Data Maskit is a local privacy gateway for large language model tools. It masks sensitive data in outgoing requests as structured placeholders before they leave your machine and restores them in real time as model responses stream back. It works with any tool that accepts a custom Base URL, such as Cursor, Claude Code, and Codex. All processing happens locally with zero telemetry.
💡 Why Maskit?
When using Cursor, Claude Code, Codex, Pi, OpenCode, ChatGPT, or any AI coding assistant, sensitive information can easily be transmitted to external LLM providers:
- 🔑 Credentials & Secrets: sk-proj-..., ghp_..., Cloud AccessKeys, JWT Tokens, private keys;
- 🌐 Internal Infrastructure: DB connection strings (mysql://root:Pass123@192.168.1.50:3306/db), private IP addresses (10.x, 172.16.x, 192.168.x);
- 👤 Business Privacy (PII): Phone numbers, ID numbers, real names, credit cards, proprietary internal project names.
Maskit's Mission: Act as a transparent local privacy gateway between your developer tools and external AI providers — mask sensitive tokens before requests leave your machine, and restore them in real-time typewriter stream as answers arrive!
✨ Highlights & Feature Overview
🛡️ 1. Deep Masking with Multi-turn Consistency
- 19 Built-in Scanner Rules: API Keys/Tokens, PEM keys, DB connection strings, phone numbers, ID cards, emails, credit cards, private IPs;
- Custom Wordlists & Regex: Categorized custom dictionary for names, codenames, and proprietary business terms; full regex support;
- Sliding-window Placeholder Reuse: Placeholders remain consistent across long conversations. "Alice" is assigned the exact same token in turn 1 and turn 20, preserving model reasoning consistency.
⚡ 2. Millisecond SSE Stream Takeover (Native Typewriter Flow)
- Intercepts text/event-stream chunk by chunk;
- Automatically reassembles split tokens across chunk boundaries, maintaining native typewriter responsiveness without lag.
🔌 3. No Root CA Installation + Native Fallback Passthrough (Never Breaks Your API)
- Multi-port Reverse Proxy: Dedicated local ports per model channel (e.g. 18701 for OpenAI, 18703 for Anthropic). Change base_url to local port without installing untrusted self-signed root CAs;
- Fallback Passthrough Guarantee: If the proxy is stopped or closed, ports automatically fallback to raw transparent passthrough. Your coding tools will never experience unexpected connection dropouts!
📊 4. Real-time Logs, Security Audit & Cost Tracking
- Inspect full request/response diffs with one-click highlight mode;
- Detect prompt leaks, model-swapping, and destructive commands;
- Live token usage & model pricing cost estimation.
🔒 5. 100% Local Execution, Zero Telemetry
- All masking and unmasking happen inside your local process. No analytics, tracking SDKs, or cloud telemetry.
Publisher’s description
What is Data Maskit?
Data Maskit is an open-source ai assistants & llm program for Windows from maskit. It is written in Python.
Installation and requirements
Official installers exist for 64-bit as EXE (NSIS). It can be installed for the current user only, without administrator rights. The installer supports unattended (silent) installation.
Updates and version history
The current version is 0.12.0, released on October 25, 2026. 9 versions are listed since September 11, 2026, each with links to its own installer files. The last update is less than a month old.
Popularity and file types
The source code on GitHub (xiaYuTian11/maskit) has 313 stars. Similar programs include Claude Code, Codex CLI and ChatGPT.
Project description on GitHub: “数据面具 Data Maskit — 专为大模型打造的本地隐私脱敏网关（请求自动打码，回复流式还原；支持 Cursor / Claude Code / Codex / Pi 等任意可配 Base URL 工具）”
Pros / Cons
Pros
- Open source: the code can be inspected and built by anyone
- Documented silent install
- Installs without administrator rights
- Updated in the last two months
Cons
- No native ARM64 build
In short: Data Maskit is an open-source ai assistants & llm tool for 64-bit PCs. Administrators can deploy it unattended.
Is Data Maskit safe to download?
- The file is served by github.com, the publisher’s own domain
- The download link uses HTTPS
- A SHA256 hash is published, so you can verify the file:
1653B5C3B702998519AA26F090DC00A9163790C05F7F7BA240EBCFE8A5C8C345· Open the VirusTotal report for this hash - The link has not been checked yet
- The source code is public
- ExeAtlas does not host, wrap or modify installers
Related guide: How to check a file’s SHA256 hash on Windows
Recent versions
All 9 versions ›| Version | Date | Size | Files |
|---|---|---|---|
| 0.12.0Latest | October 25, 2026 | — | 64-bit EXE (NSIS) |
| 0.11.4 | October 20, 2026 | — | 64-bit EXE (NSIS) |
| 0.11.3 | October 20, 2026 | — | 64-bit EXE (NSIS) |
| 0.11.2 | October 19, 2026 | — | 64-bit EXE (NSIS) |
| 0.11.1 | October 16, 2026 | — | 64-bit EXE (NSIS) |
| 0.11.0 | October 14, 2026 | — | 64-bit EXE (NSIS) |
| 0.10.1 | October 13, 2026 | — | 64-bit EXE (NSIS) |
| 0.10.0 | October 11, 2026 | — | 64-bit EXE (NSIS) |
Install from the command line
Silent install ›winget install --id xiaYuTian11.DataMaskit -eMaskit_0.12.0_x64-setup.exe /SRelated guide: How to use winget: install and update apps
Information
- Publisher
- maskit
- Category
- AI assistants & LLMs
- Licence
- AGPL-3.0
- Price
- Free
- Source code
- github.com/xiaYuTian11/maskit
- Written in
- Python
- Requires
- Windows 11 / 10
- Architecture
- 64-bit
- Installer
- EXE (NSIS)
- Version
- 0.12.0
- Released
- October 25, 2026
- Added to the catalogue
- October 12, 2026
- Versions listed
- 9
- GitHub stars
- 313
- GitHub forks
- 50
- Website
- github.com
- winget ID
- xiaYuTian11.DataMaskit
Ratings and reviews
No reviews yet. Be the first to rate it.
Alternatives to Data Maskit
See all ›-
Claude Code2.1.302Unleash Claude’s raw power directly in your terminal. Search million-line codebases instantly. Turn hours-long workflows into a single command. Your tools. Your workflow. Your codebase, evolving at thought speed.Proprietary67.1K ↓ -
Codex CLI0.161.0Codex CLI is an open‑source local coding agent that runs in your terminal, letting you write, edit, and understand code without leaving the command line.Open source16.6K ↓ -
Open source17.1K ↓ -
Open source8.7K ↓ -
Open source3.3K ↓ -
oh-my-pi18.12.6⌥ AI Coding agent for the terminal — hash-anchored edits, optimized tool harness, LSP, Python, browser, subagents, and moreOpen source654 ↓ -
Open source333 ↓ -
Open source14K ↓
Frequently asked questions
Is Data Maskit free?
Yes. Data Maskit is open-source software under the AGPL-3.0 licence.
Is Data Maskit safe to download?
The download comes from github.com, which belongs to the publisher; ExeAtlas does not host or change the file. Compare its SHA256 hash with the one shown here, or open the VirusTotal report for that hash.
How do I install Data Maskit with winget?
Open PowerShell or Windows Terminal and run the winget command shown on this page. winget downloads the official installer and checks its SHA256 hash before running it.
Can Data Maskit be installed silently?
Yes. The silent install page lists the exact command for each installer.
Does Data Maskit run on ARM (Windows on Arm)?
There is no ARM64 build; Windows 11 on Arm can run the 64-bit version through emulation.
Where can I download an older version of Data Maskit?
The versions page lists all 9 versions with links to their official installer files, back to September 11, 2026.
Can I use Data Maskit without administrator rights?
Yes, there is a per-user installer that does not need administrator rights.
What are alternatives to Data Maskit?
Claude Code, Codex CLI, ChatGPT, GPT4All and Jan. The alternatives page compares them.
