Phantom Secrets
Phantom gives Claude and other AI coding tools a secrets vault that refuses to expose real API keys. The MCP server lets agents list, rotate, and check secrets without ever seeing plaintext values. Real keys live in your OS keychain, agents see worthless phm_ tokens, and a local proxy swaps them at the network layer when your code makes actual API calls. You get phantom_doctor for diagnostics, phantom_rotate for key rotation, and phantom_sync for encrypted cloud backup. Setup writes the right config file for Claude Code, Cursor, Windsurf, or Codex. All mutating operations require an explicit confirm parameter so prompt injection can't silently delete your Stripe key. Use it when you want to hand Claude your entire codebase without also handing it your production credentials.
- GitHub stars
- 20
- tools
- 54
- transport
- STDIO
- last updated
- Oct 5, 2026
Tools
54 toolsPublic tool metadata for what this MCP can expose to an agent.
phantom_capabilityReports authority and hard denials for the small facade (not the separately gated advanced compatibility catalog).
Reports authority and hard denials for the small facade (not the separately gated advanced compatibility catalog).
No parameter schema in public metadata yet.
phantom_doCanonicalizes one closed Cargo action and reports the exact activation blockers without executing it.
Canonicalizes one closed Cargo action and reports the exact activation blockers without executing it.
No parameter schema in public metadata yet.
phantom_setup_workspaceProposes an exact value-blind plan, creates a bearerless apply request after revalidation, or reads authenticated request status.
Proposes an exact value-blind plan, creates a bearerless apply request after revalidation, or reads authenticated request status.
No parameter schema in public metadata yet.
phantom_list_secrets
No parameter schema in public metadata yet.
phantom_status
No parameter schema in public metadata yet.
phantom_init
No parameter schema in public metadata yet.
phantom_add_secret_interactive
No parameter schema in public metadata yet.
phantom_add_secretDeprecated; refuses plaintext.
Deprecated; refuses plaintext.
No parameter schema in public metadata yet.
phantom_remove_secret
No parameter schema in public metadata yet.
phantom_rotate
No parameter schema in public metadata yet.
phantom_copy_secret
No parameter schema in public metadata yet.
phantom_doctor
No parameter schema in public metadata yet.
phantom_why
No parameter schema in public metadata yet.
phantom_checkScans with no arguments or with log_path to report findings without printing secret values.
Scans with no arguments or with log_path to report findings without printing secret values.
No parameter schema in public metadata yet.
phantom_env
No parameter schema in public metadata yet.
phantom_validate_secret
No parameter schema in public metadata yet.
phantom_validate_all
No parameter schema in public metadata yet.
phantom_wrap
No parameter schema in public metadata yet.
phantom_unwrap
No parameter schema in public metadata yet.
phantom_sync
No parameter schema in public metadata yet.
phantom_cloud_push
No parameter schema in public metadata yet.
phantom_cloud_pull
No parameter schema in public metadata yet.
phantom_cloud_status
No parameter schema in public metadata yet.
phantom_team_list
No parameter schema in public metadata yet.
phantom_team_create
No parameter schema in public metadata yet.
phantom_team_members
No parameter schema in public metadata yet.
phantom_team_inviteTeam invites may assign only member or admin.
Team invites may assign only member or admin.
No parameter schema in public metadata yet.
phantom_team_key_publish
No parameter schema in public metadata yet.
phantom_team_vault_push
No parameter schema in public metadata yet.
phantom_team_vault_pull
No parameter schema in public metadata yet.
phantom_audit_recent
No parameter schema in public metadata yet.
phantom_audit_stats
No parameter schema in public metadata yet.
phantom_audit_analytics
No parameter schema in public metadata yet.
phantom_audit_anomalies
No parameter schema in public metadata yet.
phantom_audit_anomalies_realtime
No parameter schema in public metadata yet.
phantom_audit_hotspot_alerts
No parameter schema in public metadata yet.
phantom_audit_incidents
No parameter schema in public metadata yet.
phantom_leak_incidents_realtime
No parameter schema in public metadata yet.
phantom_audit_alerts
No parameter schema in public metadata yet.
phantom_audit_export_report
No parameter schema in public metadata yet.
phantom_compliance_status
No parameter schema in public metadata yet.
phantom_rotate_with_candidateDeprecated hard denial.
Deprecated hard denial.
No parameter schema in public metadata yet.
phantom_rotate_promoteDeprecated hard denial.
Deprecated hard denial.
No parameter schema in public metadata yet.
phantom_rotate_providerHard-denied before credential or network access in 0.7.9.
Hard-denied before credential or network access in 0.7.9.
No parameter schema in public metadata yet.
phantom_rotate_with_expiryDeprecated compatibility name for approved local phm_ token remaps.
Deprecated compatibility name for approved local phm_ token remaps.
No parameter schema in public metadata yet.
phantom_list_with_expiry
No parameter schema in public metadata yet.
phantom_secret_rotation_due
No parameter schema in public metadata yet.
phantom_validation_schedule
No parameter schema in public metadata yet.
phantom_validation_history
No parameter schema in public metadata yet.
phantom_secrets_expiry_check
No parameter schema in public metadata yet.
phantom_secrets_auto_rotateDeprecated compatibility name for approved local phm_ token remaps.
Deprecated compatibility name for approved local phm_ token remaps.
No parameter schema in public metadata yet.
phantom_expiry_enforce
No parameter schema in public metadata yet.
phantom_rotation_schedule_next
No parameter schema in public metadata yet.
phantom_apply_expiry_policy
No parameter schema in public metadata yet.
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageReadme
Phantom
Your agent can call the API. The key stays in a local vault.
Phantom replaces managed secrets in .env with phm_ placeholders. Agents and apps read those placeholders. A proxy on 127.0.0.1 adds the vault value only to the auth header of a matched route.
Details
- Repository
- github.com/ashlrai/phantom-secrets
- Website
- github.com/ashlrai/phantom-secrets
- Package
phantom-secrets-mcp- Transport
- STDIO
- Registry
- MCP registry, active