VaultBridge · Offline Document Anonymization & Claude Connector
VaultBridge is an offline macOS application and bundled Model Context Protocol (MCP) server by Quan Dang. It anonymizes documents on your Mac before sharing text with Claude, and restores AI answers locally. About VaultBridge
VaultBridge 1.0.0 by Quan Dang · macOS 15 or later on Apple Silicon · Signed and notarized by Apple
SHA-256: 6704c2cc859d045cb186e37caffb806821a11cbee165ec75e15a6eb4c46ab5d3
Need help, have questions, or want to report an issue? Contact us at
ohioa4@gmail.comVaultBridge embeds a local stdio MCP server inside the application at Contents/MacOS/vaultbridge-mcp. To connect it to Claude Desktop:
VaultBridge.app is in your /Applications/ folder.~/Library/Application Support/Claude/claude_desktop_config.jsonvaultbridge connector to the mcpServers section:
{
"mcpServers": {
"vaultbridge": {
"command": "/Applications/VaultBridge.app/Contents/MacOS/vaultbridge-mcp"
}
}
}If you use the Claude Code CLI, register the embedded server with:
claude mcp add -s user vaultbridge -- /Applications/VaultBridge.app/Contents/MacOS/vaultbridge-mcpClaude Code can also read files directly with its own tools. To keep originals and restored files away from Claude, deny those paths (for example your source folder and ~/Downloads) in your Claude Code permissions.
VaultBridge reads PDFs and images on your Mac, extracts selectable text or runs on-device Apple Vision OCR on scans, reconstructs tables into Markdown, scores and routes relevant pages, and detects sensitive values (such as names, dates, phone numbers, addresses, account numbers, and court docket numbers). It replaces those values with placeholders (like [PERSON_1] or [DATE_1]) so you can share AI-ready Markdown with Claude without sending real identifiers.
Not through VaultBridge. When you ask Claude to restore an answer via the vault_restore_text MCP tool, the restoration runs entirely on your Mac. The MCP server unmasks the tokens locally and writes the restored plaintext to your macOS clipboard or saves it to a private file in ~/Downloads (with owner-only 0600 permissions). The tool returns only status metadata (such as the number of restored placeholders) to Claude. The tool never returns restored values to Claude.
In VaultBridge.app, click the Restore Clipboard button in the toolbar or press ⌘⇧U (Edit → Restore Clipboard). VaultBridge reads text from your macOS clipboard, finds placeholder tokens, substitutes the original values from the app's in-memory vault, and writes the unmasked text back to your clipboard marked with concealed and transient pasteboard types.
No. Detection is automated and is not guaranteed to catch every identifier. Non-standard formatting, unlabelled numbers, out-of-vocabulary names, or health information in unstructured prose can be missed. You must always review the masked Markdown output before sharing it with Claude or external parties.
VaultBridge supports PDF documents (.pdf) and images (.png, .jpg, .jpeg, .tiff, .tif, .heic), including multi-frame TIFF files. Scanned or low-density pages automatically trigger Apple Vision OCR.
VaultBridge processes files on-device. The desktop app is sandboxed with no network entitlement. The Claude connector (vaultbridge-mcp) runs as an unsandboxed command-line process started by your Claude client and can read any local file Claude asks it to open. It has no networking code. Token mappings reside solely in volatile process memory during the active session. The app and the Claude connector each keep their own vault. Restarting Claude Desktop or Claude Code clears the connector's vault, after which placeholders can no longer be restored.
For questions, feedback, or bug reports, please email us at ohioa4@gmail.com.