rehydra

rehydra scans LLM prompts for accidental personal information before they reach a model.

github.com/rehydra-ai/rehydra-sdk
rehydra homepage screenshot

About rehydra

rehydra is an open-source SDK that scans LLM prompts for personal information before they reach a model. It detects structured data such as emails, phones, IBANs and credit cards with regex, and names, organizations and locations with an on-device NER model, then replaces values with stable placeholders that persist across a session and restores originals from an encrypted map for file writes, commands or final answers.

It can be used as a local proxy for AI coding tools, a Chrome extension for ChatGPT and Gemini, an OpenCode plugin, and an embeddable library for Node.js, Bun and browsers. The proxy requires an Anthropic API key and does not support Claude Max/Pro OAuth subscriptions through proxies, and the OpenCode plugin does not scrub the separate session-title request.

Key features

  • Detect structured PII with regex patterns (emails, phones, IBANs, etc.)
  • Detect names, organizations, locations with on-device ONNX NER model
  • Replace PII values with stable session-persistent placeholders
  • Restore original values from encrypted map for tool actions
  • Local proxy for OpenAI/Anthropic-compatible clients including Claude Code, Cursor
  • Chrome extension to anonymize ChatGPT and Gemini prompts in browser
Best for: Developers and teams using AI coding tools or browser chatbots who need to keep names, contact details and secrets out of prompts.
Good for
  • NER detection runs on-device with no cloud calls
  • Stable placeholders keep entity relationships across messages in a session
  • Original values are stored encrypted with AES-256-GCM for restoration
Watch out for
  • Proxy requires an Anthropic API key and does not support Claude Max/Pro OAuth subscriptions
  • OpenCode session-title request bypasses plugin hooks and can send first message without scrubbing

rehydra at a glance

Type
Open-source project
Pricing
Not confirmed. Check the site
Open source
Yes · Source code
Language
English
Last checked
Oct 5, 2026 · Online when checked
Listed
Oct 5, 2026

rehydra alternatives

Tools and sites you could use instead, ranked by how closely they match.

All 17 alternatives

Cleanlab

cleanlab.ai/tlm

Cleanlab Detect scores AI responses for trust and accuracy and flags issues such as hallucinations or missing context.

Popular in AI Code Review & Testing

Well-known listings from the same topic.

All 27

rehydra FAQ

How does Rehydra handle PII differently from permanent redaction?
It replaces each value with a stable placeholder for the session and restores the original from its encrypted map when needed for tool actions or final answers.
Does the proxy work with Claude Max/Pro subscriptions?
No. The proxy requires an Anthropic API key, and Claude Max/Pro subscriptions use OAuth which api.anthropic.com does not support through proxies.
Does the OpenCode plugin scrub all requests?
No. The separate session-title request bypasses the plugin hooks and can send the first message without scrubbing unless the title agent is disabled.
Is something wrong or out of date?

Tell us and an editor will check it.

Own this website?

Claim the listing and suggest updates yourself. An editor checks every claim first.

Claim this listing