Stop AI coding agents from leaking your API keys. Local proxy + MCP that swaps real secrets for phm_ tokens — works with Claude Code, Cursor, Windsurf, and Codex.
Latest release v0.7.9 · 7 Sept 2026
4 files for Cursor, GitHub Copilot, Codex, OpenCode and Claude Code: cursorrules, phantom-secrets copilot-instructions.md, phantom-secrets AGENTS.md, phantom-secrets CLAUDE.md — 6,798 tokens loaded in every session.
.github/copilot-instructions.md A 489 tok AGENTS.md B 4,406 tok CLAUDE.md A 1,424 tok .cursorrules A 479 tok These files are ashlrai/phantom-secrets's own configuration — they tell Cursor, GitHub Copilot, Codex, OpenCode and Claude Code how to work on this repository, so they are not mods to install elsewhere. Copy one as a starting point and replace the parts that are about this project.