Apipay MCP server
online · 96% uptimeio.github.iamalanlui/apipay·v0.4.2Prepaid balance for AI agents: one key, 4,900+ tools your agent can run today, caps, receipts.
0 stars49 downloads/wk
Reviews
Write oneNobody has reviewed Apipay yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Apipay tools (8, 1 write)
write = sends, deletes, buys or postscall_apiFreeCall an API from the apifare catalog by slug (find slugs with search_apis). The cost in prepaid credits is deducted automatically and returned with the result.
check_balanceFreeCheck the remaining apifare prepaid credit balance (1 credit = $0.01) and get the top-up link.
get_vault_linkFreeGet a secure one-time link where the user can save their OWN API key for a provider (BYOK). Never ask the user to paste an API key into the chat — always use this link instead. BYOK calls cost a flat 0.1 credits; the user's own provider account pays the provider.
search_apisFreeSearch the apifare catalog of ready-to-call APIs (web search, scraping, weather, and more). Returns each API's slug, params, and per-call price in prepaid credits. Every miss is logged so missing APIs get added.
secret_generateFreeGenerate a random secret and place it directly at a vendor resource SERVER-SIDE — the value never enters this conversation.
secret_transferwrite actionFreeMove a secret from one vendor to another SERVER-SIDE — the value never enters this conversation. Example: fetch a Supabase service_role key and place it as a Vercel env var.
topupFreeTop up the apifare balance from the owner's standing auto-refill mandate (if the owner enabled one). Charges within the owner's configured limits and returns the new balance. Without a mandate, returns payment instructions to relay to the user.
vendor_callFreeCall a vendor MANAGEMENT API (supabase, vercel, fly, resend, github, npm, cloudflare, lemonsqueezy) with the owner's vaulted root credential injected server-side. Native request/response; destructive, billing, and member/admin routes are blocked. The root token is never visible.
Public scan report
scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned25/25
- Live reliabilityremote reachable in 934ms20/20
- Tool poisoning8 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
- Maintenancerepository not readable: repo not found3/15
- Maintainer identityno repository or website to verify2/10
Findings (1)
- highWrite-action tools reachable without authentication
auth.open-write
How Apipay compares
Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.
- Safety score
- 68/100
- higher than 33% of 4,460 AI and agents servers
- Tools
- 8
- the typical AI and agents server has 6
- Tools that change things
- 13%
- typical: 0%. Fewer write tools means less an agent can break
- Uptime
- 96%
- of our recent checks; the typical remote AI and agents server answers 100%
- Response time
- 110 ms
- faster than 84% of 2,331 AI and agents servers
- Downloads a week
- 49
- more than 41% of 1,538 AI and agents servers with a package
What its tools let an agent do: 7 read · 1 change
Install Apipay in Claude Code, Cursor or VS Code
claude mcp add --transport http apipay https://apifare.com/mcp
What the publisher says
From the Apipay repository's README, as published. We do not edit it. Read it on GitHub
apifare-mcp
One prepaid balance for everything your agent calls — 4,900+ ready-to-run tools plus search, filings, registries and weather, under per-agent caps, a kill switch, and a signed receipt for every call. This repo is the public installer for the apifare-mcp MCP server (the gateway itself lives at apifare.com).
Start in two steps
(email in, key out, $5 of calls free).
- Get a key — apifare.com/start
- Give it to your agent — one config entry:
Cline / Claude Desktop / any stdio MCP client
{
"mcpServers": {
"apifare": {
"command": "npx",
"args": ["-y", "apifare-mcp"],
"env": { "APIPAY_TOKEN": "<your token>" }
}
}
}Remote (streamable HTTP)
URL https://apifare.com/mcp with header Authorization: Bearer .
Shortcut — a web-capable agent can do both steps itself: paste read https://apifare.com/llms.txt and get yourself a key into its chat.
Tools also answer tokenless with guided signup instructions, so the server is safe to add before you have a key.
Note: APIPAY_TOKEN is the env var name (legacy install id — do not rename); the npm id apipay-mcp still installs the same server.
Docs: llms.txt · error catalog · prices (the listed number is the billed number, CI-enforced) · terms · privacy
Nothing above is checked by us. What we check is on the safety report.
Grade history
- 2026-10-03downgradeA → Cscore 68: Write-action tools reachable without authentication
Apipay: common questions
- Is Apipay MCP server safe?
- With care: it is graded C, so read the findings first (68/100). Read the Apipay safety report
- How do I install Apipay?
- It runs remotely at apifare.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Apipay need an API key?
- Yes. The registry entry asks for
APIPAY_TOKEN. - Is Apipay maintained?
- The last commit was 52 days ago (2026-09-13). The latest release is v0.4.2.
- Is Apipay up?
- 96% of our last 28 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Apipay?
- Servers from other publishers that do the same job: Spotifyscraper MCP server, Emilia Protocol MCP server and Mnemoverse Memory MCP server.
- How does Apipay compare with other AI and agents MCP servers?
- safety score 68/100 (higher than 33% of 4,460 AI and agents servers); tools 8 (the typical AI and agents server has 6); tools that change things 13% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.
Alternatives to Apipay
Same job from other publishers: the closest match first, then the best rated.
- SpotifyscraperPublic Spotify metadata, lyrics and podcasts for LLM agents. No API key, read-only.not reviewedEstablishedB
- Emilia ProtocolExact-action approval for consequential agent actions: request, track, and verify signed receipts.not reviewedEstablishedB
- Mnemoverse MemoryHosted agent memory that learns from outcomes, with shared rooms. No key: mcp.mnemoverse.com/mcpnot reviewedEstablishedA
Agoragentic Agent OS MCPTriptych OS (Agent OS) MCP for governed routing, receipts, and USDC settlement on Base.not reviewedEstablishedB- three.ws PortfolioAn agent's trading state — portfolio value, PnL, live balances, trade feed, and signed transfers.not reviewedEstablishedB