PhantomOperator MCP server
Commit 12 Nov 2026Melakukan analisis privasi dan eksposur publik untuk pengguna serta agent yang terotorisasi, termasuk audit metadata, pengecekan kebocoran data (breach), dan tinjauan hygiene wallet.
Juga dikenal sebagai normancomics/PhantomOperator
- Stars
- 1
- Tools
- —
- Unduhan, 30 hari
- —
- Versi terbaru
- 1.1.0
- Commit terakhir
- 12 Nov 2026
- Lisensi
- MIT
Apa itu PhantomOperator MCP?
PhantomOperator adalah MCP server. Melakukan analisis privasi dan eksposur publik untuk pengguna serta agent yang terotorisasi, termasuk audit metadata, pengecekan kebocoran data (breach), dan tinjauan hygiene wallet.
Ringkasan dibuat dari README proyek
Tentang PhantomOperator MCP server
PhantomOperator menyediakan layanan analisis privasi dan eksposur publik jarak jauh yang dirancang untuk pengguna dan AI agent yang terotorisasi. Layanan ini berfungsi sebagai sistem pay-per-call yang memungkinkan klien untuk mengaudit jejak digital melalui operasi keamanan tertentu. Pengguna berinteraksi dengan layanan melalui endpoint MCP menggunakan request JSON-RPC 2.0, yang akan mengembalikan panduan pembayaran jika sebuah tool memerlukan biaya.
Platform ini mendukung berbagai audit khusus termasuk metadata-audit untuk HTTP headers, breach-check untuk intelijen email, dan wallet-opsec-audit untuk hygiene EVM. Tersedia juga penilaian yang lebih komprehensif seperti full-privacy-sweep atau cypherpunk-redteam-dossier. Pembayaran ditangani melalui Base mainnet menggunakan USDC via protokol x402, meskipun opsi invoice Monero dapat dikonfigurasi untuk privasi yang lebih tinggi.
Developer dapat mengintegrasikan tool ini ke dalam workflow AI dengan mengambil spesifikasi OpenAPI atau dokumen discovery MCP. Layanan ini dibangun untuk menangani request terstruktur untuk URL, identitas, dan wallet, selama peminta memiliki otorisasi eksplisit untuk menilai data target tersebut.
Apa yang bisa Anda lakukan dengannya
- 1Audit kebocoran metadata webSeorang agent dapat memeriksa URL untuk mencari sinyal eksposur pada HTTP headers dan komentar HTML.
- 2Verifikasi status breach emailSeorang developer dapat memeriksa apakah alamat email tertentu telah muncul dalam kebocoran data yang diketahui.
- 3Tinjau hygiene wallet cryptocurrencyPengguna dapat menganalisis alamat wallet Base atau EVM mereka untuk sinyal keamanan publik.
- 4Generate laporan mitigasi privasiKlien AI dapat meminta skor terstruktur dan daftar langkah prioritas untuk meningkatkan privasi.
Ditulis berdasarkan README proyek. Setiap use case diperiksa terhadap kutipan dari README tersebut.
Cara menginstal PhantomOperator MCP
Format diverifikasi 10 Nov 2026Tambahkan ke CursorTambahkan ke GooseInstal PhantomOperator MCP di Claude Code
$ claude mcp add --transport http phantomoperator https://freysaai.freysa.dev/mcpInstal PhantomOperator MCP di Cursor
~/.cursor/mcp.json
{
"mcpServers": {
"phantomoperator": {
"url": "https://freysaai.freysa.dev/mcp"
}
}
}Instal PhantomOperator MCP di VS Code
.vscode/mcp.json
{
"servers": {
"phantomoperator": {
"type": "http",
"url": "https://freysaai.freysa.dev/mcp"
}
}
}Instal PhantomOperator MCP di VS Code CLI
$ code --add-mcp '{"name":"phantomoperator","type":"http","url":"https://freysaai.freysa.dev/mcp"}'Instal PhantomOperator MCP di Codex
$ codex mcp add phantomoperator --url https://freysaai.freysa.dev/mcpInstal PhantomOperator MCP di Codex config.toml
~/.codex/config.toml
[mcp_servers.phantomoperator] url = "https://freysaai.freysa.dev/mcp"
Instal PhantomOperator MCP di Gemini CLI
$ gemini mcp add -s user --transport http phantomoperator https://freysaai.freysa.dev/mcpInstal PhantomOperator MCP di Gemini settings.json
~/.gemini/settings.json
{
"mcpServers": {
"phantomoperator": {
"url": "https://freysaai.freysa.dev/mcp",
"type": "http"
}
}
}Pengecekan otomatis
Berjalan 15 Nov 2026Laporan lengkap →Belum diverifikasi. Sebuah server memerlukan skor 80, tidak ada temuan serius, dan data yang cukup untuk kami periksa. Cara kerja checks · Yang perlu diperbaiki untuk menambah poin
- Source repository terhubung dan dapat dijangkaunormancomics/phantomoperator is public and reachablegithub.com/normancomics/phantomoperator ↗Lolos
- Nama paket mencantumkan repositori ini sebagai sumbernyaTidak diperiksa
- Provenance build (atestasi Sigstore)Tidak diperiksa
- Lisensi open source (OSI)MITspdx.org/licenses/MIT.html ↗Lolos
- Ada commit atau release dalam satu tahun terakhirLast commit or release 2026-11-12github.com/normancomics/phantomoperator ↗Lolos
- OpenSSF ScorecardTidak diperiksa
- Nama package tidak mirip dengan package populerTidak diperiksa
- Tidak ada advisory kritis pada paket atau dependensinyaTidak diperiksa
- Tidak ada instruksi tersembunyi untuk model0 tool descriptions and the README read; no override phrases, credential paths or hidden charactersLolos
- Tools yang bersifat destruktif telah diberi labelTidak diperiksa
- Endpoint remote merespons handshake MCPinitialize answered with protocol 2025-06-18 in 1021 msLolos
README
Lihat di GitHubPhantomOperator
PhantomOperator is a pay-per-call privacy and public-exposure analysis service for authorized users and AI agents. It provides structured checks for web metadata leakage, public-web exposure, breach indicators, privacy posture, and wallet hygiene.
Authorization required: Only assess URLs, identities, email addresses, wallets, and systems you own or are expressly authorized to assess. Do not submit seed phrases, passwords, API keys, or other secrets.
Live service
Service: https://freysaai.freysa.dev
Source: github.com/normancomics/PhantomOperator
Updates: @phntmop on X
| Resource | URL |
|---|---|
| Human landing page | / |
| Agent quickstart | /quickstart |
| Free illustrative report | /sample-report |
| Free Monero address-decoding preview | POST /demo/monero-decode |
| OpenAPI 3.1 | /openapi.json |
| MCP endpoint | /mcp |
| x402 discovery | /.well-known/x402 |
| A2A agent card | /.well-known/agent-card.json |
| ERC-8004 registration | /.well-known/agent-registration.json |
| LLM guide | /llms.txt |
| Aggregate service telemetry | /usage |
| Service status | /status |
| Terms and scope | /terms |
Payments
Working paid rail: Base USDC via x402
Paid routes at POST /skills/* use x402 v2 exact payments.
| Field | Value |
|---|---|
| Network | Base mainnet, eip155:8453 |
| Asset | USDC on Base |
| USDC contract | 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 |
| Payment receiver | 0xC5f20C3Ad7B730B34620ecF39c2C5681482A6Cd6 |
| Production facilitator | Coinbase CDP x402 |
| ERC-8004 agent | 821239 |
| ERC-8004 identity registry | 0x8004A169FB4a3325136EB29fA0ceB6D2e539a432 |
An unpaid valid request receives HTTP 402 Payment Required. An x402-compatible client signs the stated payment requirement and retries the same request. Never send a plain ERC-20 transfer as a substitute for the x402 payment credential.
Optional privacy rail: Monero invoices
A production Monero flow is included but is disabled by default. It requires a privately reachable, view-only monero-wallet-rpc, a fixed XMR/USD quote configuration, and a local proof secret. Once configured, a client:
- requests
POST /billing/monero-quotewith{ "skillId": "metadata-audit", "input": { ... } }; - receives a unique wallet subaddress, exact atomic-XMR amount, expiry, and status URL;
- pays the amount, then polls
GET /billing/monero-invoice/:invoiceIduntil required confirmations are reached; - retries the requested skill with
X-Payment-Method: moneroand the returnedX-Paymentproof.
The service uses the view-only wallet RPC only to allocate subaddresses and verify incoming confirmed amounts. It never needs a Monero spend key. Configuration names are documented in .env.example.
Available operations
The canonical schemas, payment requirements, and examples are generated at /openapi.json. Prices are denominated in USDC and may be read from that document before payment.
| Operation | What it does | Base x402 price |
|---|---|---|
metadata-audit |
Reviews public HTTP headers, HTML metadata/comments, and third-party trackers for exposure signals. | $0.05 |
threat-scan |
Searches public-web results for potential PII exposure associated with an authorized identity. | $0.10 |
breach-check |
Checks an email against available breach intelligence and optionally performs a k-anonymity password-range check. | $0.10 |
opsec-score |
Produces a structured public-exposure score and prioritized mitigations. | $0.25 |
monero-opsec-audit |
Decodes a supplied Monero address and returns privacy-posture guidance. | $0.25 |
data-removal |
Identifies supported broker-removal paths and drafts a removal request; it does not submit requests without explicit authorization. | $0.50 |
spam-caller-removal |
Prepares official caller-ID unlisting and spam-label dispute steps; it does not submit requests. | $0.10 |
wallet-opsec-audit |
Reviews public Base/EVM wallet hygiene signals. | $0.50 |
full-privacy-sweep |
Combines relevant authorized checks into one report. | $1.00 |
cypherpunk-redteam-dossier |
Combines multiple authorized assessment modules. | $5.00 |
sovereign-opsec-retainer |
Produces an organization-level authorized assessment package. | $25.00 |
Agent quickstart
- Fetch
/openapi.json,/.well-known/x402, or/mcp. - Validate that the target and submitted information are authorized and non-sensitive.
- Call the selected
POST /skills/<operation>route with valid JSON. - On
402, inspect the returned x402 requirement and retry using an x402-compatible Base-USDC client. - Validate the returned JSON against the published operation schema.
For MCP clients, send JSON-RPC 2.0 initialize, tools/list, and tools/call requests to POST /mcp. The paid-tool handoff returns the exact HTTP route and payment guidance.
Local development
npm install
cp .env.example .env
npm test
npm start
The server defaults to port 3000. Set PUBLIC_BASE_URL to the deployed HTTPS origin and use a protected .env file. See .env.example for non-secret configuration names. Do not commit credentials, payment keys, private keys, or customer data.
Deployment and discovery
The public service publishes OpenAPI, x402, A2A, ERC-8004, MCP, llms.txt, robots, and sitemap discovery documents. Its current distribution work includes ERC-8004, MPPScan, Global A2A Registry, Agent Tools, 402 Index, Coinbase Bazaar, and a Bankr skills pull request. A directory is only described as listed after acceptance is verifiable; indexes may crawl asynchronously.
Privacy and telemetry
/usage displays aggregate settled-service telemetry. It intentionally excludes request bodies, raw IP addresses, customer wallets, and payment credentials. See TERMS.md for the service scope and limits.
License
MIT.
Pertanyaan tentang PhantomOperator MCP
Bagaimana cara menambahkan PhantomOperator MCP ke Claude Code?
Jalankan claude mcp add --transport http phantomoperator https://freysaai.freysa.dev/mcp di terminal Anda. Tambahkan --scope user agar tersedia di semua proyek.
Bagaimana cara menambahkan PhantomOperator MCP ke Cursor?
Buka ~/.cursor/mcp.json dan tambahkan server di bawah mcpServers, menggunakan config Cursor yang ditunjukkan di bagian instalasi di atas.
Jenis analisis apa yang disediakan oleh PhantomOperator?
PhantomOperator menyediakan pengecekan terstruktur untuk kebocoran metadata web, eksposur web publik, indikator breach, postur privasi, dan hygiene wallet.
Bagaimana sistem pembayaran untuk layanan ini?
Rute berbayar menggunakan x402 v2 exact payments melalui Base mainnet menggunakan USDC.
Apakah saya bisa menggunakan Monero untuk pembayaran?
Alur pembayaran Monero tersedia, namun dinonaktifkan secara default dan memerlukan konfigurasi lokal khusus.
Apa yang sebaiknya tidak saya kirimkan ke layanan ini?
Anda tidak boleh mengirimkan seed phrase, password, API keys, atau rahasia (secrets) lainnya.