Context7
ส่งคู่มือการใช้ไลบรารีและเฟรมเวิร์กรุ่นล่าสุดให้ AI อ่านก่อนตอบ ช่วยให้โค้ดที่ AI เขียนไม่ใช้คำสั่งเก่าที่เลิกใช้แล้ว
คำอธิบายจากผู้ทำ (ภาษาอังกฤษตามต้นฉบับ)
Fail-closed privacy layer that pseudonymises enterprise API data for LLM agents and MCP clients.
สามเรื่องนี้ไม่รวมเป็นคะแนนเดียว เพราะความเห็น การวัด และความนิยม เป็นคนละเรื่องกัน
ตัวนี้ยังไม่ได้เรียบเรียงเป็นภาษาไทย ด้านล่างคือข้อเท็จจริงที่เราอ่านจาก registry
เลือกโปรแกรม AI ที่คุณใช้ แล้วคัดลอกค่าตั้งไปวาง
LOADER_PATH, DATAPRISM_SECURITY_JWT_ISSUER, DATAPRISM_SECURITY_JWT_AUDIENCE, DATAPRISM_SECURITY_JWT_JWK_SET_URI, DATAPRISM_SECURITY_JWT_ISSUER_DISCOVERY_URI, DATAPRISM_SECURITY_CALLER_CLAIMS_PRINCIPAL, DATAPRISM_SECURITY_CALLER_CLAIMS_ROLES, DATAPRISM_SECURITY_CALLER_CLAIMS_INVESTIGATION, DATAPRISM_SECURITY_POLICY_PURPOSES, DATAPRISM_SECURITYPOLICY_ROLES_INVESTIGATOR, DATAPRISM_PRIVACY_PROFILE, DATAPRISM_PRIVACY_SCOPE_LIFETIME, DATAPRISM_PRIVACY_HMAC_KEY_KEY_ID, DATAPRISM_PRIVACY_HMAC_KEY_ENVIRONMENT_VARIABLE, DATAPRISM_PRIVACY_HMAC_KEY_PROVIDER_REFERENCE, DATAPRISM_AUDIT_SINK, DATAPRISM_AUDIT_WRITER_ID, DATAPRISM_AUDIT_FILE_PATH, DATAPRISM_METRICS_SINK, DATAPRISM_HAZELCAST_TOPOLOGY, DATAPRISM_HAZELCAST_CLUSTERNAME, DATAPRISM_HAZELCAST_JOIN_MODE, DATAPRISM_HAZELCAST_JOIN_MEMBERS, DATAPRISM_HAZELCAST_MEMBER_PORT, DATAPRISM_OPERATOR_ENABLED, DATAPRISM_OPERATOR_PORT, DATAPRISM_OPERATOR_REQUIREDAUDIENCE, DATAPRISM_OPERATOR_REQUIREDSCOPE, DATAPRISM_SOURCES_CUSTOMER_BASE_URL, DATAPRISM_SOURCES_CUSTOMER_TIMEOUTต้องเตรียมก่อน
คุณใช้แอปไหน
เลือกแอปด้านบน เราจำไว้ให้ ครั้งหน้าปุ่มจะขึ้นว่า “ติดตั้งลง …”
เปิด Claude Desktop → Settings → Developer → Edit Config แล้ววางค่านี้ในไฟล์ claude_desktop_config.json
{
"mcpServers": {
"data-prism": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"LOADER_PATH",
"-e",
"DATAPRISM_SECURITY_JWT_ISSUER",
"-e",
"DATAPRISM_SECURITY_JWT_AUDIENCE",
"-e",
"DATAPRISM_SECURITY_JWT_JWK_SET_URI",
"-e",
"DATAPRISM_SECURITY_JWT_ISSUER_DISCOVERY_URI",
"-e",
"DATAPRISM_SECURITY_CALLER_CLAIMS_PRINCIPAL",
"-e",
"DATAPRISM_SECURITY_CALLER_CLAIMS_ROLES",
"-e",
"DATAPRISM_SECURITY_CALLER_CLAIMS_INVESTIGATION",
"-e",
"DATAPRISM_SECURITY_POLICY_PURPOSES",
"-e",
"DATAPRISM_SECURITYPOLICY_ROLES_INVESTIGATOR",
"-e",
"DATAPRISM_PRIVACY_PROFILE",
"-e",
"DATAPRISM_PRIVACY_SCOPE_LIFETIME",
"-e",
"DATAPRISM_PRIVACY_HMAC_KEY_KEY_ID",
"-e",
"DATAPRISM_PRIVACY_HMAC_KEY_ENVIRONMENT_VARIABLE",
"-e",
"DATAPRISM_PRIVACY_HMAC_KEY_PROVIDER_REFERENCE",
"-e",
"DATAPRISM_AUDIT_SINK",
"-e",
"DATAPRISM_AUDIT_WRITER_ID",
"-e",
"DATAPRISM_AUDIT_FILE_PATH",
"-e",
"DATAPRISM_METRICS_SINK",
"-e",
"DATAPRISM_HAZELCAST_TOPOLOGY",
"-e",
"DATAPRISM_HAZELCAST_CLUSTERNAME",
"-e",
"DATAPRISM_HAZELCAST_JOIN_MODE",
"-e",
"DATAPRISM_HAZELCAST_JOIN_MEMBERS",
"-e",
"DATAPRISM_HAZELCAST_MEMBER_PORT",
"-e",
"DATAPRISM_OPERATOR_ENABLED",
"-e",
"DATAPRISM_OPERATOR_PORT",
"-e",
"DATAPRISM_OPERATOR_REQUIREDAUDIENCE",
"-e",
"DATAPRISM_OPERATOR_REQUIREDSCOPE",
"-e",
"DATAPRISM_SOURCES_CUSTOMER_BASE_URL",
"-e",
"DATAPRISM_SOURCES_CUSTOMER_TIMEOUT",
"ghcr.io/aindriub/data-prism-server:0.7.1"
],
"env": {
"LOADER_PATH": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_JWT_ISSUER": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_JWT_AUDIENCE": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_JWT_JWK_SET_URI": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_JWT_ISSUER_DISCOVERY_URI": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_CALLER_CLAIMS_PRINCIPAL": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_CALLER_CLAIMS_ROLES": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_CALLER_CLAIMS_INVESTIGATION": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_POLICY_PURPOSES": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITYPOLICY_ROLES_INVESTIGATOR": "ใส่ค่าของคุณ",
"DATAPRISM_PRIVACY_PROFILE": "ใส่ค่าของคุณ",
"DATAPRISM_PRIVACY_SCOPE_LIFETIME": "ใส่ค่าของคุณ",
"DATAPRISM_PRIVACY_HMAC_KEY_KEY_ID": "ใส่ค่าของคุณ",
"DATAPRISM_PRIVACY_HMAC_KEY_ENVIRONMENT_VARIABLE": "ใส่ค่าของคุณ",
"DATAPRISM_PRIVACY_HMAC_KEY_PROVIDER_REFERENCE": "ใส่ค่าของคุณ",
"DATAPRISM_AUDIT_SINK": "ใส่ค่าของคุณ",
"DATAPRISM_AUDIT_WRITER_ID": "ใส่ค่าของคุณ",
"DATAPRISM_AUDIT_FILE_PATH": "ใส่ค่าของคุณ",
"DATAPRISM_METRICS_SINK": "ใส่ค่าของคุณ",
"DATAPRISM_HAZELCAST_TOPOLOGY": "ใส่ค่าของคุณ",
"DATAPRISM_HAZELCAST_CLUSTERNAME": "ใส่ค่าของคุณ",
"DATAPRISM_HAZELCAST_JOIN_MODE": "ใส่ค่าของคุณ",
"DATAPRISM_HAZELCAST_JOIN_MEMBERS": "ใส่ค่าของคุณ",
"DATAPRISM_HAZELCAST_MEMBER_PORT": "ใส่ค่าของคุณ",
"DATAPRISM_OPERATOR_ENABLED": "ใส่ค่าของคุณ",
"DATAPRISM_OPERATOR_PORT": "ใส่ค่าของคุณ",
"DATAPRISM_OPERATOR_REQUIREDAUDIENCE": "ใส่ค่าของคุณ",
"DATAPRISM_OPERATOR_REQUIREDSCOPE": "ใส่ค่าของคุณ",
"DATAPRISM_SOURCES_CUSTOMER_BASE_URL": "ใส่ค่าของคุณ",
"DATAPRISM_SOURCES_CUSTOMER_TIMEOUT": "ใส่ค่าของคุณ"
}
}
}
}พิมพ์คำสั่งนี้ใน Terminal
claude mcp add data-prism --env LOADER_PATH='ใส่ค่าของคุณ' --env DATAPRISM_SECURITY_JWT_ISSUER='ใส่ค่าของคุณ' --env DATAPRISM_SECURITY_JWT_AUDIENCE='ใส่ค่าของคุณ' --env DATAPRISM_SECURITY_JWT_JWK_SET_URI='ใส่ค่าของคุณ' --env DATAPRISM_SECURITY_JWT_ISSUER_DISCOVERY_URI='ใส่ค่าของคุณ' --env DATAPRISM_SECURITY_CALLER_CLAIMS_PRINCIPAL='ใส่ค่าของคุณ' --env DATAPRISM_SECURITY_CALLER_CLAIMS_ROLES='ใส่ค่าของคุณ' --env DATAPRISM_SECURITY_CALLER_CLAIMS_INVESTIGATION='ใส่ค่าของคุณ' --env DATAPRISM_SECURITY_POLICY_PURPOSES='ใส่ค่าของคุณ' --env DATAPRISM_SECURITYPOLICY_ROLES_INVESTIGATOR='ใส่ค่าของคุณ' --env DATAPRISM_PRIVACY_PROFILE='ใส่ค่าของคุณ' --env DATAPRISM_PRIVACY_SCOPE_LIFETIME='ใส่ค่าของคุณ' --env DATAPRISM_PRIVACY_HMAC_KEY_KEY_ID='ใส่ค่าของคุณ' --env DATAPRISM_PRIVACY_HMAC_KEY_ENVIRONMENT_VARIABLE='ใส่ค่าของคุณ' --env DATAPRISM_PRIVACY_HMAC_KEY_PROVIDER_REFERENCE='ใส่ค่าของคุณ' --env DATAPRISM_AUDIT_SINK='ใส่ค่าของคุณ' --env DATAPRISM_AUDIT_WRITER_ID='ใส่ค่าของคุณ' --env DATAPRISM_AUDIT_FILE_PATH='ใส่ค่าของคุณ' --env DATAPRISM_METRICS_SINK='ใส่ค่าของคุณ' --env DATAPRISM_HAZELCAST_TOPOLOGY='ใส่ค่าของคุณ' --env DATAPRISM_HAZELCAST_CLUSTERNAME='ใส่ค่าของคุณ' --env DATAPRISM_HAZELCAST_JOIN_MODE='ใส่ค่าของคุณ' --env DATAPRISM_HAZELCAST_JOIN_MEMBERS='ใส่ค่าของคุณ' --env DATAPRISM_HAZELCAST_MEMBER_PORT='ใส่ค่าของคุณ' --env DATAPRISM_OPERATOR_ENABLED='ใส่ค่าของคุณ' --env DATAPRISM_OPERATOR_PORT='ใส่ค่าของคุณ' --env DATAPRISM_OPERATOR_REQUIREDAUDIENCE='ใส่ค่าของคุณ' --env DATAPRISM_OPERATOR_REQUIREDSCOPE='ใส่ค่าของคุณ' --env DATAPRISM_SOURCES_CUSTOMER_BASE_URL='ใส่ค่าของคุณ' --env DATAPRISM_SOURCES_CUSTOMER_TIMEOUT='ใส่ค่าของคุณ' -- docker run -i --rm -e LOADER_PATH -e DATAPRISM_SECURITY_JWT_ISSUER -e DATAPRISM_SECURITY_JWT_AUDIENCE -e DATAPRISM_SECURITY_JWT_JWK_SET_URI -e DATAPRISM_SECURITY_JWT_ISSUER_DISCOVERY_URI -e DATAPRISM_SECURITY_CALLER_CLAIMS_PRINCIPAL -e DATAPRISM_SECURITY_CALLER_CLAIMS_ROLES -e DATAPRISM_SECURITY_CALLER_CLAIMS_INVESTIGATION -e DATAPRISM_SECURITY_POLICY_PURPOSES -e DATAPRISM_SECURITYPOLICY_ROLES_INVESTIGATOR -e DATAPRISM_PRIVACY_PROFILE -e DATAPRISM_PRIVACY_SCOPE_LIFETIME -e DATAPRISM_PRIVACY_HMAC_KEY_KEY_ID -e DATAPRISM_PRIVACY_HMAC_KEY_ENVIRONMENT_VARIABLE -e DATAPRISM_PRIVACY_HMAC_KEY_PROVIDER_REFERENCE -e DATAPRISM_AUDIT_SINK -e DATAPRISM_AUDIT_WRITER_ID -e DATAPRISM_AUDIT_FILE_PATH -e DATAPRISM_METRICS_SINK -e DATAPRISM_HAZELCAST_TOPOLOGY -e DATAPRISM_HAZELCAST_CLUSTERNAME -e DATAPRISM_HAZELCAST_JOIN_MODE -e DATAPRISM_HAZELCAST_JOIN_MEMBERS -e DATAPRISM_HAZELCAST_MEMBER_PORT -e DATAPRISM_OPERATOR_ENABLED -e DATAPRISM_OPERATOR_PORT -e DATAPRISM_OPERATOR_REQUIREDAUDIENCE -e DATAPRISM_OPERATOR_REQUIREDSCOPE -e DATAPRISM_SOURCES_CUSTOMER_BASE_URL -e DATAPRISM_SOURCES_CUSTOMER_TIMEOUT ghcr.io/aindriub/data-prism-server:0.7.1เติมค่าที่เว้นว่างไว้ก่อนรัน
วางในไฟล์ .cursor/mcp.json ของโปรเจกต์ หรือ ~/.cursor/mcp.json
{
"mcpServers": {
"data-prism": {
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"LOADER_PATH",
"-e",
"DATAPRISM_SECURITY_JWT_ISSUER",
"-e",
"DATAPRISM_SECURITY_JWT_AUDIENCE",
"-e",
"DATAPRISM_SECURITY_JWT_JWK_SET_URI",
"-e",
"DATAPRISM_SECURITY_JWT_ISSUER_DISCOVERY_URI",
"-e",
"DATAPRISM_SECURITY_CALLER_CLAIMS_PRINCIPAL",
"-e",
"DATAPRISM_SECURITY_CALLER_CLAIMS_ROLES",
"-e",
"DATAPRISM_SECURITY_CALLER_CLAIMS_INVESTIGATION",
"-e",
"DATAPRISM_SECURITY_POLICY_PURPOSES",
"-e",
"DATAPRISM_SECURITYPOLICY_ROLES_INVESTIGATOR",
"-e",
"DATAPRISM_PRIVACY_PROFILE",
"-e",
"DATAPRISM_PRIVACY_SCOPE_LIFETIME",
"-e",
"DATAPRISM_PRIVACY_HMAC_KEY_KEY_ID",
"-e",
"DATAPRISM_PRIVACY_HMAC_KEY_ENVIRONMENT_VARIABLE",
"-e",
"DATAPRISM_PRIVACY_HMAC_KEY_PROVIDER_REFERENCE",
"-e",
"DATAPRISM_AUDIT_SINK",
"-e",
"DATAPRISM_AUDIT_WRITER_ID",
"-e",
"DATAPRISM_AUDIT_FILE_PATH",
"-e",
"DATAPRISM_METRICS_SINK",
"-e",
"DATAPRISM_HAZELCAST_TOPOLOGY",
"-e",
"DATAPRISM_HAZELCAST_CLUSTERNAME",
"-e",
"DATAPRISM_HAZELCAST_JOIN_MODE",
"-e",
"DATAPRISM_HAZELCAST_JOIN_MEMBERS",
"-e",
"DATAPRISM_HAZELCAST_MEMBER_PORT",
"-e",
"DATAPRISM_OPERATOR_ENABLED",
"-e",
"DATAPRISM_OPERATOR_PORT",
"-e",
"DATAPRISM_OPERATOR_REQUIREDAUDIENCE",
"-e",
"DATAPRISM_OPERATOR_REQUIREDSCOPE",
"-e",
"DATAPRISM_SOURCES_CUSTOMER_BASE_URL",
"-e",
"DATAPRISM_SOURCES_CUSTOMER_TIMEOUT",
"ghcr.io/aindriub/data-prism-server:0.7.1"
],
"env": {
"LOADER_PATH": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_JWT_ISSUER": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_JWT_AUDIENCE": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_JWT_JWK_SET_URI": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_JWT_ISSUER_DISCOVERY_URI": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_CALLER_CLAIMS_PRINCIPAL": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_CALLER_CLAIMS_ROLES": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_CALLER_CLAIMS_INVESTIGATION": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_POLICY_PURPOSES": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITYPOLICY_ROLES_INVESTIGATOR": "ใส่ค่าของคุณ",
"DATAPRISM_PRIVACY_PROFILE": "ใส่ค่าของคุณ",
"DATAPRISM_PRIVACY_SCOPE_LIFETIME": "ใส่ค่าของคุณ",
"DATAPRISM_PRIVACY_HMAC_KEY_KEY_ID": "ใส่ค่าของคุณ",
"DATAPRISM_PRIVACY_HMAC_KEY_ENVIRONMENT_VARIABLE": "ใส่ค่าของคุณ",
"DATAPRISM_PRIVACY_HMAC_KEY_PROVIDER_REFERENCE": "ใส่ค่าของคุณ",
"DATAPRISM_AUDIT_SINK": "ใส่ค่าของคุณ",
"DATAPRISM_AUDIT_WRITER_ID": "ใส่ค่าของคุณ",
"DATAPRISM_AUDIT_FILE_PATH": "ใส่ค่าของคุณ",
"DATAPRISM_METRICS_SINK": "ใส่ค่าของคุณ",
"DATAPRISM_HAZELCAST_TOPOLOGY": "ใส่ค่าของคุณ",
"DATAPRISM_HAZELCAST_CLUSTERNAME": "ใส่ค่าของคุณ",
"DATAPRISM_HAZELCAST_JOIN_MODE": "ใส่ค่าของคุณ",
"DATAPRISM_HAZELCAST_JOIN_MEMBERS": "ใส่ค่าของคุณ",
"DATAPRISM_HAZELCAST_MEMBER_PORT": "ใส่ค่าของคุณ",
"DATAPRISM_OPERATOR_ENABLED": "ใส่ค่าของคุณ",
"DATAPRISM_OPERATOR_PORT": "ใส่ค่าของคุณ",
"DATAPRISM_OPERATOR_REQUIREDAUDIENCE": "ใส่ค่าของคุณ",
"DATAPRISM_OPERATOR_REQUIREDSCOPE": "ใส่ค่าของคุณ",
"DATAPRISM_SOURCES_CUSTOMER_BASE_URL": "ใส่ค่าของคุณ",
"DATAPRISM_SOURCES_CUSTOMER_TIMEOUT": "ใส่ค่าของคุณ"
}
}
}
}เบราว์เซอร์จะถามก่อนเปิดแอป จากนั้นแอปแสดงค่าตั้งให้ตรวจแล้วกดยืนยัน ช่อง key เว้นว่างไว้ให้คุณใส่เอง
วางในไฟล์ .vscode/mcp.json ของโปรเจกต์
{
"servers": {
"data-prism": {
"type": "stdio",
"command": "docker",
"args": [
"run",
"-i",
"--rm",
"-e",
"LOADER_PATH",
"-e",
"DATAPRISM_SECURITY_JWT_ISSUER",
"-e",
"DATAPRISM_SECURITY_JWT_AUDIENCE",
"-e",
"DATAPRISM_SECURITY_JWT_JWK_SET_URI",
"-e",
"DATAPRISM_SECURITY_JWT_ISSUER_DISCOVERY_URI",
"-e",
"DATAPRISM_SECURITY_CALLER_CLAIMS_PRINCIPAL",
"-e",
"DATAPRISM_SECURITY_CALLER_CLAIMS_ROLES",
"-e",
"DATAPRISM_SECURITY_CALLER_CLAIMS_INVESTIGATION",
"-e",
"DATAPRISM_SECURITY_POLICY_PURPOSES",
"-e",
"DATAPRISM_SECURITYPOLICY_ROLES_INVESTIGATOR",
"-e",
"DATAPRISM_PRIVACY_PROFILE",
"-e",
"DATAPRISM_PRIVACY_SCOPE_LIFETIME",
"-e",
"DATAPRISM_PRIVACY_HMAC_KEY_KEY_ID",
"-e",
"DATAPRISM_PRIVACY_HMAC_KEY_ENVIRONMENT_VARIABLE",
"-e",
"DATAPRISM_PRIVACY_HMAC_KEY_PROVIDER_REFERENCE",
"-e",
"DATAPRISM_AUDIT_SINK",
"-e",
"DATAPRISM_AUDIT_WRITER_ID",
"-e",
"DATAPRISM_AUDIT_FILE_PATH",
"-e",
"DATAPRISM_METRICS_SINK",
"-e",
"DATAPRISM_HAZELCAST_TOPOLOGY",
"-e",
"DATAPRISM_HAZELCAST_CLUSTERNAME",
"-e",
"DATAPRISM_HAZELCAST_JOIN_MODE",
"-e",
"DATAPRISM_HAZELCAST_JOIN_MEMBERS",
"-e",
"DATAPRISM_HAZELCAST_MEMBER_PORT",
"-e",
"DATAPRISM_OPERATOR_ENABLED",
"-e",
"DATAPRISM_OPERATOR_PORT",
"-e",
"DATAPRISM_OPERATOR_REQUIREDAUDIENCE",
"-e",
"DATAPRISM_OPERATOR_REQUIREDSCOPE",
"-e",
"DATAPRISM_SOURCES_CUSTOMER_BASE_URL",
"-e",
"DATAPRISM_SOURCES_CUSTOMER_TIMEOUT",
"ghcr.io/aindriub/data-prism-server:0.7.1"
],
"env": {
"LOADER_PATH": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_JWT_ISSUER": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_JWT_AUDIENCE": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_JWT_JWK_SET_URI": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_JWT_ISSUER_DISCOVERY_URI": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_CALLER_CLAIMS_PRINCIPAL": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_CALLER_CLAIMS_ROLES": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_CALLER_CLAIMS_INVESTIGATION": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITY_POLICY_PURPOSES": "ใส่ค่าของคุณ",
"DATAPRISM_SECURITYPOLICY_ROLES_INVESTIGATOR": "ใส่ค่าของคุณ",
"DATAPRISM_PRIVACY_PROFILE": "ใส่ค่าของคุณ",
"DATAPRISM_PRIVACY_SCOPE_LIFETIME": "ใส่ค่าของคุณ",
"DATAPRISM_PRIVACY_HMAC_KEY_KEY_ID": "ใส่ค่าของคุณ",
"DATAPRISM_PRIVACY_HMAC_KEY_ENVIRONMENT_VARIABLE": "ใส่ค่าของคุณ",
"DATAPRISM_PRIVACY_HMAC_KEY_PROVIDER_REFERENCE": "ใส่ค่าของคุณ",
"DATAPRISM_AUDIT_SINK": "ใส่ค่าของคุณ",
"DATAPRISM_AUDIT_WRITER_ID": "ใส่ค่าของคุณ",
"DATAPRISM_AUDIT_FILE_PATH": "ใส่ค่าของคุณ",
"DATAPRISM_METRICS_SINK": "ใส่ค่าของคุณ",
"DATAPRISM_HAZELCAST_TOPOLOGY": "ใส่ค่าของคุณ",
"DATAPRISM_HAZELCAST_CLUSTERNAME": "ใส่ค่าของคุณ",
"DATAPRISM_HAZELCAST_JOIN_MODE": "ใส่ค่าของคุณ",
"DATAPRISM_HAZELCAST_JOIN_MEMBERS": "ใส่ค่าของคุณ",
"DATAPRISM_HAZELCAST_MEMBER_PORT": "ใส่ค่าของคุณ",
"DATAPRISM_OPERATOR_ENABLED": "ใส่ค่าของคุณ",
"DATAPRISM_OPERATOR_PORT": "ใส่ค่าของคุณ",
"DATAPRISM_OPERATOR_REQUIREDAUDIENCE": "ใส่ค่าของคุณ",
"DATAPRISM_OPERATOR_REQUIREDSCOPE": "ใส่ค่าของคุณ",
"DATAPRISM_SOURCES_CUSTOMER_BASE_URL": "ใส่ค่าของคุณ",
"DATAPRISM_SOURCES_CUSTOMER_TIMEOUT": "ใส่ค่าของคุณ"
}
}
}
}เบราว์เซอร์จะถามก่อนเปิดแอป จากนั้นแอปแสดงค่าตั้งให้ตรวจแล้วกดยืนยัน ช่อง key เว้นว่างไว้ให้คุณใส่เอง
ตัวนี้รันในเครื่องคุณ แต่ ChatGPT ต่อได้เฉพาะ server บนอินเทอร์เน็ต ลองเลือกแอปอื่น
ตัวเลือกเก็บในคุกกี้บนเครื่องนี้ ไม่ต้องมีบัญชี
DATAPRISM_SECURITY_JWT_ISSUER_DISCOVERY_URI envDATAPRISM_PRIVACY_HMAC_KEY_PROVIDER_REFERENCE envDATAPRISM_AUDIT_FILE_PATH envDATAPRISM_HAZELCAST_CLUSTERNAME envDATAPRISM_HAZELCAST_JOIN_MODE envDATAPRISM_HAZELCAST_JOIN_MEMBERS envDATAPRISM_HAZELCAST_MEMBER_PORT envDATAPRISM_OPERATOR_ENABLED envDATAPRISM_OPERATOR_PORT envDATAPRISM_OPERATOR_REQUIREDAUDIENCE envDATAPRISM_OPERATOR_REQUIREDSCOPE envค่าตั้งนี้สร้างจากข้อมูลใน registry ของผู้ทำ ถ้าไม่ตรงกับ README ให้เชื่อ README
รันในเครื่องคุณ รายการเครื่องมือจะขึ้นในแอป AI หลังติดตั้ง
เราตรวจจากข้อมูลที่ใครก็เปิดดูได้ ยังไม่ได้อ่านโค้ด ข้อที่ไม่เกี่ยวกับตัวนี้ไม่นับในตัวหาร · ตรวจเมื่อ 6 พ.ย. 2569
ชื่อใน registry ยืนยันด้วยบัญชี GitHub AindriuB ซึ่งเป็นเจ้าของ repo
ยังไม่ได้อ่านข้อมูล repo จาก GitHub
ยังไม่ได้อ่านข้อมูล repo จาก GitHub
ตัวนี้รันบนเครื่องคุณ ไม่มี endpoint บนอินเทอร์เน็ต
ตัวนี้รันบนเครื่อง ใช้ค่าที่ตั้งในเครื่องแทน
รันในเครื่องคุณ เราอ่านรายการเครื่องมือได้เฉพาะตัวที่มี endpoint บนอินเทอร์เน็ต
เทียบกับทุก server ที่ยังใช้งานในหมวดนี้ทั้งทะเบียน ดาวนับเฉพาะเมื่อผู้ลงทะเบียนเป็นเจ้าของ repo
จากการตรวจเบื้องต้นของเรา ผ่าน 1 จาก 1 ข้อที่ตรวจได้ เรายังไม่ได้อ่านโค้ด ก่อนใส่กุญแจหรือ token ให้ดูว่า server ขอสิทธิ์อะไร และเลือกกุญแจที่ทำได้เท่าที่จำเป็น
ต้องใส่ค่าเหล่านี้: LOADER_PATH, DATAPRISM_SECURITY_JWT_ISSUER, DATAPRISM_SECURITY_JWT_AUDIENCE, DATAPRISM_SECURITY_JWT_JWK_SET_URI, DATAPRISM_SECURITY_CALLER_CLAIMS_PRINCIPAL, DATAPRISM_SECURITY_CALLER_CLAIMS_ROLES, DATAPRISM_SECURITY_CALLER_CLAIMS_INVESTIGATION, DATAPRISM_SECURITY_POLICY_PURPOSES, DATAPRISM_SECURITYPOLICY_ROLES_INVESTIGATOR, DATAPRISM_PRIVACY_PROFILE, DATAPRISM_PRIVACY_SCOPE_LIFETIME, DATAPRISM_PRIVACY_HMAC_KEY_KEY_ID, DATAPRISM_PRIVACY_HMAC_KEY_ENVIRONMENT_VARIABLE, DATAPRISM_AUDIT_SINK, DATAPRISM_AUDIT_WRITER_ID, DATAPRISM_METRICS_SINK, DATAPRISM_HAZELCAST_TOPOLOGY, DATAPRISM_SOURCES_CUSTOMER_BASE_URL, DATAPRISM_SOURCES_CUSTOMER_TIMEOUT
รันบนเครื่องของคุณ โปรแกรม AI จะเปิด server ขึ้นมาเองเมื่อใช้ ข้อมูลไม่ต้องผ่านเซิร์ฟเวอร์ของผู้ทำ (ยกเว้นตัวที่ไปเรียกบริการออนไลน์ต่อ)
repo บน GitHub มีการแก้โค้ดล่าสุด – และส่งรุ่นล่าสุด (0.7.1) เข้า registry 15 วันที่ผ่านมา
โปรแกรมที่รองรับ MCP เช่น Claude Desktop, Claude Code, Cursor และ VS Code ตัวนี้ต้องมี Docker ในเครื่องด้วย
ในหมวดเดียวกันมี Context7, Codebase Memory, Exa
server หมวดเดียวกันจากผู้ทำคนอื่น เรียงตามดาว
อ่านการ์ด:★ ดาว GitHubiสามเสา: รีวิว · ผลตรวจ · การใช้งานiอัปเดต = วันที่ส่งรุ่นล่าสุดเข้า registryi
ส่งคู่มือการใช้ไลบรารีและเฟรมเวิร์กรุ่นล่าสุดให้ AI อ่านก่อนตอบ ช่วยให้โค้ดที่ AI เขียนไม่ใช้คำสั่งเก่าที่เลิกใช้แล้ว
Codebase knowledge graph for AI agents — 162 languages, sub-ms queries, 99% fewer tokens.
Connect AI agents to Exa for web search, content fetching, and multi-step research.
ส่วนนี้คัดจาก repo ของผู้ทำตามต้นฉบับ PopNx MCP ไม่ได้ตรวจหรือรับรองเนื้อหา ตัด HTML รูปภาพ และสคริปต์ออกแล้ว ลิงก์จะพาออกนอกเว็บ
Fail-closed privacy layer that pseudonymises enterprise API data for LLM agents and MCP clients.
Data Prism is an open-source privacy layer for Java/Spring teams putting LLM agents or MCP clients in front of internal APIs holding customer data. It pseudonymises personal data per privacy scope, refuses anything unclassified, and can keep a hash-chained audit trail.
What it is. A privacy enforcement layer for enterprise AI. It gives LLM agents useful, correlated business context — one consistent synthetic identity per entity within a privacy scope — while controlling which personal data crosses the AI boundary, and in what form.
Who it's for. Java/Spring platform and backend teams putting LLM agents or MCP clients in front of internal APIs that hold customer data. If nothing you run exposes personal data to a model, you don't need this.
Status: the walking skeleton and every slice through S9a are built, with 18 Maven submodules (19 Maven projects in the reactor counting the root pom-packaged aggregator itself) and a passing test suite. The privacy engine, correlation and consistency findings, parallel mTLS connectors, an embedded Hazelcast identity cache and read budget (shared only across members that have joined one cluster; see multiple instances), an OAuth2 resource server with session-derived PrivacyContext, audit and metrics are all real and exercised end to end. The standalone server is the primary deployment surface; the Spring Boot starter is the embedded option. A one-command local Compose quickstart also exists: see "Try it" below. Two MCP tools ship today, get_entity_context and compare_entity_sources — the other two named in the design review, search_entity_data and describe_entity_model, are not yet built (docs/tools.md "Not yet built"). A durable, append-only, hash-chained audit sink and an offline AuditChainVerifier ship as of 0.3.0, opt-in via dataprism.audit.sink: hash-chained; the verifier catches an edit or deletion inside a writer's chain, but cannot detect truncation of a writer's most recent records or the deletion of a whole process boot's records, and the trail does not resist an operator, or anyone else, who already has write access to the file (docs/audit.md "What this does and does not prove"). Not built: the re-identification operator surface (deferred past V1 by decision, see docs/architecture.md#decisions-worth-knowing) and the Elasticsearch connector and its search tools. See docs/plan/PLAN.md for what is open.
An organisation wants an LLM to investigate live business data spread across several systems. Giving the model direct API access is not acceptable: those APIs carry personal and confidential data, each system represents the same entity differently, and raw identifiers let anything downstream correlate across sessions.
The obvious fix — redact everything sensitive — destroys the investigation. Once three systems' names for one person are all [REDACTED], the model cannot tell whether it is looking at one person or three.
It sits between the two and does two things that are easy to confuse:
It makes identity consistent. One subject gets one synthetic identity across every source, derived deterministically from (scope, subject, namespace, algorithm version, key) — never random, never stored in plaintext, and reproducible without the cache. The same person in three systems reads as one person to the model.
It leaves the data inconsistent, and says so. If those three systems disagree about a name, the answer carries a finding that says they disagree. The platform never makes enterprise data look cleaner than it is. That distinction is the point of the project:
Identity representation becomes consistent. Underlying data inconsistencies
become *more* visible, not less.
Pseudonyms are scoped. The same person in two different investigations gets two different synthetic identities, so nothing correlates across cases by accident.
Not an API gateway, not an ETL platform, not a master-data system, not an identity provider, and not an entity-resolution engine — correlation requires a key the sources already share, behind a documented SPI. It carries no business domain: no Customer, Taxpayer or Employee type exists outside the example application.
It is not anonymisation. Under GDPR Art. 4(5), pseudonymised data is still personal data. Sending Data Prism output to a third-party model is still processing, and still needs a lawful basis, a DPIA, and a transfer mechanism where the provider is outside the EU. The platform reduces exposure; it does not remove the obligation.
The fastest way to see a real MCP call answered by the real privacy engine — no local JDK, no Maven install, one command:
docker compose up
pulls the published ghcr.io/aindriub/data-prism-quickstart- images (pin one with QUICKSTART_IMAGE_TAG=0.7.0; run docker compose -f compose.yaml -f compose.build.yaml up --build instead to build every image from source) and brings up the standalone server, a synthetic fixture API and a local HTTPS JWT issuer, proving an agent-compatible get_entity_context call returns a pseudonymised response. Walk through it in docs/quickstart.md; connect your own agent client to either that stack or a real deployment via docs/agents/.
Once you have seen the demo, protect your own API: docs/quickstart.md ends with a "What next" section pointing at docs/protect-your-own-api.md, a YAML-only walkthrough from a real JSON REST API to a working get_entity_context call.
The ghcr.io/aindriub/data-prism-server image listed there is published as a multi-architecture manifest list covering linux/amd64 and linux/arm64, each built and verified natively — docker run on Apple Silicon or any other arm64 host pulls the arm64 image directly, no emulation required.
It is not a one-command install, on either architecture. docker run alone yields a server that refuses to start: DataPrismContractValidator demands a reviewed DataSourceAdapter bean for every configured source, and DataPrismProperties.validate() demands a full deployment configuration (JWT issuer/audience/JWKS, caller-claim mappings, security policy, HMAC key reference, audit sink, metrics sink, Hazelcast topology). Neither ships in the image. Two things an operator must supply themselves before it serves anything:
dataprism.* vocabulary.docs/configuration.md is the authoritative, complete contract for both. The "Try it" section above is a local Compose fixture for evaluation, not this image or that configuration.
The full set of user docs is also published, rendered and searchable, at https://aindriub.github.io/data-prism/.
Each row links the site page and the repo file it is built from.
| Doc | Site | What it covers |
|---|---|---|
docs/quickstart.md | quickstart/ | One-command local Compose demonstration — start here |
docs/protect-your-own-api.md | protect-your-own-api/ | Pointing Data Prism at your own API instead of the fixture |
docs/configuration.md | configuration/ | The authoritative, complete dataprism.* deployment configuration contract |
docs/tools.md | tools/ | What each shipped MCP tool takes and returns, worked examples |
docs/extending.md | extending/ | Protecting a new source: a reviewed Java adapter, or the configuration-driven JSON REST mode |
docs/audit.md | audit/ | What the hash-chained audit trail records, and how to verify it |
docs/architecture.md | architecture/ | Module map, dependency rules, the boundaries that must not be crossed, dated decisions |
docs/agents/ | agents/ | Connecting an MCP agent client, local fixture or authenticated remote |
docs/agents/stdio.md | agents/stdio/ | The local stdio fixture workflow: a real MCP tool call with no JWT, network call or source system |
docs/agents/remote-http.md | agents/remote-http/ | The authenticated Streamable HTTP workflow against a real MCP endpoint; no development bypass |
docs/faq.md | faq/ | Direct answers on pseudonymisation, PII detection, Java requirements, the audit trail and prompt injection |
docs/comparison.md | comparison/ | How Data Prism compares to Presidio, LLM Guard, NeMo Guardrails and MCP gateways or proxies |
docs/use-cases/pseudonymise-customer-data-spring-boot.md | use-cases/pseudonymise-customer-data-spring-boot/ | Pseudonymising customer data from a Spring Boot API before an LLM agent sees it |
docs/use-cases/gdpr-data-minimisation-mcp.md | use-cases/gdpr-data-minimisation-mcp/ | GDPR data minimisation for MCP tools |
docs/use-cases/consistent-pseudonyms-across-systems.md | use-cases/consistent-pseudonyms-across-systems/ | Keeping one customer recognisable across systems without exposing identity |
CHANGELOG.md | changelog/ | Every notable Data Prism change by version, in Keep a Changelog format |
Not published on the site.
| Doc | What it covers |
|---|---|
docs/design-review.md | Amendments to the specification, with reasoning. Authoritative |
docs/development-plan.md | Slice order, sizing, and the decisions that block the first one |
docs/pack.md | The original specification. Superseded and historical; describes tools that were never built |
| [docs/conventions.md](docs/conventio
ตัดมาแค่ช่วงต้น อ่านต่อใน repo