How do I install the phantom secrets mcp server?

Use a recorded configuration for your client, replace example credential values and paths, and verify the documented runtime. Restart or reconnect the client, then inspect the available tools.

What credentials does it need?

It reads `OPENAI_BASE_URL`, `PHANTOM_PROXY_TOKEN`, `OPENAI_API_KEY`, `STRIPE_KEY` from the environment. Store these in your client's env block or a secrets manager — never commit them to a repository — and grant the narrowest scope that still covers your use case.

SSyncDev

Start a project

Phantom Secrets MCP Server

Phantom hands every AI tool a worthless `phm_` token. The local proxy injects the real key at the network layer. Full access. Zero exposure.

Local serverstdioGo

What is the Phantom Secrets MCP Server?

Phantom hands every AI tool a worthless phm_ token. The local proxy injects the real key at the network layer. Full access. Zero exposure.

What it actually does

🔒 Real keys never enter the LLM — .env contains only phm_ tokens; the proxy swaps them at the network edge
⚡ 10-second setup — npx phantom-secrets init and you're protected. No accounts, no DNS, no MITM cert dance
🧰 Works with every AI tool — Claude Code, Cursor, Windsurf, Codex, GitHub Copilot. Anything that reads .env
🦀 Open source, local-first, MIT — your secrets live in your OS keychain. The optional cloud sync is end-to-end encrypted; the server only ever sees ciphertext

More MCP options

Compare MCP servers by category, or browse hosted MCP servers if you prefer an endpoint over a local process.

Maintainer setup documentation.

Recorded tools

Check the linked publisher documentation and your connected client's tool list. Names and availability can vary with the server version and account permissions.

Tool	What it does
phantom-core	Config (.phantom.toml), .env parsing/rewriting, token generation, auth, cloud client
phantom-vault	VaultBackend trait: OS keychain + encrypted file fallback, ChaCha20-Poly1305 crypto

How to install the Phantom Secrets MCP Server

{
  "mcpServers": {
    "phantom-secrets": {
      "command": "npx",
      "args": ["-y", "phantom-secrets"],
      "env": {
        "OPENAI_BASE_URL": "your-value",
        "PHANTOM_PROXY_TOKEN": "your-value",
        "OPENAI_API_KEY": "your-value",
        "STRIPE_KEY": "your-value"
      }
    }
  }
}

Add to claude_desktop_config.json, then restart Claude Desktop.

Configuration

Variable	Description	Required
OPENAI_BASE_URL	Endpoint or connection string the server talks to.	Yes
PHANTOM_PROXY_TOKEN	Credential the server authenticates with.	Yes
OPENAI_API_KEY	Credential the server authenticates with.	Yes
STRIPE_KEY	Credential the server authenticates with.	Yes

Example prompts to try

“Use Phantom Secrets to Windows-on.”
“Use Phantom Secrets to Vault.”
“Use Phantom Secrets to Local-to-cloud.”

Frequently asked questions

Phantom hands every AI tool a worthless `phm_` token. The local proxy injects the real key at the network layer. Full access. Zero exposure. Confirm the tools offered by your installed version in the connected client. Tool availability and permissions depend on the server and account configuration.