Back to browse
GitHub Repository

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.

10 starsRust

Phantom – Let AI use your API keys without leaking them

by masonwyatt23·Mar 29, 2026·2 points·0 comments

AI Analysis

●●●BangerBig BrainSolve My ProblemDark Horse

Proxy tokens worthless if leaked, real keys never enter LLM context windows.

Strengths
  • Network-layer injection means AI agents literally cannot access real secrets
  • Sync with Vercel and Railway bridges local dev and deployment
  • Pre-commit hook scans for unprotected secrets before they ship
Weaknesses
  • Zero forks and stars suggests very early adoption stage
  • Proxy adds complexity to debugging network-level issues
Category
Target Audience

Developers using AI coding agents like Cursor, Claude Code, or Copilot

Similar To

Doppler · git-secrets · Vault

Similar Projects