Skip to content
InfratoApp
InfratoApp / Resources / MCP servers / phantom-secrets

phantom-secrets

phantom-secrets is an MCP server, listed under model apis. It reaches openai, phantom and stripe. It needs OPENAI_API_KEY, PHANTOM_PROXY_TOKEN and STRIPE_KEY to authenticate. Its repository has 18 GitHub stars and is licensed under MIT; we last read it on 2026-10-22.

Acts as a local proxy and middleware component (MCP) that replaces real API keys with phm_ tokens, protecting them from AI coding agents. Compatible with Claude Code, Cursor, Windsurf, and Codex.

Install

Read from phantom-secrets’s own README, close to verbatim -- not written by us, and not guessed.

brew tap ashlrai/phantom
brew trust --formula ashlrai/phantom/phantom
brew install ashlrai/phantom/phantom
View in phantom-secrets’s own README ↗

What it reaches, and what it needs

Reaches
openai, phantom, stripe
Credential
OPENAI_API_KEY, PHANTOM_PROXY_TOKEN, STRIPE_KEY

What it connects to

Supported in
Claude Code, Cursor, Windsurf

Unverified means a mention in the server’s own description, not a citation. A wrong claim here costs nothing to correct and nothing to trust yet.

Maintenance

Stars
18
State
listed
Licence
MIT
From the repository

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.

View on GitHub ↗2026-10-22

phantom-secrets compared with similar servers

phantom-secrets compared with the closest alternatives, by services reached, credentials, stars, last update and licence
ServerReachesNeedsStarsLast updateLicence
phantom-secrets (this page)openai, phantom, stripeOPENAI_API_KEY, PHANTOM_PROXY_TOKEN, STRIPE_KEY182026-10-19MIT
paperbananaatlascloud, google, openai(1 shared)ATLASCLOUD_API_KEY, GOOGLE_API_KEY, OPENAI_API_KEY2,4122026-09-17MIT
ms-365-mcp-serverms365, openai(1 shared)MS365_MCP_ATTACHMENT_URL_KEY, MS365_MCP_CLIENT_SECRET, MS365_MCP_OAUTH_TOKEN, OPENAI_API_KEY1,0682026-10-23MIT
just-promptanthropic, deepseek, gemini, groq, openai(1 shared)ANTHROPIC_API_KEY, DEEPSEEK_API_KEY, GEMINI_API_KEY, GROQ_API_KEY, OPENAI_API_KEY7392025-08-10—
flamaanthropic, openai(1 shared)None listed3042026-10-13Apache-2.0
mcp-ragdocsopenai, qdrant(1 shared)OPENAI_API_KEY, QDRANT_API_KEY2652025-07-18MIT

Ranked by services in common with phantom-secrets, then by stars. Figures are from each repository when we last read it.

Common questions about phantom-secrets

What does phantom-secrets do?
Acts as a local proxy and middleware component (MCP) that replaces real API keys with phm_ tokens, protecting them from AI coding agents. Compatible with Claude Code, Cursor, Windsurf, and Codex.
How do I install phantom-secrets?
Its own README gives this command: brew tap ashlrai/phantom brew trust --formula ashlrai/phantom/phantom brew install ashlrai/phantom/phantom. Run it where your MCP client can launch the server, and check the README for any settings it asks for.
What does phantom-secrets connect to, and what does it need?
It reaches openai, phantom and stripe. The credentials we found in its source are OPENAI_API_KEY, PHANTOM_PROXY_TOKEN and STRIPE_KEY.
Which AI clients can use phantom-secrets?
Its own description mentions Claude Code, Cursor and Windsurf. That is a mention in its description, not a test we ran.
Is phantom-secrets official and is it maintained?
We found nothing naming it as a vendor’s official server. Its repository has 18 GitHub stars and its state in our directory is listed. Its last commit we recorded was on 2026-10-19.
What licence does phantom-secrets use?
The repository declares the MIT licence.

More MCP servers for model apis

All model apis entries →

Learn this on Infrato