Installation
Configuration
Set API Key
Set Region
View Configuration
Clear Configuration
~/.config/blindfold/config.json.
Global Options
Every command supports these global options:| Option | Description |
|---|---|
--api-key <key> | API key (overrides env var and config file) |
--base-url <url> | Custom API base URL |
--region <region> | API region: eu or us (overrides env var and config file) |
--json | Output raw JSON response |
--quiet | Output only the transformed text |
--api-key flag > BLINDFOLD_API_KEY env > config file.
Priority order for region: --region flag > BLINDFOLD_REGION env > config file.
See Regions for data residency details.
Commands
detect
Detect PII in text without modifying it.tokenize
Replace PII with reversible tokens.detokenize
Restore original values from tokenized text.redact
Permanently remove PII from text.mask
Partially hide PII with masking characters.synthesize
Replace PII with realistic fake data.hash
Replace PII with deterministic one-way hashes.encrypt
Encrypt PII with AES encryption.discover
Analyze text samples to discover what types of PII they contain.Common Options
All PII commands (except detokenize and discover) share these options:| Option | Description |
|---|---|
-p, --policy <name> | Detection policy: basic, strict, gdpr_eu, hipaa_us, pci_dss |
-e, --entities <types> | Entity types to detect (comma-separated) |
-t, --threshold <n> | Minimum confidence score (0.0-1.0) |
-f, --file <path> | Read input from file |
-b, --batch | Batch mode: process each line as a separate text |