Stop AI coding agents from leaking API keys. Local proxy swaps real secrets for phm_ tokens.
Getting started
Add Phantom Secrets to your MCP-capable client — Claude Code, Cursor, Codex, and others — by following the setup at the source, which documents the exact command, configuration, and any required API keys.






