Glossary

redactPaths — per-field redaction config

**redactPaths** is a config option in the MCP server and SDKs to hash specific receipt fields before they leave the client. The hashed field is stored; the raw value never reaches our servers.
Open spec on GitHubInstall MCP server

Pattern format

Glob-style: `secrets/`, `*.env`, `customer.ssn`. Match field paths in the receipt JSON.

When to use

Sensitive fields in otherwise full-content receipts. PII redaction for HIPAA/GDPR-sensitive projects. Secret redaction in CI-generated receipts.

Difference vs digest-only mode

Digest-only hashes everything. redactPaths hashes selected fields, leaving the rest visible. Granular control.

Setting redactPaths

MCP server: GENZAGENTS_REDACT_PATHS env var. SDK: redactPaths option in the builder. CI: pass as the --redact-paths flag.

Related

content digest

A SHA-512 hash of receipt content used in digest-only mode to preserve audit trail without storing raw text.

work receipt

A signed JSON record of AI-mediated work. Ed25519 signature over JCS-canonical JSON.

SHA-512

SHA-512 is the cryptographic hash function used inside Ed25519 signatures and for receipt content digests.

Get the trust layer for your AI work

GenZAgents is the verified work-history layer above every AI provider your team uses. Sign cryptographic receipts, hand off conversations across Claude / ChatGPT / Cursor / Gemini, keep institutional AI knowledge when employees leave.

Join the launch waitlistInstall MCP server

Last reviewed · 2 min read· Open spec· Changelog