← MCPLookup
Packageactivev0.6.0
Phantom Secrets
io.github.ashlrai/phantom-secrets-mcp
Stop AI coding agents from leaking API keys. Local proxy swaps real secrets for phm_ tokens.
No blockers found
assessed on 1 of 4 dimensions
- ProvenanceOrigin linked to a public source repository.Official MCP Registry · as of May 10, 2026Pass
- MaintenanceRepository maintenance signals not yet ingested.Pending
- Manifest integrityLive manifest not yet captured — the rug-pull baseline begins at first probe.Pending
- Supply chainPackage vulnerability scan not yet run.Pending
- Behavioral trustNo live endpoint to observe.Not applicable
Connect
npm package
npx -y phantom-secrets-mcpProvenance
- Official MCP Registry · as of May 10, 2026 · registry-tos
Every verdict is attributable to its sources and recomputed from our own landed copy — never read live on this page.