public evidence dossier
io.github.ashlrai/phantom-secrets-mcp
Stop AI coding agents from leaking API keys. Local proxy swaps real secrets for phm_ tokens.
Latest visible observation: 2026-08-30T22:30:41.080Z
Identity
namespacegithub · observed 2026-05-10T05:51:05.540026Z
registry statusactive · observed 2026-05-10T05:51:05.540026Z
origin systemsadoption, github, npm, osv, registry · observed 2026-08-30T22:30:41.080Z
Distribution
repositoryhttps://github.com/ashlrai/phantom-secrets · observed 2026-07-07T15:08:43.719250+00:00
npm packagephantom-secrets-mcp · observed 2026-07-07T15:08:43.719250+00:00
PyPI packageUnknown
hosted endpointUnknown
Maintenance and public findings
repository pushed2026-07-22T03:07:52Z · observed 2026-07-22T03:07:52Z
repository archivedNo · observed 2026-07-07T15:08:43.719250+00:00
npm deprecatedNo · observed 2026-07-07T15:08:43.719250+00:00
OSV package advisoryNone on record · observed 2026-07-07T15:08:43.719250+00:00
Hosted liveness
last endpoint observationUnknown
reported MCP revisionUnknown
Limits
This dossier reports public evidence. It is not a safety, code, permission, scope, runtime, or penetration-test verdict. Missing evidence remains unknown.