I wanted to review what leaves my machine before pasting it into an AI chat or issue tracker. Repeated values need the same replacement token, or the output stops making sense.
Use the same token for the same value.
TypeScript keeps detector matches, .aiscrubrc.json rule packs, and replacement tokens consistent across browser, CLI, and MCP runs. Web Crypto API creates the session key used by reversible prompt masking.
Browser transformations run in local memory. Review the output before sharing it. Installing the CLI or MCP package contacts npm; local execution runs without telemetry.
Pattern matching can miss a custom secret. Unicode cleanup is not proof that text came from AI, and metadata stripping does not verify C2PA signatures or rewrite PDFs.
Every time I pasted server logs or drafted text into an AI chat, I risked leaking emails, API keys, or leaving hidden AI watermarks in my copy.
Deleting secrets by hand broke the relationships in a log file, and existing watermark tools sent my private drafts to someone else's cloud server.
AIScrubber replaces every repeated email or key with the exact same placeholder token and strips invisible Unicode watermarks and image metadata locally.
Paste your text or drop an image in the browser, run it in your terminal, or connect it to your coding agent; nothing ever leaves your machine.