Skip to main content

Your agent can use a key without seeing the real one.

Phantom Secrets

Phantom Secrets logo

Phantom Secrets

Rust · MIT

Phantom Secrets is a local proxy and MCP server. It swaps real API keys for phm_ tokens so the coding agent does not receive the secret. It works with Claude Code, Cursor, Windsurf, and Codex. The guide lives at phm.dev/secrets.

20 GitHub stars

  • Claude Code
  • Cursor
  • Windsurf
  • Codex
Star Phantom Secrets on GitHub (opens in a new tab)Open phm.dev/secrets (opens in a new tab)
Homebrew on macOS
brew tap ashlrai/phantom
brew trust --formula ashlrai/phantom/phantom
brew install ashlrai/phantom/phantom

This is the documented macOS path. It installs the phantom and phantom-mcp commands. Linux and Windows builds are on the GitHub releases page.

The Brief

AI news, and how the fleet ships.

The Brief publishes source-linked AI news and Ashlr's own articles about the autonomous fleet that works on these tools.

Read the BriefHow Ashlr runs on agents

The rest of the set