Apipay MCP server

• call_apiFree

  Call an API from the apifare catalog by slug (find slugs with search_apis). The cost in prepaid credits is deducted automatically and returned with the result.

• check_balanceFree

  Check the remaining apifare prepaid credit balance (1 credit = $0.01) and get the top-up link.

• get_vault_linkFree

  Get a secure one-time link where the user can save their OWN API key for a provider (BYOK). Never ask the user to paste an API key into the chat — always use this link instead. BYOK calls cost a flat 0.1 credits; the user's own provider account pays the provider.

• search_apisFree

  Search the apifare catalog of ready-to-call APIs (web search, scraping, weather, and more). Returns each API's slug, params, and per-call price in prepaid credits. Every miss is logged so missing APIs get added.

• secret_generateFree

  Generate a random secret and place it directly at a vendor resource SERVER-SIDE — the value never enters this conversation.

• secret_transferwrite actionFree

  Move a secret from one vendor to another SERVER-SIDE — the value never enters this conversation. Example: fetch a Supabase service_role key and place it as a Vercel env var.

• topupFree

  Top up the apifare balance from the owner's standing auto-refill mandate (if the owner enabled one). Charges within the owner's configured limits and returns the new balance. Without a mandate, returns payment instructions to relay to the user.

• vendor_callFree

  Call a vendor MANAGEMENT API (supabase, vercel, fly, resend, github, npm, cloudflare, lemonsqueezy) with the owner's vaulted root credential injected server-side. Native request/response; destructive, billing, and member/admin routes are blocked. The root token is never visible.

• Code scan2 source files scanned25/25
• Live reliabilityremote reachable in 786ms20/20
• Tool poisoning8 tool descriptions checked15/15
• Auth qualityopen endpoint exposes 1 write-action tools with no auth3/15
• Maintenancelast push 6 days ago15/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Apipay: common questions

Is Apipay MCP server safe?

Yes, by our scan: it is graded A (86/100). Read the Apipay safety report

How do I install Apipay?

It runs remotely at apifare.com. Add it to Claude Code, Claude Desktop or Cursor with the snippets above, or call it through the mcp.market gateway without installing anything.

Does Apipay need an API key?

Yes. The registry entry asks for APIPAY_TOKEN.

Is Apipay maintained?

The last commit was 7 days ago (2026-09-13). The latest release is v0.4.2.

Is Apipay up?

100% of our last 1 checks got an answer. We check remote servers about four times a day.

What can I use instead of Apipay?

Servers from other publishers that do the same job: Ausca MCP server, Protect MCP server and apimodels MCP server. Compare all Apipay alternatives.