PhantomOperator MCP server
Commit Nov 12, 2026Performs privacy and public-exposure analysis for authorized users and agents, including metadata audits, breach checks, and wallet hygiene reviews.
Also known as normancomics/PhantomOperator
- Stars
- 1
- Tools
- —
- Downloads, 30 days
- —
- Latest version
- 1.1.0
- Last commit
- Nov 12, 2026
- License
- MIT
What is PhantomOperator MCP?
PhantomOperator performs privacy and public-exposure analysis for authorized users and agents, including metadata audits, breach checks, and wallet hygiene reviews.
Summary generated from the project's README
About PhantomOperator MCP server
PhantomOperator provides a remote privacy and public-exposure analysis service designed for authorized users and AI agents. It functions as a pay-per-call system that allows clients to audit digital footprints through specific security operations. Users interact with the service via an MCP endpoint using JSON-RPC 2.0 requests, which return payment guidance if a tool requires a fee.
The platform supports various specialized audits including metadata-audit for HTTP headers, breach-check for email intelligence, and wallet-opsec-audit for EVM hygiene. It also offers more comprehensive assessments like the full-privacy-sweep or the cypherpunk-redteam-dossier. Payments are handled through the Base mainnet using USDC via the x402 protocol, though a Monero invoice option can be configured for enhanced privacy.
Developers can integrate these tools into AI workflows by fetching the OpenAPI specification or the MCP discovery document. The service is built to handle structured requests for URLs, identities, and wallets, provided the requester has explicit authorization to assess the target data.
What you can do with it
- 1Audit web metadata leakageAn agent can check a URL for exposure signals in HTTP headers and HTML comments.
- 2Verify email breach statusA developer can check if a specific email address has appeared in known data breaches.
- 3Review cryptocurrency wallet hygieneUsers can analyze their Base or EVM wallet addresses for public security signals.
- 4Generate privacy mitigation reportsAn AI client can request a structured score and a list of prioritized steps to improve privacy.
Written from the project's README. Every use case is checked against a quote from it.
How to install PhantomOperator MCP
Formats verified 10 Nov 2026Add to CursorAdd to GooseInstall PhantomOperator MCP in Claude Code
$ claude mcp add --transport http phantomoperator https://freysaai.freysa.dev/mcpInstall PhantomOperator MCP in Cursor
~/.cursor/mcp.json
{
"mcpServers": {
"phantomoperator": {
"url": "https://freysaai.freysa.dev/mcp"
}
}
}Install PhantomOperator MCP in VS Code
.vscode/mcp.json
{
"servers": {
"phantomoperator": {
"type": "http",
"url": "https://freysaai.freysa.dev/mcp"
}
}
}Install PhantomOperator MCP in VS Code CLI
$ code --add-mcp '{"name":"phantomoperator","type":"http","url":"https://freysaai.freysa.dev/mcp"}'Install PhantomOperator MCP in Codex
$ codex mcp add phantomoperator --url https://freysaai.freysa.dev/mcpInstall PhantomOperator MCP in Codex config.toml
~/.codex/config.toml
[mcp_servers.phantomoperator] url = "https://freysaai.freysa.dev/mcp"
Install PhantomOperator MCP in Gemini CLI
$ gemini mcp add -s user --transport http phantomoperator https://freysaai.freysa.dev/mcpInstall PhantomOperator MCP in Gemini settings.json
~/.gemini/settings.json
{
"mcpServers": {
"phantomoperator": {
"url": "https://freysaai.freysa.dev/mcp",
"type": "http"
}
}
}Automated checks
Ran Nov 15, 2026Full report →Not verified yet. A server needs a score of 80, no serious finding, and enough data for us to check. How checks work · What to fix for more points
- Source repository linked and reachablenormancomics/phantomoperator is public and reachablegithub.com/normancomics/phantomoperator ↗Pass
- Package names this repository as its sourceNot checked
- Build provenance (Sigstore attestation)Not checked
- Open source license (OSI)MITspdx.org/licenses/MIT.html ↗Pass
- Commit or release in the last yearLast commit or release 2026-11-12github.com/normancomics/phantomoperator ↗Pass
- OpenSSF ScorecardNot checked
- Package name not close to a popular packageNot checked
- No critical advisory in the package or its dependenciesNot checked
- No hidden instructions to the model0 tool descriptions and the README read; no override phrases, credential paths or hidden charactersPass
- Destructive tools are labelledNot checked
- Remote endpoint answers the MCP handshakeinitialize answered with protocol 2025-06-18 in 1021 msPass
README
View on GitHubPhantomOperator
PhantomOperator is a pay-per-call privacy and public-exposure analysis service for authorized users and AI agents. It provides structured checks for web metadata leakage, public-web exposure, breach indicators, privacy posture, and wallet hygiene.
Authorization required: Only assess URLs, identities, email addresses, wallets, and systems you own or are expressly authorized to assess. Do not submit seed phrases, passwords, API keys, or other secrets.
Live service
Service: https://freysaai.freysa.dev
Source: github.com/normancomics/PhantomOperator
Updates: @phntmop on X
| Resource | URL |
|---|---|
| Human landing page | / |
| Agent quickstart | /quickstart |
| Free illustrative report | /sample-report |
| Free Monero address-decoding preview | POST /demo/monero-decode |
| OpenAPI 3.1 | /openapi.json |
| MCP endpoint | /mcp |
| x402 discovery | /.well-known/x402 |
| A2A agent card | /.well-known/agent-card.json |
| ERC-8004 registration | /.well-known/agent-registration.json |
| LLM guide | /llms.txt |
| Aggregate service telemetry | /usage |
| Service status | /status |
| Terms and scope | /terms |
Payments
Working paid rail: Base USDC via x402
Paid routes at POST /skills/* use x402 v2 exact payments.
| Field | Value |
|---|---|
| Network | Base mainnet, eip155:8453 |
| Asset | USDC on Base |
| USDC contract | 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 |
| Payment receiver | 0xC5f20C3Ad7B730B34620ecF39c2C5681482A6Cd6 |
| Production facilitator | Coinbase CDP x402 |
| ERC-8004 agent | 821239 |
| ERC-8004 identity registry | 0x8004A169FB4a3325136EB29fA0ceB6D2e539a432 |
An unpaid valid request receives HTTP 402 Payment Required. An x402-compatible client signs the stated payment requirement and retries the same request. Never send a plain ERC-20 transfer as a substitute for the x402 payment credential.
Optional privacy rail: Monero invoices
A production Monero flow is included but is disabled by default. It requires a privately reachable, view-only monero-wallet-rpc, a fixed XMR/USD quote configuration, and a local proof secret. Once configured, a client:
- requests
POST /billing/monero-quotewith{ "skillId": "metadata-audit", "input": { ... } }; - receives a unique wallet subaddress, exact atomic-XMR amount, expiry, and status URL;
- pays the amount, then polls
GET /billing/monero-invoice/:invoiceIduntil required confirmations are reached; - retries the requested skill with
X-Payment-Method: moneroand the returnedX-Paymentproof.
The service uses the view-only wallet RPC only to allocate subaddresses and verify incoming confirmed amounts. It never needs a Monero spend key. Configuration names are documented in .env.example.
Available operations
The canonical schemas, payment requirements, and examples are generated at /openapi.json. Prices are denominated in USDC and may be read from that document before payment.
| Operation | What it does | Base x402 price |
|---|---|---|
metadata-audit |
Reviews public HTTP headers, HTML metadata/comments, and third-party trackers for exposure signals. | $0.05 |
threat-scan |
Searches public-web results for potential PII exposure associated with an authorized identity. | $0.10 |
breach-check |
Checks an email against available breach intelligence and optionally performs a k-anonymity password-range check. | $0.10 |
opsec-score |
Produces a structured public-exposure score and prioritized mitigations. | $0.25 |
monero-opsec-audit |
Decodes a supplied Monero address and returns privacy-posture guidance. | $0.25 |
data-removal |
Identifies supported broker-removal paths and drafts a removal request; it does not submit requests without explicit authorization. | $0.50 |
spam-caller-removal |
Prepares official caller-ID unlisting and spam-label dispute steps; it does not submit requests. | $0.10 |
wallet-opsec-audit |
Reviews public Base/EVM wallet hygiene signals. | $0.50 |
full-privacy-sweep |
Combines relevant authorized checks into one report. | $1.00 |
cypherpunk-redteam-dossier |
Combines multiple authorized assessment modules. | $5.00 |
sovereign-opsec-retainer |
Produces an organization-level authorized assessment package. | $25.00 |
Agent quickstart
- Fetch
/openapi.json,/.well-known/x402, or/mcp. - Validate that the target and submitted information are authorized and non-sensitive.
- Call the selected
POST /skills/<operation>route with valid JSON. - On
402, inspect the returned x402 requirement and retry using an x402-compatible Base-USDC client. - Validate the returned JSON against the published operation schema.
For MCP clients, send JSON-RPC 2.0 initialize, tools/list, and tools/call requests to POST /mcp. The paid-tool handoff returns the exact HTTP route and payment guidance.
Local development
npm install
cp .env.example .env
npm test
npm start
The server defaults to port 3000. Set PUBLIC_BASE_URL to the deployed HTTPS origin and use a protected .env file. See .env.example for non-secret configuration names. Do not commit credentials, payment keys, private keys, or customer data.
Deployment and discovery
The public service publishes OpenAPI, x402, A2A, ERC-8004, MCP, llms.txt, robots, and sitemap discovery documents. Its current distribution work includes ERC-8004, MPPScan, Global A2A Registry, Agent Tools, 402 Index, Coinbase Bazaar, and a Bankr skills pull request. A directory is only described as listed after acceptance is verifiable; indexes may crawl asynchronously.
Privacy and telemetry
/usage displays aggregate settled-service telemetry. It intentionally excludes request bodies, raw IP addresses, customer wallets, and payment credentials. See TERMS.md for the service scope and limits.
License
MIT.
PhantomOperator MCP questions
How do I add PhantomOperator MCP to Claude Code?
Run claude mcp add --transport http phantomoperator https://freysaai.freysa.dev/mcp in your terminal. Add --scope user to make it available in every project.
How do I add PhantomOperator MCP to Cursor?
Open ~/.cursor/mcp.json and add the server under mcpServers, using the Cursor config shown in the install section above.
What kind of analysis does PhantomOperator provide?
It provides structured checks for web metadata leakage, public-web exposure, breach indicators, privacy posture, and wallet hygiene.
How are payments handled for the services?
Paid routes use x402 v2 exact payments via Base mainnet using USDC.
Can I use Monero for payments?
A Monero payment flow is available but is disabled by default and requires specific local configuration.
What should I avoid submitting to the service?
You should not submit seed phrases, passwords, API keys, or other secrets.