Kiteworks Agent Marketplace
Sign in with Kiteworks
Compliance-grade Data Loss Prevention

Redactor

by Kiteworks Inc. · v0.2.0

Redact specific words or strings you name — a person's name, a project codename, a contract number — across a Kiteworks folder. Preview the per-file match counts, then redact with one confirmation. The terms you type never appear in any report, audit record, or receipt; matching runs locally and file content never leaves the platform.

Modifies your content · approval required Metadata only RBAC / ABAC Audit logged
Install View on GitHub
Free for Kiteworks customers
Version v0.2.0 Status Live Posture User-content mutation

What it does

Redacts caller-supplied literal words or strings (a name, a project codename, a reference number) from a Kiteworks folder — previews per-file match counts, and on confirmation writes a redacted copy next to each file and quarantines the original for human deletion. The terms you type are never echoed back in any report.

literal-redaction artifact-output

See it in action

You

Redact "Project Falcon" from Legal/Contracts and show me what would change

Redactor

Pinning Legal/Contracts and counting how many times "Project Falcon" occurs in every supported file. You get per-file MATCH COUNTS only — the term and the matched text never leave the platform, and nothing is changed in a preview.

9 Files scanned
3 Files with matches
11 Total matches
FileMatches
msa-2026.docx5
board-notes.txt4
nda-draft.docx2
Read-only preview. To redact, run "apply" with the confirmation code from this preview — the platform then writes a redacted copy next to each file and moves the original into that folder's "To delete" for a human to review and delete.
Illustrative example · not live tenant data
You

Redact the files we just previewed in Legal/Contracts

Redactor

Re-checking the folder against the confirmed plan first — if anything changed since the preview, the apply refuses and nothing is touched. Then each planned file gets a redacted copy, and the original moves to "To delete".

3 Files redacted
0 Failed
11 Matches redacted
OriginalRedacted copyOriginal moved to
board-notes.txtboard-notes-redacted.txtTo delete
msa-2026.docxmsa-2026-redacted.docxTo delete
nda-draft.docxnda-draft-redacted.docxTo delete
Nothing was deleted — originals are quarantined in "To delete" so a human makes the final call. The terms you redacted were never written to any report.
Illustrative example · not live tenant data

Relevant regulations and standards

Frameworks and mandates this agent helps you address. Not a certification — your own controls and assessment still apply.

GDPR

Tags

redactionliteral-termsdlp

What's new

latest 0.2.0

Published version history. The latest version is what new installs receive; your administrator chooses when to upgrade.

  1. 0.2.0 stable breaking latest 2026-06-15

    Confirmation key source change (ADR 0006, supersedes 0005). The preview→apply confirmation token is UNCHANGED — still a context-bound, platform-keyed HMAC that binds the term set (so a same-count term swap is refused) and is not a dictionary oracle. What changed: the MAC key is now HKDF-derived (domain-separated) from the existing mandatory KW_SESSION_SECRET instead of a dedicated KW_LITERAL_CONFIRM_KEY. This removes the separate-secret provisioning footgun — the redactor activates wherever the [entities] engine and the platform session secret are present (the latter is already required in OIDC/production). No input/output schema change and no change to term confidentiality or per-file redaction behaviour; minor bump because the token VALUE no longer validates across the key-source change (re-run preview).

  2. 0.1.0 stable 2026-06-15

    Initial literal-term redaction agent (LITERAL-TERM-REDACTION-PLAN Phase 1). Preview → confirm → apply over a platform-keyed, context-bound confirmation_token (§5.7; key policy ADR 0005). Redacts caller-supplied literal strings via the literal-redaction capability and the platform content lane; the terms never appear in any output. Text + Office (mask/replace where applicable) and image/PDF (mask, OCR) supported; low-confidence pages are blocked, never treated as clean. Ships English-only; nl/he/ja overlays are a reviewed fast-follow.

Install in Claude Code

claude plugin marketplace add \
  kiteworks/agent-marketplace
claude plugin install \
  kiteworks-redactor@kiteworks

Prerequisites

  • Kiteworks Compliance Runtime — install via pip install kw-mcp-gateway (host >=1.0.0,<2.0.0). This agent calls into the runtime for deterministic, audited execution.
  • Official Kiteworks MCP >=9.3.0 (used by the runtime) — install and sign in from github.com/kiteworks/mcp.
  • Python >=3.11.

Connect from Claude

Add this marketplace as a remote MCP connector in Claude Desktop or Claude Code — point it at <your-host>/mcp. One process per deployment; no per-machine install. Requires the official Kiteworks MCP to be configured.