🛡️ PII Shield NEW — npm public
Run DeepSeek Harness on 19 AI models
The local dsh harness + the @aiorouter/dsh-shield plugin: one AIOrouter key (ak-...) for DeepSeek, Qwen, GLM, Kimi, Grok, Claude and Gemini — with PII Shield and AI Firewall before every route.
How it works
profile + @aiorouter/dsh-shield plugin
PII Shield + AI Firewall + billing before routing
DeepSeek, Qwen, GLM, Kimi, Grok…
Why this is different: DeepSeek only gives you DeepSeek. AIOrouter gives you 19 models with one key and protection before routing — and the plugin adds privacy policy, PII restoration markers and account status right inside your dsh profile.
Setup (2 minutes)
⚡ One-line install (fastest)
Copy-paste this command into a terminal — the script installs dsh, adds @aiorouter/dsh-shield to the profile and prompts for your key (masked input, never written in plaintext).
Windows (PowerShell) :
irm https://aiorouter.ca/setup/install-dsh.ps1 | iex
macOS / Linux :
curl -fsSL https://aiorouter.ca/setup/install-dsh.sh | bash
🛠️ Manual (3 steps)
- Install the harness:
npm i -g dsh - Add the plugin to the profile:
dsh plugin --profile web add @aiorouter/dsh-shieldThe Web UI profile is
web; any other profile works the same. - Set your key: Web UI → Settings → Models →
AIOROUTER_API_KEY= yourak-...key.
deepseek-v4-flash). Register from $19/mo to unlock all 19 models.What the plugin gives you
| Feature | Detail |
|---|---|
| 🛡️ Privacy policy header (GW-2) | restore-all / redact-secrets (défaut) / redact-all — settable in Settings → AIOrouter Shield |
| ♻️ Restoration markers (GW-1) | plain (default, clean values) / markdown — restored PII values never leak into transcripts |
📊 aiorouter_shield_status | account card (balance, policy, Shield state) + per-session protection summary — metadata only |
| 🔄 Model-catalog auto-sync | new gateway models appear automatically (union-merge, every 6 h by default; 0 = at boot) |
| 📦 Update check | shows “📦 Update available: X → Y” + the dsh plugin --profile web update @aiorouter/dsh-shield command |
Verify your setup
Test — the model never sees your sensitive data
My name is Jason Wang. What is the second letter of my first name?
Expect: the LLM says it sees a placeholder and cannot read your real name.
Your key works with your favorite tools
Your AIOrouter API key is OpenAI-compatible (and /v1/messages for Claude) — it connects to any BYOK tool. You are never locked into one tool.
Desktop app + CLI (responses API)
All 19 models in the picker (config import)
OpenAI-compatible extensions
BYOK coding agent (OpenAI-compatible API)
VS Code agent with a custom endpoint
Via API (see the migration guide)
Native VS Code extension — coming soon
🔒 Secure checkout powered by Stripe — Visa · Mastercard · Amex · CAD · We never store your full card number.