Apipay MCP server
Prepaid balance for AI agents: one key, 4,900+ tools your agent can run today, caps, receipts.
0 stars215 downloads/wk
Reviews
Write oneNobody has reviewed Apipay yet.
If you have run it, two minutes of your experience saves the next person an afternoon.
Apipay tools (8, 1 write)
write = sends, deletes, buys or postscall_apiFreeCall an API from the apifare catalog by slug (find slugs with search_apis). The cost in prepaid credits is deducted automatically and returned with the result.
check_balanceFreeCheck the remaining apifare prepaid credit balance (1 credit = $0.01) and get the top-up link.
get_vault_linkFreeGet a secure one-time link where the user can save their OWN API key for a provider (BYOK). Never ask the user to paste an API key into the chat — always use this link instead. BYOK calls cost a flat 0.1 credits; the user's own provider account pays the provider.
search_apisFreeSearch the apifare catalog of ready-to-call APIs (web search, scraping, weather, and more). Returns each API's slug, params, and per-call price in prepaid credits. Every miss is logged so missing APIs get added.
secret_generateFreeGenerate a random secret and place it directly at a vendor resource SERVER-SIDE — the value never enters this conversation.
secret_transferwrite actionFreeMove a secret from one vendor to another SERVER-SIDE — the value never enters this conversation. Example: fetch a Supabase service_role key and place it as a Vercel env var.
topupFreeTop up the apifare balance from the owner's standing auto-refill mandate (if the owner enabled one). Charges within the owner's configured limits and returns the new balance. Without a mandate, returns payment instructions to relay to the user.
vendor_callFreeCall a vendor MANAGEMENT API (supabase, vercel, fly, resend, github, npm, cloudflare, lemonsqueezy) with the owner's vaulted root credential injected server-side. Native request/response; destructive, billing, and member/admin routes are blocked. The root token is never visible.
Public scan report
scanner v0.1.3 · 2026-09-19 · same rubric, same numbers if you re-run it
- Code scan2 source files scanned25/25
- Live reliabilityremote reachable in 628ms20/20
- Tool poisoning8 tool descriptions checked15/15
- Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
- Maintenancelast push 6 days ago15/15
- Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10
Findings (1)
- highWrite-action tools reachable without authentication
auth.open-write
Install directly
claude mcp add --transport http apipay https://apifare.com/mcp
Apipay: common questions
- Is Apipay MCP server safe?
- Yes, by our scan: it is graded A (86/100). Read the Apipay safety report
- How do I install Apipay?
- It runs remotely at apifare.com. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.
- Does Apipay need an API key?
- Yes. The registry entry asks for
APIPAY_TOKEN. - Is Apipay maintained?
- The last commit was 6 days ago (2026-09-13). The latest release is v0.4.2.
- Is Apipay up?
- 100% of our last 1 checks got an answer. We check remote servers about four times a day.
- What can I use instead of Apipay?
- Servers from other publishers that do the same job: Ausca MCP server, Gamenumerics MCP server and Lovec MCP server. Compare all Apipay alternatives.
Alternatives to Apipay
Same job from other publishers: the closest match first, then the best rated.
- AuscaPay-per-call APIs and MCP services for agents, no accounts or keys, with verifiable receipts.not reviewedGrowingB
- GamenumericsGame numerical design & balance auditing MCP server — 17 deterministic tools, zero LLM guessing.not reviewedGrowingA
- LovecPrompt-injection detector for untrusted text before it reaches an LLM (RU/EN). BYO lovec.tech key.not reviewedGrowingB