Phantom is a self-custodial multi-chain crypto wallet for Solana, Ethereum, Polygon, Base, Bitcoin, Sui, Monad, and HyperEVM, distributed as a mobile app (iOS/Android) and browser extension with more than 20 million users. For developers, Phantom exposes injected Provider APIs per chain on window.phantom (Solana, EVM, Bitcoin, Sui) following the Wallet Standard and EIP-1193, a Universal Link / phantom:// Deeplinks API for mobile dApp integration with encrypted session handshakes, a multi-platform Connect SDK suite (React, React Native, Browser SDKs) with embedded wallet support and OAuth social login (Google, Apple), and a Phantom MCP Server that exposes 27 tools across wallet operations, swaps, portfolio rebalancing, and Hyperliquid perpetuals for AI agents — each agent receives its own wallet via device-code authentication. Apps register through the Phantom Portal to obtain an App ID, configure redirect URLs, verify domains, and opt into auto-confirm contracts.
Phantom is listed with 10 APIs on the APIs.io network. Tagged areas include Base, Bitcoin, Blockchain, Cryptocurrency, and Deep Links.
Phantom’s developer surface includes developer portal, documentation, signup flow, GitHub presence, code examples, tooling, changelog, and 51 more developer resources.
24.4/100emerging▬ flatAgent3/100human onlyFront door AI1/6
silent
Heartbeat69/100
alive
open core · MIT
Full breakdown ↓
scored 2026-11-13 · rubric v0.28.0 · Show this score on your site →
Regulatory Posture applies to this provider. Its tags matched the
Payments regime, so
Regulatory Posture carries 15 points of the composite.
If this regime is wrong for your business, say so on your
provider repo — the
applicability map is public and we will correct it.
Open Source Surface applies to this provider. This product is open source and we
read its repository directly, so Open Source Surface carries
10 points of the composite. It is scored from what the repository actually
publishes — a security policy, a contribution guide, a release history, a code of conduct — read live from the
provider rather than inferred from our own catalog pointers.
This facet adds; nothing was taken away to make room for it. An open-source project is not excused from
the commercial facets, because exemption would strip it of the points it does earn.
If we have the wrong repository, or this product is not open source, say so on your
provider repo and we
will drop the facet rather than have you publish against it.
Create-or-Update Ergonomics could not be measured. We hold no machine-readable contract for
this provider to read, so there is nothing to measure a write surface against. Excluded rather than scored zero:
never-measured and measured-empty are different facts. Publishing an OpenAPI is what makes this facet — and
several others — scorable at all.
The six quality facets above are damped to 75 points between them,
because both conditional facets apply and carry
25 points together. That is why each facet's contribution is shown against a damped
maximum: raising a quality facet moves the composite by 75% of its nominal
weight, not 100%. The full arithmetic is at apis.io/rating/.
Show this score on your site.
It updates itself when the score changes. Paste this where you link to your API docs:
<a href="https://apis.io/providers/phantom/"><img src="https://apis.io/badge/phantom/card.svg" alt="Phantom on APIs.io — Kin Score by API Evangelist"></a>
Other styles, a README pill and a shields.io endpoint are on the badge page.
Raise your score.
Agent readiness — checks not met, largest first (exact, from this profile):
Machine-Readable Auth+10 pts — a served openid-configuration/oauth-authorization-server carrying `issuer` (served), else the securitySchemes class in the provider OpenAPIs — bound (mutualTLS, DPoP, Signature) > negotiable (oauth2 authorizationCode/clientCredentials, openIdConnect) > bearer (http bearer, apiKey) Ask about this →
Idempotency+9 pts — OpenAPI mutating operations declare an idempotency key — a header, a request-body property, or a named de-duplication token whose own description says so (verified); else common[].type matches /idempoten/i (documented) Ask about this →
Stable Error Semantics+8 pts — OpenAPI $refs a shared error schema across 4xx/5xx responses (verified), else common[].type includes ErrorCatalog / ErrorCodes / DeclineCodes Ask about this →
Each check links to what satisfies it. Publish the artifact, or tell us where it already lives, and the score moves on the next scoring run.
Not sure how this applies to your stack? Ask about any one item. Kin Lane reads every question, looks at your profile and your situation, and replies with what a fix would take — scoped to that one area, priced up front, yours whether you ship it or not. Ask a question →
The Kin Score Market layer reads a provider inside its market:
its position, and how deep its integrations go. Depth is only comparable within a position. Provisional and unweighted:
not part of the Kin Score or agent readiness.
Registered MCP server and declares compatibility are report only — not weighted.
Undeclared means we found nothing we can read, so there is no number: we never infer integrations.
Standards this provider implements or carries. De facto ones are profiled and measured by the API Commons; formal ones come from the standards directory and are linked by the provider's own tags. The evidence column says how each claim was established — not that it was made.
EIP-1193 compliant Ethereum Provider API injected at window.ethereum and window.phantom.ethereum for Ethereum, Polygon, Base, Monad testnet, and HyperEVM. Supports the full Ethe...
Bitcoin provider injected at window.phantom.bitcoin exposing requestAccounts (returning BtcAccount objects with address, publicKey, addressType, and purpose), signMessage, and s...
Sui provider exposed via window.phantom for browser and mobile platforms, offering connect, signTransactionBlock, and signMessage methods so Sui dApps can integrate Phantom alon...
Universal Link (https://phantom.app/ul/v1/) and custom protocol (phantom://v1/) deeplinks for iOS and Android lets mobile dApps trigger Phantom for connect, disconnect, signMess...
React SDK (@phantom/react-sdk) for integrating Phantom across Solana and EVM chains with embedded wallet support and OAuth social login (Google, Apple) alongside the browser ext...
React Native SDK that lets iOS and Android apps embed Phantom wallet functionality, including embedded wallets, social login, and connection to the installed Phantom mobile app ...
Framework-agnostic Browser SDK for integrating Phantom into vanilla JavaScript or TypeScript web apps. Wraps the injected providers and embedded wallet flows so non-React applic...
Model Context Protocol server (@phantom/mcp-server) that exposes 27 tools to AI agents across wallet operations (connection status, addresses, balances, transfers, transaction s...
Calls without X-API-Key need no key. Calls with it need a paid plan — get a key.
Get an API key
Free tier, no form to fill in. Signing in shares your email address with us — we
store it to create your key and to recognise you if you sign in with another
provider. See our Privacy Policy and
Terms.