Both get called “the API”, and picking the wrong one wastes a quarter
One is a cloud endpoint you can sign up for this afternoon. The other runs inside your own perimeter and is arranged with a person. They are not tiers of the same thing, and the row that decides between them is the second one in this table.
| Cloud API — anonym.legal | Local API — anonym.plus Enterprise on one machine | |
|---|---|---|
| Where the endpoint lives | Our servers in Falkenstein | Your own machine, on loopback |
| What leaves the machine | The text, over TLS, inside the EU | No document text. Only the licence activation, update checks and downloads, and language-model lookups and downloads go online |
| Authentication | JWT | Bearer token from the application settings |
| Protocols | REST, plus MCP over HTTPS | Local HTTP, plus a local MCP server |
| How you get access | Sign up, take a key | Enterprise, set up with you directly |
| Where the key comes from | Self-issued once your e-mail is confirmed | Generated on your machine once the Enterprise licence is in place; there is no key to buy |
| Included from | €3 / month (REST) · Pro (MCP) | Enterprise |
| Built for | Pipelines, ticketing, RAG, anything that must scale | Regulated environments where nothing may leave |
What the Enterprise switch exposes
analyze_text
Find personal data and report what was found and where.
anonymize_text
Apply an operator and return the treated text.
deanonymize_text
Reverse an encrypted operation for an authorised reader.
list_entity_types
Enumerate what this build can detect.
analyze_image
Find personal data in an image.
redact_image
Return the image with findings removed.
anonym.plus Enterprise also runs as a server in your own network: the anonym.plus engine, with the REST API and the MCP server reachable from your clients, from 10 client connections upwards. The Enterprise server.
anonym.plus publishes documentation for installing and using the program, but no public reference for the local API or the MCP server yet. Enterprise onboarding therefore runs through us — better said now than discovered mid-evaluation.
Which one fits your case?
Tell us whether the text is allowed to leave the machine it starts on. That answers it before we get to endpoints and tokens.