Skip to main content
PasteGuard sits between your self-hosted chat interface and the LLM provider. Users interact with Open WebUI, LibreChat, or similar tools — PasteGuard handles privacy automatically in the background.

​
Open WebUI

Point Open WebUI to PasteGuard instead of OpenAI directly: 
OPENAI_API_BASE_URL=http://localhost:3000/openai/v1
In Docker Compose, use the service name instead of localhost (e.g., http://pasteguard:3000/openai/v1).

​
LibreChat

Add PasteGuard as a custom endpoint in your LibreChat configuration: 
version: 1.2.8
cache: true
endpoints:
  custom:
    - name: "PasteGuard"
      apiKey: "${OPENAI_API_KEY}"  # Your API key, forwarded to OpenAI
      baseURL: "http://localhost:3000/openai/v1"
      models:
        default: ["gpt-5.2"]
        fetch: true
      titleConvo: true
      titleModel: "gpt-5.2"

​
Mask Mode vs Route Mode

Self-hosted setups can use either privacy mode depending on your requirements:
ModeBest forHow it works
MaskTeams using cloud LLMs (OpenAI, Anthropic)Replaces PII with placeholders, sends to cloud provider, restores in response
RouteTeams with a local LLM (Ollama, vLLM)Requests containing PII stay on your local LLM, others go to the cloud provider
Route Mode requires a local LLM provider configured in config.yaml. See Route Mode for setup details. Mask Mode works out of the box with any provider. See Mask Mode for how masking and unmasking works.

​
API Endpoints

APIPasteGuard URL
OpenAIhttp://localhost:3000/openai/v1
Anthropichttp://localhost:3000/anthropic