Mask PII in a Next.js server action

Wrap a server action's model call with pii({ mode: "mask" }) so request logs never contain a real email or phone number.

"use server";
import { Klaro, pii, logging } from "@klaroshield/sdk";
import OpenAI from "openai";

const openai = new OpenAI();
const klaro = new Klaro()
  .use(pii({ mode: "mask", types: ["email", "phone"] }))
  .use(logging({ format: "silent" }));

const chat = klaro.wrap(openai.chat.completions.create.bind(openai.chat.completions));

export async function askSupport(message: string) {
  return chat({ model: "gpt-4o-mini", messages: [{ role: "user", content: message }] });
}

More in Frameworks