Klisten TokenIsolate

Register a supplied target rule with allowed or denied sensitive-data categories and redaction preferences. Returns the validated local routing rule; it does not configure a network proxy or enforce controls in another system. List this organization's registered sensitive-data route rules and their targets, categories and enabled states. Returns local policy definitions; it does not discover or audit external network policies. Scan supplied text for supported sensitive-data categories with optional category and confidence filters. Returns matched spans, categories and confidence estimates; pattern detection is local and does not guarantee exhaustive privacy protection. Detect supported sensitive-data spans in supplied text and replace them with token placeholders while storing originals in this organization's recovery vault. Returns redacted text and tokens; redaction is reversible and is not irreversible anonymization. Evaluate a supplied target and text against local sensitive-data route rules. Returns ALLOW or DENY with matched categories and redaction preference; it does not block network traffic or forward the text to another system. Scan supplied flow-stage payloads and record local audit events with exposure categories and text hashes. Returns exposed stages, finding counts and CLEAN or EXPOSED status; it does not observe a live pipeline or intercept traffic. Look up a supplied recovery token in this organization's sensitive-data vault. Returns the original value and category if found, or an unsuccessful lookup; this reveals previously stored sensitive content and does not query an external vault. Compare a supplied candidate value with the hash stored for a local recovery token. Returns whether it matches, its category and the original only on a successful match; it does not validate an external identity or authentication credential. Pass supplied text and local pattern findings to the configured local classi