ashlrai

ashlrai/phantom-secrets

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.

16 stars 3 forks 16 watchers Rust MIT License
ai ai-safety api-keys api-security claude-code cli codex cursor developer-tools encryption env-files mcp mcp-server phantom proxy rust secrets-management security token-proxy windsurf
View on GitHub Website
11 Open Issues Need Help Last updated: Sep 9, 2026

Open Issues Need Help

View All on GitHub
Docs: troubleshooting section for proxy port conflicts 19 days ago
good first issue help wanted
ashlrai/phantom-secrets
16

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.

Rust
#ai#ai-safety#api-keys#api-security#claude-code#cli#codex#cursor#developer-tools#encryption#env-files#mcp#mcp-server#phantom#proxy#rust#secrets-management#security#token-proxy#windsurf
Add `phantom doctor` hint to bug report template 19 days ago
good first issue help wanted
ashlrai/phantom-secrets
16

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.

Rust
#ai#ai-safety#api-keys#api-security#claude-code#cli#codex#cursor#developer-tools#encryption#env-files#mcp#mcp-server#phantom#proxy#rust#secrets-management#security#token-proxy#windsurf
Example: phm_ token flow with a Next.js app 19 days ago
good first issue help wanted
ashlrai/phantom-secrets
16

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.

Rust
#ai#ai-safety#api-keys#api-security#claude-code#cli#codex#cursor#developer-tools#encryption#env-files#mcp#mcp-server#phantom#proxy#rust#secrets-management#security#token-proxy#windsurf
Bump rustls to >=0.23.45 to clear RUSTSEC-2026-0285 (unblocks Rust dependency policy check) about 1 month ago
good first issue
ashlrai/phantom-secrets
16

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.

Rust
#ai#ai-safety#api-keys#api-security#claude-code#cli#codex#cursor#developer-tools#encryption#env-files#mcp#mcp-server#phantom#proxy#rust#secrets-management#security#token-proxy#windsurf
Add a step-by-step Cursor + Phantom tutorial to docs/ 6 months ago
documentation good first issue
ashlrai/phantom-secrets
16

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.

Rust
#ai#ai-safety#api-keys#api-security#claude-code#cli#codex#cursor#developer-tools#encryption#env-files#mcp#mcp-server#phantom#proxy#rust#secrets-management#security#token-proxy#windsurf
`phantom doctor` should warn if `.env` is not gitignored 6 months ago
enhancement good first issue
ashlrai/phantom-secrets
16

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.

Rust
#ai#ai-safety#api-keys#api-security#claude-code#cli#codex#cursor#developer-tools#encryption#env-files#mcp#mcp-server#phantom#proxy#rust#secrets-management#security#token-proxy#windsurf
Add `--json` flag to `phantom list` for scripting 6 months ago
enhancement good first issue
ashlrai/phantom-secrets
16

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.

Rust
#ai#ai-safety#api-keys#api-security#claude-code#cli#codex#cursor#developer-tools#encryption#env-files#mcp#mcp-server#phantom#proxy#rust#secrets-management#security#token-proxy#windsurf
Add shell completion: `phantom completion <bash|zsh|fish|powershell>` 6 months ago
enhancement good first issue
ashlrai/phantom-secrets
16

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.

Rust
#ai#ai-safety#api-keys#api-security#claude-code#cli#codex#cursor#developer-tools#encryption#env-files#mcp#mcp-server#phantom#proxy#rust#secrets-management#security#token-proxy#windsurf
cli: use `dirs::home_dir()` instead of `$HOME` in setup 7 months ago
bug good first issue windows
ashlrai/phantom-secrets
16

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.

Rust
#ai#ai-safety#api-keys#api-security#claude-code#cli#codex#cursor#developer-tools#encryption#env-files#mcp#mcp-server#phantom#proxy#rust#secrets-management#security#token-proxy#windsurf
docs: add Windows setup section to README 7 months ago
documentation good first issue windows
ashlrai/phantom-secrets
16

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.

Rust
#ai#ai-safety#api-keys#api-security#claude-code#cli#codex#cursor#developer-tools#encryption#env-files#mcp#mcp-server#phantom#proxy#rust#secrets-management#security#token-proxy#windsurf
ci: add `windows-latest` to test matrix 7 months ago
enhancement good first issue windows
ashlrai/phantom-secrets
16

Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.

Rust
#ai#ai-safety#api-keys#api-security#claude-code#cli#codex#cursor#developer-tools#encryption#env-files#mcp#mcp-server#phantom#proxy#rust#secrets-management#security#token-proxy#windsurf