# ScrubGuard API (https://scrubguard-api.scrubguard.workers.dev)
> Deterministic, in-memory PII & Secret Scrubber API with Reversible Tokenization for LLM & RAG pipelines.

## Key Capabilities
- **POST https://scrubguard-api.scrubguard.workers.dev/v1/scrub**: Scrub plain text or prompts. Modes: `tokenize` (returns `[EMAIL_1]` + reversible `vault`), `redact` (`[REDACTED_EMAIL]`), `mask` (`****1234`).
- **POST https://scrubguard-api.scrubguard.workers.dev/v1/rehydrate**: Restore placeholders in LLM output using the `vault` object from `/v1/scrub`.
- **POST https://scrubguard-api.scrubguard.workers.dev/v1/scrub-json**: Recursively scrub arbitrary JSON objects/arrays (up to 32 levels deep) while preserving types and automatically scrubbing sensitive keys (`password`, `api_key`, `ssn`, `secret`).
- **Mathematical Checksum Validation**: Eliminates false positives using Luhn checksums (Credit Cards), ISO 7064 Mod-97 (IBANs), and SSA Area/Group/Serial rules (US SSNs).

## Quick Example (cURL)
```bash
curl -X POST https://scrubguard-api.scrubguard.workers.dev/v1/scrub \
  -H "Content-Type: application/json" \
  -d '{"text": "Customer Jane (jane@acme.io, SSN 453-21-9876) used key sk_test_abc123456789012345678901", "mode": "tokenize"}'
```