PII Shield is an open-source MCP server for Claude Desktop (Cowork and Code) that anonymizes documents *before* they reach the model and restores real values *after* analysis — entirely on the user's machine. The pipeline is local → API → local. The plugin reads a file on disk, replaces detected entities with placeholders like `<PERSON_1>`, `<ORG_2>`, `<IBAN_1>`, and only the placeholder text crosses the wire. Detection combines GLiNER zero-shot NER with **17 jurisdiction-specific patterns** (UK NIN/NHS/passport, DE Tax ID, FR NIR, IT fiscal code, ES DNI/NIE, CY TIC, EU VAT, plus US SSN/EIN, IBAN, crypto wallet, money, dates). A human-in-the-loop review UI renders inside Claude Desktop for false-positive correction. Ships with a companion skill `pii-contract-analyze` exposing six modes — MEMO, REDLINE, SUMMARY, COMPARISON, BULK (up to 5 files, shared placeholders), and ANONYMIZE-only. **Jurisdictions covered (detection patterns):** EU-wide, UK, Germany, France, Italy, Spain, Cyprus, US. Use PII Shield whenever client documents must be analyzed by an LLM but cannot be transmitted in cleartext: NDA / MSA / DPA review, GDPR risk analysis, due diligence on counterparty contracts, employment document handling, DSAR responses, and partial-analysis handoff between colleagues under privilege.