Claude Redacta connectorHow Claude masks patient data on your machine.
The Claude Redacta connector exposes 3 tools: 3 read, 0 write, 0 undocumented. Nick Lamb's extension swaps patient identifiers and personal data in a text for labelled tokens, restores them, and checks for leftovers. It runs locally in Claude Desktop.
Verified Trustpilot reviews · AI, automation & growth agency
Why a clinician would run text through Redacta first
A discharge letter or a referral is full of details that shouldn't travel: NHS numbers, names, dates of birth, hospital numbers. Redacta replaces each one with a labelled token before Claude works on the text, and can put the real values back afterwards. The processing stays inside the extension on your computer, with no network calls.
A summary without the identifiers. You want a summary of a long clinic letter. redact turns the patient's name, NHS number and postcode into labelled tokens, and Claude summarizes the masked version.
Real details back in the final draft. Once the summary is ready, reinstate swaps the tokens for the original values using the token map from the first step.
A second look before sharing. Before an excerpt leaves your hands, self_check scans the redacted text for anything that still looks like an identifier: long numbers, emails, postcodes, links.
Beyond NHS numbers (checked with Modulus-11), the publisher lists emails, phone numbers, IP addresses, card and account numbers, plus a HIPAA Safe Harbor mode.
According to the author, it makes no network calls and stores nothing. And the three tools on the directory sheet are the author's older versions: redact hands the token map back, so the reversal key can end up in the conversation. The Integrations hub lists the other platforms we cover.
Five words before you install
Claude's vocabulary for this extension, in one minute.
- Connector
- The link you set up once so Claude can use an outside capability while it answers. Here, a redaction engine running in Claude Desktop.
- Tool
- One named job the connector lets Claude do, like masking a text. Claude picks the ones it needs; the directory sheet lists them.
- Authorization
- The access you grant on a service's own screen, once per person, and that you can take back the same way.
- Approval
- The confirmation Claude waits for before it changes something in an account, shown in the chat at the moment it matters.
- MCP
- The shared standard connectors are built on: it's what lets an assistant like Claude call an outside program such as Redacta.
Install the Redacta connector in three steps
- 01
Find it in Claude Desktop
Open Claude Desktop settings, go through Customize then Connectors, and search for Redacta. It's a desktop extension, installed on Claude Desktop. On a Team or Enterprise workspace, an Owner or Primary Owner turns it on first.
- 02
Start the install from its row
Hit Connect on its line and follow the prompts. The Disconnect button on the same line removes it later. The author states that all processing stays in the extension's own process, with no network calls.
- 03
Read any permission screen
Read any permission screen before you accept: it belongs to the service, not to Claude, and it sets how far access goes. Whatever happens next, Claude works with the rights of the person who connected it and nothing more.
The 3 tools, grouped by what they do
Redacta gives Claude 3 tools: 3 that read your account, 0 that change something in it.
One group only: the author marks all three as read-only. They transform or inspect the text you give them and don't write to any application. Names stay exactly as Claude shows them.
- 3 read
What Claude reads (3)
3 toolsThree text operations: mask, restore and double-check. None of them saves anything to an outside service.
redact
Replaces patient identifiers and personal data with labelled tokens and returns the masked text plus a token map linking each token to its original value.
reinstate
Reverses a redaction from the token map held on the client side, the one the legacy redact returned, putting the original names and numbers back into the text.
self_check
Scans text that's already been redacted for anything still shaped like an identifier, such as long numbers, emails, postcodes or URLs, and lists possible leftovers to review.
What Claude asks you before acting
By default, Claude stops and asks before any action it takes on an account for you. No source describes a confirmation tied to any of Redacta's three tools.
On Team and Enterprise, workspace owners decide whether members may let some actions through without being asked each time. They can also cap what a connector may do for the whole organization, for example allow reading and block writing, and nobody gets around that from their own account. Claude never goes beyond the rights of the person who installed the extension. In Redacta's case, it only sees the text placed in the conversation.
Which plans it's available on
None of the 819 sheets in the official directory shows availability by plan. Connector by connector, that answer isn't published anywhere, which is a real gap in the catalog.
What is published is the general rule: desktop extensions like this one install on Claude Desktop, while remote connectors are open to all users on Claude, Cowork, Claude Desktop and mobile. On Team and Enterprise, an Owner or Primary Owner first enables the connector for the organization. For this one's current status, its sheet in the official directory is the reference.
Where this connector stops
A connector isn't an automation. Claude calls these tools while it answers you, and nothing masks a document on its own when it lands in a folder.
The tool list is an observed floor, not a promise: an administrator can open actions no public sheet shows. The directory's verification badge isn't a security audit, and Anthropic notes on every sheet that it doesn't choose the tools a publisher exposes. Only the author's repository and package document Redacta; no Claude help article covers it. There is no other source to cross-check, and the author lists the three tools on the sheet as legacy (v1), kept for backward compatibility.
Need help connecting Redacta to Claude?
A person reads every message.