MASKCLAW
On-prem privacy proxy for OpenAI-compatible clients. Secrets and PII become placeholders, the redacted request is routed, then originals come back.
Two products, one repo: MASKCLAW DESKTOP on Windows and a Raspberry Pi 5 appliance on the LAN. Prompts hit MaskClaw first. Built-in detectors (email, phone, SSN, cards, JWTs, AWS keys, API keys) swap hits for session-stable placeholders that live in RAM only. Point Cursor, Continue, Open WebUI, or any OpenAI-compatible SDK at the proxy — model id maskclaw for smart routing. The engine is a Switchyard fork with the MaskClaw privacy layer.