Downloads

Everything here talks to the OBVELO gateway and holds no masking engine of its own: masking stays on the gateway, so a fix there reaches every installation the same day. Every file below was installed and run against a real gateway before it was put here, and the page shows the SHA-256 of exactly that build.

Each needs a gateway key from your account panel. The free plan's key works for the connector and the SDKs; the add-on needs a paid plan.

Which one you need

Each download protects a different path to the model. Pick by where the personal data comes from.

the data comes fromusedoes the model ever see it
a person typing or pasting into an AI chat in the browserbrowser add-onno — the prompt is masked before it is sent
your own application calling a modelan SDK, or the gateway as a proxy (docs)no — masked before the request leaves
an agent whose tools read your systemsthe tool gateway (docs)no — tool results come back masked
a document you want to anonymise, check or restore with an assistant's helpMCP connectoryes — what you paste reaches the model before any tool runs

MCP connector, version 1.1.0

Tools for an assistant — mask_pii, inspect_pii, restore_pii, reset_pii_session and check_connection — that replace personal data with tokens, report what a text contains without returning it, and put the real values back into a finished document. The table of real values stays in the connector's memory on your computer.

What it does not do: it cannot mask what you type or paste into the conversation. That text reaches the model before the assistant calls any tool. To keep personal data out of an AI chat, use the browser add-on.

Claude Desktop: one file, double-click

your computerfilesizesha-256
macOS, Apple silicon (M1 or later)obvelo-mcp-1.1.0-macos-arm64.mcpb28.5 MB09bc8933df5051dd55c88ea61e76eefb72d2a19cd1b3b87a53fd49c8540416be
macOS, Intel processorobvelo-mcp-1.1.0-macos-x64.mcpb29.9 MB8668c02c92f440ef349b87afdb2ae2a0814ce7a0ba4b321f83607c77d3784b75
Windows 10 or 11, 64-bitobvelo-mcp-1.1.0-windows-x64.mcpb32.3 MB91149575a090ec4c7f663dea4b751306419267872ae73955b27dcc2fd3f30093
  1. Download the file for your computer and open it. Claude Desktop shows an install window.
  2. Paste your gateway key into the field it asks for. Claude Desktop keeps it; it is never shown to the model.
  3. Ask Claude: “check my OBVELO connection”. The answer names your plan and what is left this month.

The install window also has a switch for restore_pii, the one tool that returns real values into the conversation. Turn it off if the assistant should never see them.

Cursor, Windsurf and other MCP clients

your computerfilesizesha-256
macOS, Apple silicon (M1 or later)obvelo-mcp-1.1.0-macos-arm64.zip28.5 MB0dc8a3f3c36b69d02a913e102cdac264aeb9b8d61db2517a5b3f82a29d89b6e8
macOS, Intel processorobvelo-mcp-1.1.0-macos-x64.zip29.9 MBfba9cf327a1617114eb625014b643253b59ed472d733c36b40ddb78196f15c5a
Windows 10 or 11, 64-bitobvelo-mcp-1.1.0-windows-x64.zip32.3 MB5dfeff1214f25d39564a776582aaeb98047e570fda09d4491c100d1f17247745
Linux, x86-64obvelo-mcp-1.1.0-linux-x64.zip33.6 MB6f5f0734c00ba6d8d95ef2e253a3b1ce90863da4daf27531fcc44686096705fa
Linux, ARM 64-bitobvelo-mcp-1.1.0-linux-arm64.zip32.2 MB70819bc4a76f76caaf6ff69e686627bfae72fd6d36af0aa200b49bf7d1cdb00c
Any system with Deno 2, or a gateway of your ownobvelo-mcp-1.1.0-source.zip26 kBf0853021addfcd48022006860b08d742e3147544d260ca255a24e8061b19ee50

Each zip holds the same program, a guide for that system and a ready configuration entry. The program can reach the OBVELO gateway and this computer and nothing else — that permission is compiled in and no setting can widen it. The source package is the same connector as five files you run with Deno; it is the form to use with a gateway of your own.

macOS: the programs are not notarised by Apple. From a zip, remove the download mark once: xattr -dr com.apple.quarantine ~/obvelo-mcp. Windows: the program is not yet code-signed, so Windows may ask before it runs the first time.

Setup in detail and what to expect in the client: documentation.

SDKs

TypeScript, Python and .NET. They mask on the gateway and restore in your process, so the table of real values never leaves your application, and your model provider's key never reaches us. They are distributed as files from this page, not from a public package registry.

languagefilesizesha-256
TypeScript and JavaScript (Node 18 or later)pii-gateway-sdk-0.1.0.tgz51 kB55c2212dd5fe855d73e292db846aba5d395a15326f563889e5df8be6aff49dce
Python 3.9 or later, wheelpii_gateway_sdk-0.1.0-py3-none-any.whl44 kBf784fedfdc6dfe7bee128257a56fe5e98a562860cd9bf8a6eaf1c547d635aff2
Python, source distributionpii_gateway_sdk-0.1.0.tar.gz39 kB7f2485d09084b37a37113cf651dd3a4e2cf63c3d537719665f8e6bc218eda8c0
.NET (netstandard2.0 and net8.0)PiiGateway.0.1.0.nupkg78 kB002e9b2e241c8c8bc4a3269f7476cb29e84bf10f5bd2ac1be35c9e5ff362a118

install from the downloaded file

# TypeScript / JavaScript
npm install ./pii-gateway-sdk-0.1.0.tgz

# Python
pip install ./pii_gateway_sdk-0.1.0-py3-none-any.whl

# .NET — put PiiGateway.0.1.0.nupkg in vendor/obvelo/,
# map PiiGateway to that folder in nuget.config, then:
dotnet add package PiiGateway --version 0.1.0

Each package carries its own README with the nuget.config for .NET, the wrappers for OpenAI, Anthropic and LangChain, and streaming. What each SDK covers: documentation.

Browser add-on, version 0.1.0

Masks what a person types or pastes into an AI chat in the browser, and puts the real values back into the answer on screen. Included in every paid plan.

browserfilesizesha-256
Chrome and Edge, version 116 or laterobvelo-extension-0.1.0.zip143 kBc1829ecafe93f02d36ab58ab26aaf4aebd6a1e73c889f99611f63f2e39d06587
  1. Unzip obvelo-extension-0.1.0.zip into a folder you will keep — the browser loads the add-on from that folder every time it starts.
  2. Open chrome://extensions (Edge: edge://extensions) and switch on Developer mode.
  3. Choose Load unpacked and pick the folder that holds manifest.json.
  4. In the add-on's settings, enter the gateway address https://api.obvelo.com and your gateway key.

It is not in the Chrome Web Store yet, which is why it is loaded this way. For a team, an administrator can lock the settings behind a password and carry the same configuration to every machine as one file. What it covers and what it does not: the add-on page.

Check a download

Compare the file's SHA-256 with the one printed beside it, or with the full list. The packages are built reproducibly, so the same source gives the same bytes.

macOS     shasum -a 256 <file>
Linux     sha256sum <file>
Windows   Get-FileHash <file>

Need it inside your own perimeter?