Quick Start¶
Get your first anonymized LLM request running in under 5 minutes.
Prerequisites¶
- A Xybern account with a workspace created
- An API key for your chosen upstream LLM provider (Anthropic, OpenAI, Gemini, DeepSeek, etc.)
- Python 3.8+ or Node.js 18+ (examples below cover both)
Step 1, Create a Redact Workspace¶
- Go to your Xybern dashboard and open (or create) a workspace
- Navigate to Redact from the sidebar
- Go to Settings → Upstream Provider
- Select your LLM provider and paste your API key
- Click Save Settings
Step 2, Get Your Redact API Key¶
Your Redact API key is provisioned by Xybern when your workspace is set up. Go to the API Keys tab in your Redact workspace and copy the key. It starts with xr_live_ and is scoped automatically to your workspace domain.
Step 3, Point Your Agent at Redact¶
The proxy exposes an OpenAI-compatible endpoint. Change only the base_url (and API key) in your existing agent code:
from openai import OpenAI
client = OpenAI(
base_url="https://www.xybern.com/redact/v1",
api_key="xr_live_YOUR_KEY",
)
response = client.chat.completions.create(
model="claude-sonnet-4-6", # or any model your provider supports
messages=[{
"role": "user",
"content": "Summarise the contract signed by Michael Chen at Goldman Sachs."
}]
)
print(response.choices[0].message.content)
# Michael Chen and Goldman Sachs are anonymized in transit -
# you get the real names back in the response.
Step 4, Verify in the Vault¶
After sending a request, go to Vault in the Redact dashboard. You should see a new record showing:
- Number of entities stripped
- Doc class
- Model used
- HMAC signature status
- Chain hash
What Happens to Your Data¶
Your message: "Michael Chen at Goldman Sachs signed on 12 March 2024"
↓ anonymize
Sent to LLM: "Finley Warren at Cobalt Group signed on 11 April 2024"
↓ LLM responds
LLM response: "The agreement by Finley Warren (Cobalt Group) is binding."
↓ de-anonymize
Your agent sees: "The agreement by Michael Chen (Goldman Sachs) is binding."
The LLM never sees real names, organisations, or dates. Your agent receives the fully de-anonymized response.
Next Steps¶
- Configure a Policy, control which entity types get stripped
- Proxy Endpoint Reference, full request/response schema
- Upstream Providers, switch to Gemini, DeepSeek, Mistral, and more