Phantom Secrets
Stop AI coding agents from leaking API keys. Local proxy swaps real secrets for phm_ tokens.
Install
npmstdio
npx -y phantom-secrets-mcp Client config (Claude Desktop, Cursor, Windsurf and most MCP clients)
{
"mcpServers": {
"io-github-ashlrai-phantom-secrets-mcp": {
"command": "npx",
"args": [
"-y",
"phantom-secrets-mcp"
]
}
}
} Source: official MCP Registry record · registry name io.github.ashlrai/phantom-secrets-mcp · published 2026-05-10 · updated 2026-05-10. Not an endorsement; review the code before connecting it to anything sensitive.