Phantom
API key security for AI coding agents
Visit phm.dev ↗What is Phantom?
Phantom is an open-source, local-first tool that protects API credentials when using AI coding agents like Claude Code, Cursor, and Windsurf. Instead of exposing real keys to agents, it replaces them with value-blind placeholders and manages access through a local proxy that only grants credentials to explicitly supported HTTP routes.
The tool maintains a registry of 17 trusted providers including OpenAI, Anthropic, Stripe, and Supabase. It runs natively on macOS, Windows, and Linux, and integrates with agents via MCP tools for inventory and governed requests. The maker built it in Rust and published it under the MIT license.
Momentum
Daily activity over the last 30 days: upvotes, unique visits, new GitHub stars and Hacker News points.
How do we know it's vibe coded?
vibetrend discovered Phantom automatically. Evidence: GitHub ashlrai/phantom-secrets; repo has .cursorrules, AGENTS.md, CLAUDE.md. View source.
Similar vibe-coded apps
Open-source AI job search agent that runs locally in your CLI
Shared persistent memory for AI coding tools across sessions and applications
TypeScript framework for building AI agents without library dependencies
In-browser behavior tree execution engine for AI agents at ~60Hz
Local context layer that reduces AI coding agent token usage by 50-90%
Workspace runtime for AI coding agents that caps context and serves it over MCP