Phantom Secrets
io.github.ashlrai · io-github-ashlrai/phantom-secrets-mcp
Stop AI coding agents from leaking API keys. Local proxy swaps real secrets for phm_ tokens.
Free · Open index · Trust earned, never sold
MCP servers and agent plugins for Gmail, GitHub, Notion, Figma, and thousands more — paired with the skills, CLIs, and packages that make them actually useful. Free listings, reviewed in the open.
18,070 plugins from 3 sources
io.github.ashlrai · io-github-ashlrai/phantom-secrets-mcp
Stop AI coding agents from leaking API keys. Local proxy swaps real secrets for phm_ tokens.
io.github.ashlrai · io-github-ashlrai/webfetch
License-first federated image search with attribution, dimensions, and download tooling.
Everything listed here is also yours to embed: ship the full index inside your app as a versioned npm package, or query the hosted API with a typed client.
v0.20260709.1 on npm
The whole catalogue, offline
Every listing in this catalogue as one versioned data package — MCP configs, plugin references, curated entries with their skills, brand logos, and removal provenance — already deduplicated and denylist-filtered. Build a plugin directory into your app with no service to run. Republished weekly.
npm i -D @hotstack/catalogue-snapshot
v0.1.0 on npm
Typed client for the live API
A dependency-free fetch client for the catalogue API — search, entry detail, the registry feed, and per-source status, with honest degraded/stale semantics. For apps that want live search over the full index instead of a baked-in snapshot.
npm i @hotstack/catalogue-client