Is io.github.normancomics/phantomoperator safe to use?

io.github.normancomics/phantomoperator has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.

How do I install io.github.normancomics/phantomoperator?

io.github.normancomics/phantomoperator is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint (https://freysaai.freysa.dev/mcp) instead of running it locally.

What AI clients work with io.github.normancomics/phantomoperator?

io.github.normancomics/phantomoperator is compatible with claude-desktop, cursor, claude-code. It uses http transport.

Is io.github.normancomics/phantomoperator actively maintained?

io.github.normancomics/phantomoperator is actively maintained - last commit was 3 days ago. It has 1 GitHub stars.

io.github.normancomics/phantomoperator

Authorized privacy and exposure checks for people and agents; USDC on Base via x402.

1 GitHub

No known CVEs

No license

Actively maintained

Last commit 3d ago

Works with most clients

Transport: http

0 tools

Grade F

MCPpedia last refreshed this data 1d ago

Edit this pageView history

io.github.normancomics/phantomoperator is an MCP server that authorized privacy and exposure checks for people and agents; USDC on Base via x402. Its tool list has not been published yet over http, requires no API key, and scores 37/100 on MCPpedia's security, maintenance and efficiency rubric.

Entertainment

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp

Add as a custom connector

In Claude Desktop, open Customize → Connectors.
Click + Add, then Add custom connector.
Enter a name and this server URL: https://freysaai.freysa.dev/mcp
Connect and sign in when prompted.

Remote servers are added as connectors, not in claude_desktop_config.json, which is for local servers.

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-normancomics-phantomoperator)](https://mcppedia.org/s/io-github-normancomics-phantomoperator)

Read me

What io.github.normancomics/phantomoperator does

Authorized privacy and exposure checks for people and agents; USDC on Base via x402.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

37/100across 5 weighted dimensions

How we score →

0255075100

−63

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.normancomics/phantomoperator safe to use?: io.github.normancomics/phantomoperator has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.
How do I install io.github.normancomics/phantomoperator?: io.github.normancomics/phantomoperator is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint (https://freysaai.freysa.dev/mcp) instead of running it locally.
What AI clients work with io.github.normancomics/phantomoperator?: io.github.normancomics/phantomoperator is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is io.github.normancomics/phantomoperator actively maintained?: io.github.normancomics/phantomoperator is actively maintained - last commit was 3 days ago. It has 1 GitHub stars.

Similar servers

Others in entertainment

View all →

com.mux/mcp95

The official MCP Server for the Mux API

182 7

Claude Video Vision93

Give Claude the ability to watch and understand videos — Claude Code plugin with frame extraction and multimodal audio analysis

1.5k 4

io.github.RdyGaming/hated-wow-mcp90

MCP server for WoW addons: Lua API, UI source, CVars, art, linting, plus model export to glTF/OBJ.

27 7

Unity MCP90

Make games with AI: one MCP server that connects your agent to Unity, Unreal and Godot editors.

MCP Security Weekly

Get CVE alerts and security updates for io.github.normancomics/phantomoperator and similar servers.

Community

Discussion

Start a conversation

Ask a question, share a tip, or report an issue.

Has anyone used this with Cursor?How do you handle auth?Any alternatives?

Edit this pageView history

Entertainment

Step 1

Install in your client

Config is the same across clients - only the file and path differ.

Supported in Claude Desktophttp

Add as a custom connector

In Claude Desktop, open Customize → Connectors.
Click + Add, then Add custom connector.
Enter a name and this server URL: https://freysaai.freysa.dev/mcp
Connect and sign in when prompted.

Remote servers are added as connectors, not in claude_desktop_config.json, which is for local servers.

Are you the author?

Add this badge to your README to show your security score and help users find safe servers.

Embed in your READMEAbout badges →

[![MCPpedia Score](https://mcppedia.org/api/badge/io-github-normancomics-phantomoperator)](https://mcppedia.org/s/io-github-normancomics-phantomoperator)

Read me

What io.github.normancomics/phantomoperator does

Authorized privacy and exposure checks for people and agents; USDC on Base via x402.

Test This Server

This server supports HTTP transport. Be the first to test it - help the community know if it works.

README

PhantomOperator

PhantomOperator is a pay-per-call privacy and public-exposure analysis service for authorized users and AI agents. It provides structured checks for web metadata leakage, public-web exposure, breach indicators, privacy posture, and wallet hygiene.

Authorization required: Only assess URLs, identities, email addresses, wallets, and systems you own or are expressly authorized to assess. Do not submit seed phrases, passwords, API keys, or other secrets.

Live service

Service: https://freysaai.freysa.dev

Source: github.com/normancomics/PhantomOperator

Updates: @phntmop on X

Resource	URL
Human landing page	/
Agent quickstart	/quickstart
Free illustrative report	/sample-report
Free Monero address-decoding preview	`POST /demo/monero-decode`
OpenAPI 3.1	/openapi.json
MCP endpoint	/mcp
x402 discovery	/.well-known/x402
A2A agent card	/.well-known/agent-card.json
ERC-8004 registration	/.well-known/agent-registration.json
LLM guide	/llms.txt
Aggregate service telemetry	/usage
Service status	/status
Terms and scope	/terms

Payments

Working paid rail: Base USDC via x402

Paid routes at POST /skills/* use x402 v2 exact payments.

Field	Value
Network	Base mainnet, `eip155:8453`
Asset	USDC on Base
USDC contract	`0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913`
Payment receiver	`0xC5f20C3Ad7B730B34620ecF39c2C5681482A6Cd6`
Production facilitator	Coinbase CDP x402
ERC-8004 agent	`821239`
ERC-8004 identity registry	`0x8004A169FB4a3325136EB29fA0ceB6D2e539a432`

An unpaid valid request receives HTTP 402 Payment Required. An x402-compatible client signs the stated payment requirement and retries the same request. Never send a plain ERC-20 transfer as a substitute for the x402 payment credential.

Optional privacy rail: Monero invoices

A production Monero flow is included but is disabled by default. It requires a privately reachable, view-only monero-wallet-rpc, a fixed XMR/USD quote configuration, and a local proof secret. Once configured, a client:

requests POST /billing/monero-quote with { "skillId": "metadata-audit", "input": { ... } };
receives a unique wallet subaddress, exact atomic-XMR amount, expiry, and status URL;
pays the amount, then polls GET /billing/monero-invoice/:invoiceId until required confirmations

... View full README on GitHub

Loading README…

Scored, not listed

Why this score

Five weighted categories - click any category to see the underlying evidence.

Score breakdown

37/100across 5 weighted dimensions

How we score →

0255075100

−63

Security

Maintenance

Efficiency

Documentation

Compatibility

Categoriesclick a row to see evidence

Security

OSV.dev

No known CVEs.

No package registry to scan.

Community

Reviews

Be the first to review

Have you used this server?

Share your experience - it helps other developers decide.

How easy was setup?Did it work reliably?How was the documentation?

Frequently Asked Questions

Is io.github.normancomics/phantomoperator safe to use?: io.github.normancomics/phantomoperator has no known CVEs as of the latest MCPpedia security scan. Authentication requirements were not detected automatically - check the project's documentation before connecting in a shared environment.
How do I install io.github.normancomics/phantomoperator?: io.github.normancomics/phantomoperator is a hosted remote MCP server - there is no local package to install. Configure your MCP client to connect to its endpoint (https://freysaai.freysa.dev/mcp) instead of running it locally.
What AI clients work with io.github.normancomics/phantomoperator?: io.github.normancomics/phantomoperator is compatible with claude-desktop, cursor, claude-code. It uses http transport.
Is io.github.normancomics/phantomoperator actively maintained?: io.github.normancomics/phantomoperator is actively maintained - last commit was 3 days ago. It has 1 GitHub stars.