Phantom Secrets
Run coding agents against real APIs without exposing raw API keys in prompts, logs, or repo diffs.
Overview
Phantom Secrets is a MCP server for the Ship phase that proxies agent API traffic and swaps real secrets for phm_ tokens so keys never enter the model context.
What is this MCP server?
- Local proxy intercepts agent traffic and swaps real secrets for phm_ placeholder tokens
- stdio MCP server (npm package phantom-secrets-mcp, v0.6.0) for Claude Code–style agent workflows
- Keeps true keys off the model context while still allowing authenticated API calls
- Designed to reduce accidental commits and chat/log leaks from AI coding sessions
- Runs as a sidecar-style local service rather than cloud secret storage
- Registry version 0.6.0
- Transport: stdio
- npm identifier: phantom-secrets-mcp
What problem does it solve?
AI coding agents routinely read .env files and echo API keys into chats, tickets, and PRs.
Who is it for?
Indie builders who run Claude Code or Cursor against staging or production API keys daily.
Skip if: Teams that only use mock APIs offline or already enforce a fully remote secrets broker with no local keys.
What do I get? / Deliverables
Your agent keeps calling real APIs while only opaque phm_ tokens appear in prompts, logs, and most diffs.
- MCP-registered local proxy that tokenizes secrets for agent sessions
- Authenticated outbound API calls without plaintext keys in agent-visible text
Recommended MCP Servers
Journey fit
How it compares
Local secret-proxy MCP, not a static pre-commit secret scanner skill.
Common Questions / FAQ
Who is Phantom Secrets for?
Solo and indie developers who use AI coding agents with real API keys and want a local layer that keeps plaintext secrets out of model context.
When should I use Phantom Secrets?
Use it during Ship security work—before you widen agent autonomy on repos that touch .env, third-party SDKs, or deployment secrets.
How do I add Phantom Secrets to my agent?
Register the npm stdio package phantom-secrets-mcp in your MCP client (e.g. Claude Code), start the local proxy, and point agent HTTP traffic through it per the phantom-secrets repo docs.