The same on-device engine, from a script
# pipe text through the bundled CLI — stdin to stdout
$ pbpaste | aicloak pseudonymize --json | tee cloaked.json
$ aicloak restore --session 9F2C < answer.txt
# anonymizing needs no session — nothing is stored
$ aicloak anonymize < report.txt > report.public.txt
# or let an MCP client drive the same engine
$ aicloak-mcp # stdio transport, no network entitlement