phantom-secrets

JSON →
stdio

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens. Works with Claude Code, Cursor, Windsurf, and Codex.

npx -y phantom-secrets-mcp`

★ 9 GitHub stars