World Monitor
Real-time global intelligence on conflict, markets, energy, trade, shipping and cyber. 97 tools.
Runs in the cloud✓ service owner · worldmonitor.app
Phantomoperator
What it does
Authorized privacy and exposure checks for people and agents; USDC on Base via x402.
- Connects Runs in the cloud
- Account or key No key needed
- Category Other
Install
Pick the AI app you use, then copy the settings.
Passed 4/5 checks · What you ask goes through the maker’s server (freysaai.freysa.dev) · ✓ Commands checked Nov 13, 2026
First: which AI do you use?
Pick your app and the steps appear below.
Works with Claude · about 2 min
No key, nothing to install · Set it up once on claude.ai or the desktop app, then use it in chat · free accounts can add 1 · on Team/Enterprise an Owner adds it
Open Claude’s Connectors page
CustomizeConnectors
Click “Add” → “Custom” → “Web” and fill in these 2 fields
Copy each value into the field with the same name in Claude, then click Continue
Name · NamePhantomoperatorRemote MCP server URL · Addresshttps://freysaai.freysa.dev/mcpClick Continue past the sign-in settings Claude detected · under Authentication choose what the maker says (Sign in now, Sign in when needed or No sign in), then click Add
Turn it on in a chat
+ConnectorsPhantomoperator
Try it
Use Phantomoperator and tell me what you can do for me, then show me one thing✓ If Claude says it is using Phantomoperator or shows a Phantomoperator tool in the answer, you are connected
Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version
Works with ChatGPT, depending on your plan
Full MCP: ChatGPT Business, Enterprise or Edu on the web · Pro: connects with read/fetch permissions, so tools that change data may not work · Plus: not confirmed in OpenAI’s docs; if you see an add-custom-MCP option on the Plugins page you can try these steps · web only
Open ChatGPT’s add-MCP page on the web
Plugins+Add custom MCP server
Fill in the name and address
Enter a name, paste the address under Connection, tick the risk warning and click Create as a plugin
Name · NamePhantomoperatorConnection · Addresshttps://freysaai.freysa.dev/mcpPick Phantomoperator in a chat
Start a new chat and pick Phantomoperator from your plugins before typing
Try it
Use Phantomoperator and tell me what you can do for me, then show me one thing✓ If ChatGPT says it is using Phantomoperator or shows a Phantomoperator tool in the answer, you are connected
Menu names checked against OpenAI’s help page on Nov 11, 2026 · your screen may differ slightly by app version
Works with Claude Code · about 2 min
No key, nothing to install
Open Terminal
Mac: press Command+Space and type Terminal · Windows: open PowerShell
Paste this command and press Enter
claude mcp add --transport http --scope user phantomoperator https://freysaai.freysa.dev/mcpType /mcp in Claude Code
You should see Phantomoperator listed as connected
Try it
Use Phantomoperator and tell me what you can do for me, then show me one thing✓ If Claude Code says it is using Phantomoperator or shows a Phantomoperator tool in the answer, you are connected
Menu names checked against Anthropic’s help page on Nov 11, 2026 · your screen may differ slightly by app version
Works with Cursor · about 2 min
No key, nothing to install
Open the AI chat in Cursor in Agent mode
Try it
Use Phantomoperator and tell me what you can do for me, then show me one thing✓ If Cursor says it is using Phantomoperator or shows a Phantomoperator tool in the answer, you are connected
Menu names checked against Cursor’s help page on Nov 11, 2026 · your screen may differ slightly by app version
Works with VS Code · about 2 min
No key, nothing to install
Open the AI chat in VS Code in Agent mode
Try it
Use Phantomoperator and tell me what you can do for me, then show me one thing✓ If VS Code says it is using Phantomoperator or shows a Phantomoperator tool in the answer, you are connected
Menu names checked against VS Code’s help page on Nov 11, 2026 · your screen may differ slightly by app version
Other apps that use MCP, such as Windsurf, Zed or Gemini CLI, each add servers differently. See how in the app list.
Address for apps that connect over the web
Address
https://freysaai.freysa.dev/mcpJSON settings are under “For developers” below
For developers: Terminal commands and JSON settings
Over the web
Claude Code
claude mcp add --transport http --scope user phantomoperator https://freysaai.freysa.dev/mcpCursor (~/.cursor/mcp.json)
{
"mcpServers": {
"phantomoperator": {
"url": "https://freysaai.freysa.dev/mcp"
}
}
}VS Code (mcp.json)
{
"servers": {
"phantomoperator": {
"type": "http",
"url": "https://freysaai.freysa.dev/mcp"
}
}
}These settings are generated from the maker’s registry entry. If the README says otherwise, follow the README.
At a glance
Which apps can use it
Based on how this server connects and on each app’s own docs, checked Nov 10, 2026.
Connect over the internet in
ClaudeChatGPTGooseLM StudioMsty StudioCherry StudioCursorVS Code + GitHub CopilotVisual StudioWindsurf (Devin Desktop)ZedKiroClineContinueJetBrains AI AssistantClaude CodeCodex CLIGemini CLIOpenCodenodecodeWarpLibreChatOpen WebUIRaycast
Related guides
What it can do
Tool names and descriptions exactly as the server reported them on Nov 12, 2026. The maker wrote them, not us; we show them as plain text.
metadata-auditFetch any HTTP/HTTPS URL and extract metadata leaks (HTTP headers, meta tags, HTML comments, third-party trackers). Costs $0.05 USDC on Base via x402.
threat-scanSearch the public web for mentions of a person's name containing exposed PII (phone numbers, emails, SSNs, home addresses). Costs $0.10 USDC on Base via x402.
breach-checkKeyless email breach intelligence check (XposedOrNot + HIBP) and optional k-anonymity SHA-1 password check. Costs $0.10 USDC on Base via x402.
opsec-scoreMulti-vector OPSEC exposure score (0–100, grade A–F) across public web search, data brokers, paste sites, and social profiles. Costs $0.25 USDC on Base via x402.
monero-opsec-auditCryptonote Base58 + Keccak-256 Monero ($XMR) address/subaddress decoder (Spend Key, View Key, checksum), live Monero RingCT telemetry, EVM <-> $XMR swap correlation check, and MMR proof. Costs $0.25 USDC on Base via x402.
data-removalMatches an authorized data-broker listing with supported removal paths and drafts a reviewable CCPA/GDPR-style request. Does not submit a removal without explicit authorization. Costs $0.50 USDC on Base via x402.
wallet-opsec-auditOn-chain Base/EVM wallet deanonymization & hygiene audit + deterministic $XMR settlement subaddress. Costs $0.50 USDC on Base via x402.
full-privacy-sweepCombines authorized public-exposure, privacy scoring, and removal guidance into one structured report. Costs $1.00 USDC on Base via x402.
cypherpunk-redteam-dossierComprehensive 6-operator Cypherpunk Red-Team Dossier (Web Metadata + OSINT Threat Scan + Breach Check + OPSEC Score + EVM Wallet Hygiene + $XMR Monero Audit + MMR Attestation). Costs $5.00 USDC on Base via x402.
sovereign-opsec-retainerEnterprise & DAO Zero-Trace OPSEC Retainer Package with $XMR Atomic-Swap Treasury Isolation Blueprint and Statutory Takedown Binder. Costs $25.00 USDC on Base via x402.
spam-caller-removalPrepare official caller-ID unlisting and spam-label dispute steps for an authorized phone number. Does not submit requests. Costs $0.10 USDC on Base via x402.
Basic checksi
We check information anyone can see; we have not read the code. Checks that do not apply are left out of the count. · Checked Nov 14, 2026
- ✓ Pass
Maker matches the repo
The registry name was verified with the GitHub account normancomics, which owns the repo
- ✓ Pass
Still maintained
Code last changed yesterday
- ✕ Fail
Has a licence
No licence file found in the repo
- ✓ Pass
- – Not applicable
Sign-in with OAuth
No sign-in needed
- ✓ Pass
No hidden instructions in tool descriptions
Read 11 tool descriptions and found no hidden instructions to the AI
Discussion
Ask, share a tip or report that it does not work. Sorted by what people marked helpful.
No posts yet. Be the first to ask or share.
Posts here are written by users, not the PopNx team.
User reviews
No reviews yet
Compared with others in Otheri
- More stars than 86% of the other 19709 servers in this category
- Published to the registry more recently than 72% of the other 19709 servers in this category
- Basic checks equal to or better than 59% of the other 19709 servers in this category
Compared with every active server in this category in the registry. Stars count only when the publisher owns the repo.
Common questions
Is Phantomoperator safe?
It passed 4 of 5 applicable basic checks. We have not read the code. Before adding a key or token, see what access the server asks for and use a key with only the permissions you need.
What keys or codes does it need?
The registry does not list a required key, though some servers ask you to sign in on first use.
Does it run on my computer or in the cloud?
It runs in the maker’s cloud. Connect over the internet with nothing to install, but what you send passes through the maker’s servers.
Is it still maintained?
The GitHub repo last changed yesterday, and the latest version (1.1.0) reached the registry 15 days ago.
Which apps can use it?
Apps that support MCP, such as Claude Desktop, Claude Code, Cursor and VS Code. It connects by URL, so apps that accept remote MCP servers work too, such as ChatGPT on the web (full MCP on Business and above; Pro read-only).
What can I use instead?
In the same category: World Monitor, Claude Flow, Windmill
Others in the same category
Servers in the same category from other makers, sorted by stars.
Reading a card:↓ Downloads per weeki★ GitHub starsiThree pillars: reviews · checks · usageiUpdated = latest version published to the registryi
Claude Flow
AI orchestration with hive-mind swarms, neural networks, and 87 MCP tools for enterprise dev.
Runs on your computer
README from the maker
Open the README
Copied from the maker’s repo as written. PopNx MCP has not reviewed or endorsed it. HTML, images and scripts are removed. Links lead off this site.
PhantomOperator
PhantomOperator is a pay-per-call privacy and public-exposure analysis service for authorized users and AI agents. It provides structured checks for web metadata leakage, public-web exposure, breach indicators, privacy posture, and wallet hygiene.
Authorization required: Only assess URLs, identities, email addresses, wallets, and systems you own or are expressly authorized to assess. Do not submit seed phrases, passwords, API keys, or other secrets.
Live service
Service: https://freysaai.freysa.dev
Source: github.com/normancomics/PhantomOperator
Updates: @phntmop on X
| Resource | URL |
|---|---|
| Human landing page | / |
| Agent quickstart | /quickstart |
| Free illustrative report | /sample-report |
| Free Monero address-decoding preview | POST /demo/monero-decode |
| OpenAPI 3.1 | /openapi.json |
| MCP endpoint | /mcp |
| x402 discovery | /.well-known/x402 |
| A2A agent card | /.well-known/agent-card.json |
| ERC-8004 registration | /.well-known/agent-registration.json |
| LLM guide | /llms.txt |
| Aggregate service telemetry | /usage |
| Service status | /status |
| Terms and scope | /terms |
Payments
Working paid rail: Base USDC via x402
Paid routes at POST /skills/* use x402 v2 exact payments.
| Field | Value |
|---|---|
| Network | Base mainnet, eip155:8453 |
| Asset | USDC on Base |
| USDC contract | 0x833589fCD6eDb6E08f4c7C32D4f71b54bdA02913 |
| Payment receiver | 0xC5f20C3Ad7B730B34620ecF39c2C5681482A6Cd6 |
| Production facilitator | Coinbase CDP x402 |
| ERC-8004 agent | 821239 |
| ERC-8004 identity registry | 0x8004A169FB4a3325136EB29fA0ceB6D2e539a432 |
An unpaid valid request receives HTTP 402 Payment Required. An x402-compatible client signs the stated payment requirement and retries the same request. Never send a plain ERC-20 transfer as a substitute for the x402 payment credential.
Optional privacy rail: Monero invoices
A production Monero flow is included but is disabled by default. It requires a privately reachable, view-only monero-wallet-rpc, a fixed XMR/USD quote configuration, and a local proof secret. Once configured, a client:
- requests
POST /billing/monero-quotewith{ "skillId": "metadata-audit", "input": { ... } }; - receives a unique wallet subaddress, exact atomic-XMR amount, expiry, and status URL;
- pays the amount, then polls
GET /billing/monero-invoice/:invoiceIduntil required confirmations are reached; - retries the requested skill with
X-Payment-Method: moneroand the returnedX-Paymentproof.
The service uses the view-only wallet RPC only to allocate subaddresses and verify incoming confirmed amounts. It never needs a Monero spend key. Configuration names are documented in .env.example.
Available operations
The canonical schemas, payment requirements, and examples are generated at /openapi.json. Prices are denominated in USDC and may be read from that document before payment.
| Operation | What it does | Base x402 price |
|---|---|---|
metadata-audit | Reviews public HTTP headers, HTML metadata/comments, and third-party trackers for exposure signals. | $0.05 |
threat-scan | Searches public-web results for potential PII exposure associated with an authorized identity. | $0.10 |
breach-check | Checks an email against available breach intelligence and optionally performs a k-anonymity password-range check. | $0.10 |
opsec-score | Produces a structured public-exposure score and prioritized mitigations. | $0.25 |
monero-opsec-audit | Decodes a supplied Monero address and returns privacy-posture guidance. | $0.25 |
data-removal | Identifies supported broker-removal paths and drafts a removal request; it does not submit requests without explicit authorization. | $0.50 |
spam-caller-removal | Prepares official caller-ID unlisting and spam-label dispute steps; it does not submit requests. | $0.10 |
wallet-opsec-audit | Reviews public Base/EVM wallet hygiene signals. | $0.50 |
full-privacy-sweep | Combines relevant authorized checks into one report. | $1.00 |
cypherpunk-redteam-dossier | Combines multiple authorized assessment modules. | $5.00 |
sovereign-opsec-retainer | Produces an organization-level authorized assessment package. | $25.00 |
Agent quickstart
- Fetch
/openapi.json,/.well-known/x402, or/mcp. - Validate that the target and submitted information are authorized and non-sensitive.
- Call the selected
POST /skills/route with valid JSON. - On
402, inspect the returned x402 requirement and retry using an x402-compatible Base-USDC client. - Validate the returned JSON against the published operation schema.
For MCP clients, send JSON-RPC 2.0 initialize, tools/list, and tools/call requests to POST /mcp. The paid-tool handoff returns the exact HTTP route and payment guidance.
Local development
npm installcp .env.example .env npm test npm start
The server defaults to port 3000. Set PUBLIC_BASE_URL to the deployed HTTPS origin and use a protected .env file. See .env.example for non-secret configuration names. Do not commit credentials, payment keys, private keys, or customer data.
Deployment and discovery
The public service publishes OpenAPI, x402, A2A, ERC-8004, MCP, llms.txt, robots, and sitemap discovery documents. Its current distribution work includes ERC-8004, MPPScan, Global A2A Registry, Agent Tools, 402 Index, Coinbase Bazaar, and a Bankr skills pull request. A directory is only described as listed after acceptance is verifiable; indexes may crawl asynchronously.
Privacy and telemetry
/usage displays aggregate settled-service telemetry. It intentionally excludes request bodies, raw IP addresses, customer wallets, and payment credentials. See TERMS.md for the service scope and limits.
License
MIT.