patternString": "srv_[a-zA-Z0-9]{32}",
      "isRegex": true,
      "enabled": true
    }
  ],
  "allowlist": [
    { "value": "public-sample-key", "isRegex": false }
  ]
}

Available built-in packs:

• india-ids: Aadhaar, PAN, Voter ID (EPIC), Passport, and Driving Licence rules.
• devops: Kubernetes secrets, Docker configs, Vault tokens, and Terraform state patterns.
• healthcare: US/EU medical identifier formats and patient record tags.

Connect the MCP server

AIScrubber exposes reload_rules, scrub_text, mask_prompt, unmask_response, clean_ai_watermarks, and inspect_content over stdio for Claude Desktop, Claude Code, and Cursor.

{
  "mcpServers": {
    "aiscrubber": {
      "command": "npx",
      "args": ["-y", "aiscrubber", "mcp"]
    }
  }
}

Tools dynamically reflect your .aiscrubrc.json rules and allow runtime reload via reload_rules without restarting the server.

Accuracy and safety boundaries

• Detection is deterministic pattern matching, not semantic understanding. Review the output before sharing it.
• Entropy suppression can hide a real secret that looks like a hash; run inspect --no-suppress to see everything.
• Unicode findings do not prove which model created text or that a vendor watermark exists.
• The Metadata Desk detects supported binary markers but does not verify cryptographic provenance signatures.
• Keep .aiscrub.json session keys private. They contain the original values required for reconstruction.
• Work on a copy of important files and verify exported images before deleting originals.

Develop locally

Requirements: Node.js 18 or newer.

npm ci
npm test
npm run build
npm run dev

Deploy the built static assets to Cloudflare Workers:

npm run build
npx wrangler deploy

License

MIT. See LICENSE.