Skip to content
mcp/harbor
Cursor

Phantom Secrets for Cursor

io.github.ashlrai/phantom-secrets-mcp

Stop AI coding agents from leaking API keys. Local proxy swaps real secrets for phm_ tokens.

client:Cursor transport:stdio runtime:npm

Install Phantom Secrets in Cursor

~/.cursor/mcp.json · windows: %USERPROFILE%\.cursor\mcp.json 

{
  "mcpServers": {
    "phantom-secrets-mcp": {
      "type": "stdio",
      "command": "npx",
      "args": [
        "-y",
        "phantom-secrets-mcp"
      ]
    }
  }
}

Use .cursor/mcp.json in a project root instead to scope it to that project. Cursor merges both. Cursor docs

Phantom Secrets in other clients

Phantom Secrets MCP server