Phantom Secrets MCP server
Value-blind secret metadata and gated workflows for AI coding agents through Phantom's local proxy.
not scanned yet
16 stars
Reviews
Write oneNobody has reviewed Phantom Secrets yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Phantom Secrets tools
No tool declarations could be read from the package source. They show once the server is installed.
Install Phantom Secrets in Claude Code, Cursor or VS Code
Runs npx -y phantom-secrets-mcp on your machine. Read the scan report first; the gateway never runs local packages.
claude mcp add phantom-secrets-mcp -- npx -y phantom-secrets-mcp
What the publisher says
From the Phantom Secrets repository's README, as published. We do not edit it. Read it on GitHub
Phantom
Delegate more to AI without putting real keys in agent context.
Phantom replaces project secrets with scoped phm_ placeholders. Applications use those placeholders through an authenticated local proxy, while agents use value-blind MCP tools for inventory, diagnostics, and governed requests.
Quick start · ⭐ Star Phantom · Delegate safely · Why Phantom? · MCP setup · Docs · Contribute · phm.dev
▶ Historical v0.4 demo — current behavior differs ·
🛡 Security model ·
📋 Threat model ·
💬 Discussions
[!IMPORTANT]
Release-state snapshot (verified 2026-09-05): the
immutable v0.7.8 GitHub release at source commit
f065b13462f9eaf27e0443f8911f021575b7c409. Its 19-asset release set,
checksums, archive-specific SPDX SBOMs, GitHub provenance and SBOM
attestations, and all six native release rows are bound to that immutable
release record by tag-bound workflow
33952398697.
Exact public registry endpoints were requeried on 2026-09-05. Homebrew
independently publishes reviewed v0.7.8; npm latest remains 0.6.0, and the npm
0.7.4 wrappers remain quarantined under release-candidate after failed
npm-channel acceptance. The GitHub receipt alone does not prove the separately
verified Homebrew formula, an npm or crates.io package, MCP Registry entry, hosted-service
commissioning, provider activation, signing/notarization, certification, or
customer acceptance. See
release readiness and
platform support.
Start here
Choose the smallest path that answers your next question. The first path uses no credential, makes no network request, and does not install or configure Phantom.
Shortened. The full README is on GitHub.
Nothing above is checked by us. What we check is on the safety report.
Phantom Secrets: common questions
- Is Phantom Secrets MCP server safe?
- With care: it is graded C, so read the findings first (57/100). Read the Phantom Secrets safety report
- How do I install Phantom Secrets?
- It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.
- Does Phantom Secrets need an API key?
- Not as far as the registry entry and our scan can tell: no credentials are declared or required.
- Is Phantom Secrets maintained?
- The last commit was 26 days ago (2026-09-17). The latest release is v0.7.9.
- What can I use instead of Phantom Secrets?
- Servers from other publishers that do the same job: Skylos MCP server, MCPProxy MCP server and Mastyf AI MCP server. Compare all Phantom Secrets alternatives.
Alternatives to Phantom Secrets
Same job from other publishers: the closest match first, then the best rated.
- SkylosDead code, security, secrets detection and code quality for Python, TypeScript, Go.not reviewedEstablishedC
- MCPProxyLocal-first MCP proxy with BM25 tool discovery, security scanning, quarantine & ~99% token savingsnot reviewedGrowingB
- Mastyf AIRuntime proxy for MCP security, cost governance & auditnot reviewedGrowingB
- MyMedi-AIDME billing and medical coding: code lookup, DMEPOS fee schedules, Medicare prior-auth checksnot reviewedGrowingA
- Security ProxyMCP gateway: many servers, one policy, lethal-trifecta blocking, PII masking, audit lognot reviewedGrowingA
