phantom-secrets

active

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.

Code-only MCP server: no hosted endpoint, so you install and run it yourself. It is not probed, graded or counted in our reachability statistics.

Get it

Repository: github.com/ashlrai/phantom-secrets
Package: npm: phantom-secrets
Run (stdio): npx -y phantom-secrets
The usual command for this package registry; check the repository README for required settings.
License: MIT
Last update: 2026-11-14
GitHub stars: ★ 20
Homepage: phm.dev/secrets

ai ai-safety api-keys api-security claude-code cli codex cursor developer-tools encryption env-files mcp

Listed in

github · source

Run this server as a hosted endpoint? Submit the endpoint and it moves to the remote directory, where it is probed and graded.