MCP.Market

Apipay MCP server

online · 96% uptime
by iamalanlui·io.github.iamalanlui/apipay·v0.4.2

Prepaid balance for AI agents: one key, 4,900+ tools your agent can run today, caps, receipts.

C68/100grade C
What users say
No reviews yet
Be the first
Safety scan
C68/100

full report

Adoption
Growing

0 stars49 downloads/wk

Reviews

Write one

Nobody has reviewed Apipay yet.

If you have run it, two minutes of your experience saves the next person an afternoon.

Apipay tools (8, 1 write)

write = sends, deletes, buys or posts
  • call_apiFree

    Call an API from the apifare catalog by slug (find slugs with search_apis). The cost in prepaid credits is deducted automatically and returned with the result.

  • check_balanceFree

    Check the remaining apifare prepaid credit balance (1 credit = $0.01) and get the top-up link.

  • get_vault_linkFree

    Get a secure one-time link where the user can save their OWN API key for a provider (BYOK). Never ask the user to paste an API key into the chat — always use this link instead. BYOK calls cost a flat 0.1 credits; the user's own provider account pays the provider.

  • search_apisFree

    Search the apifare catalog of ready-to-call APIs (web search, scraping, weather, and more). Returns each API's slug, params, and per-call price in prepaid credits. Every miss is logged so missing APIs get added.

  • secret_generateFree

    Generate a random secret and place it directly at a vendor resource SERVER-SIDE — the value never enters this conversation.

  • secret_transferwrite actionFree

    Move a secret from one vendor to another SERVER-SIDE — the value never enters this conversation. Example: fetch a Supabase service_role key and place it as a Vercel env var.

  • topupFree

    Top up the apifare balance from the owner's standing auto-refill mandate (if the owner enabled one). Charges within the owner's configured limits and returns the new balance. Without a mandate, returns payment instructions to relay to the user.

  • vendor_callFree

    Call a vendor MANAGEMENT API (supabase, vercel, fly, resend, github, npm, cloudflare, lemonsqueezy) with the owner's vaulted root credential injected server-side. Native request/response; destructive, billing, and member/admin routes are blocked. The root token is never visible.

Public scan report

scanner v0.1.10 · 2026-10-03 · same rubric, same numbers if you re-run it

1 high
  • Code scan2 source files scanned25/25
  • Live reliabilityremote reachable in 934ms20/20
  • Tool poisoning8 tool descriptions checked15/15
  • Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
  • Maintenancerepository not readable: repo not found3/15
  • Maintainer identityno repository or website to verify2/10

Findings (1)

  • highWrite-action tools reachable without authenticationauth.open-write
Overall 68/100. Components that don't apply are left out of the denominator. Any critical finding is an F.RubricAppeal a findingJSON

How Apipay compares

Against every graded AI and agents MCP server, from our own scans and uptime checks. Updated after each scan run.

Safety score
68/100
higher than 33% of 4,460 AI and agents servers
Tools
8
the typical AI and agents server has 6
Tools that change things
13%
typical: 0%. Fewer write tools means less an agent can break
Uptime
96%
of our recent checks; the typical remote AI and agents server answers 100%
Response time
110 ms
faster than 84% of 2,331 AI and agents servers
Downloads a week
49
more than 41% of 1,538 AI and agents servers with a package

What its tools let an agent do: 7 read · 1 change

Install Apipay in Claude Code, Cursor or VS Code

claude mcp add --transport http apipay https://apifare.com/mcp
Add to Cursor

What the publisher says

From the Apipay repository's README, as published. We do not edit it. Read it on GitHub

apifare-mcp

One prepaid balance for everything your agent calls — 4,900+ ready-to-run tools plus search, filings, registries and weather, under per-agent caps, a kill switch, and a signed receipt for every call. This repo is the public installer for the apifare-mcp MCP server (the gateway itself lives at apifare.com).

Start in two steps

(email in, key out, $5 of calls free).

  1. Get a key — apifare.com/start
  1. Give it to your agent — one config entry:

Cline / Claude Desktop / any stdio MCP client

{
  "mcpServers": {
    "apifare": {
      "command": "npx",
      "args": ["-y", "apifare-mcp"],
      "env": { "APIPAY_TOKEN": "<your token>" }
    }
  }
}

Remote (streamable HTTP)

URL https://apifare.com/mcp with header Authorization: Bearer .

Shortcut — a web-capable agent can do both steps itself: paste read https://apifare.com/llms.txt and get yourself a key into its chat.

Tools also answer tokenless with guided signup instructions, so the server is safe to add before you have a key.

Note: APIPAY_TOKEN is the env var name (legacy install id — do not rename); the npm id apipay-mcp still installs the same server.

Docs: llms.txt · error catalog · prices (the listed number is the billed number, CI-enforced) · terms · privacy

Nothing above is checked by us. What we check is on the safety report.

Grade history

  • 2026-10-03downgradeA → Cscore 68: Write-action tools reachable without authentication

Apipay: common questions

Is Apipay MCP server safe?
With care: it is graded C, so read the findings first (68/100). Read the Apipay safety report
How do I install Apipay?
It runs remotely at apifare.com. Add it to Claude Code, Cursor, VS Code or Claude Desktop with the snippets above, or call it through the mcp.market gateway without installing anything.
Does Apipay need an API key?
Yes. The registry entry asks for APIPAY_TOKEN.
Is Apipay maintained?
The last commit was 52 days ago (2026-09-13). The latest release is v0.4.2.
Is Apipay up?
96% of our last 28 checks got an answer. We check remote servers about four times a day.
What can I use instead of Apipay?
Servers from other publishers that do the same job: Spotifyscraper MCP server, Emilia Protocol MCP server and Mnemoverse Memory MCP server.
How does Apipay compare with other AI and agents MCP servers?
safety score 68/100 (higher than 33% of 4,460 AI and agents servers); tools 8 (the typical AI and agents server has 6); tools that change things 13% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.

Alternatives to Apipay

Same job from other publishers: the closest match first, then the best rated.

  • Spotifyscraper
    Public Spotify metadata, lyrics and podcasts for LLM agents. No API key, read-only.
    B
  • Emilia Protocol
    Exact-action approval for consequential agent actions: request, track, and verify signed receipts.
    B
  • Mnemoverse Memory
    Hosted agent memory that learns from outcomes, with shared rooms. No key: mcp.mnemoverse.com/mcp
    A
  • Agoragentic Agent OS MCP
    Triptych OS (Agent OS) MCP for governed routing, receipts, and USDC settlement on Base.
    B
  • three.ws Portfolio
    An agent's trading state — portfolio value, PnL, live balances, trade feed, and signed transfers.
    B