APIbaseBLOCK
One MCP + REST endpoint to APIbase's live tool catalog (counts: https://apibase.pro/llms.txt). No signup, no subscription, no API key to start — pay per call in USDC (x402 on Base or MPP on Tempo).
Overview
From the repository's own README, as read at the audited commit. Badges and raw HTML are left out.
One MCP + REST endpoint to 1387 tools from 401 providers. No signup, no subscription, no API key to start — pay per call in USDC (x402 on Base or MPP on Tempo).
[](https://github.com/whiteknightonhorse/APIbase/actions/workflows/security.yml) [](https://github.com/whiteknightonhorse/APIbase/actions/workflows/deploy.yml) [](https://opensource.org/licenses/MIT) [](https://registry.modelcontextprotocol.io) [](https://smithery.ai/servers/apibase-pro/api-hub) [](https://www.mppscan.com/server/2ce70c5f97be51cfcabe13aad9b5f4beae6dc77be586357e04db17644729303d)
Quick Start
{
"mcpServers": {
"apibase": { "url": "https://apibase.pro/mcp" }
}
}That's the Claude Desktop config. Cursor, Windsurf, OpenAI Agents SDK, LangChain, Google ADK, CrewAI, Microsoft Copilot Studio, and plain REST: [apibase.pro/connect](https://apibase.pro/connect).
For AI Agents
- [llms.txt](https://apibase.pro/llms.txt) — concise LLM context
- [ai.txt](https://apibase.pro/ai.txt) — plain-text agent discovery
- [mcp.json](https://apibase.pro/.well-known/mcp.json) — MCP server metadata
- [openapi.json](https://apibase.pro/.well-known/openapi.json) — OpenAPI 3.1 spec
- [api-catalog](https://apibase.pro/.well-known/api-catalog) — RFC 9727 discovery linkset
- Roadmap — planned/shipped changes that affect what an agent can do or see
Integrations & Registries
**[Full framework guides →](https://apibase.pro/frameworks
2347080995a0OBSERVED · 2026-10-10Connect
Built from this server's own package name, version and transport as found in its source — not copied from anyone's documentation, so it cannot drift against a page we do not control. Replace the environment placeholders with a token scoped to the least it needs.
claude mcp add apibase-mcp-client -- npx -y [email protected]
Exposed tools (11)
10 read · 1 write · 0 destructive.
| Tool | Risk | Description |
|---|---|---|
APIbase | write | Unified MCP gateway to ${TOOLS} API tools from ${PROV} providers. Pay-per-call via x402 USDC micropayments. |
api-workflow | read | Design a multi-step API workflow combining multiple APIbase tools. Returns execution plan with tool sequence, data flow, and error handling. |
budget | read | Optional USDC budget constraint for the workflow |
discover-tools | read | Find the right APIbase tools for a task. Describes available categories, search strategies, and tool selection criteria. |
discover_tools | read | Call discover_tools to browse ${TOOLS} tools by category or task instead of loading all schemas into context. |
goal | read | End-to-end goal (e.g. |
openapi | read | OpenAPI 3.1 spec for every active tool |
task | read | What you want to accomplish (e.g. |
tool-catalog | read | Full tool catalog with schemas, pricing, and provider info |
topic | read | Specific payment topic (e.g. |
x402-payment-guide | read | Explains x402 USDC micropayment flow for APIbase. Covers wallet setup on Base, payment headers, escrow mechanics, and refund policy. |
Trust audit
BLOCKgrade F · trust 40/100 Do not install this without reading the findings. The audit found something that could harm you or your machine.
| Layer | What it checks | Result |
|---|---|---|
| L0 | Provenance & inventory | PASS |
| L1 | Static analysis of the code | FAIL |
| L2 | Instruction surface (what it tells the agent) | PASS |
| L3 | Class-specific surface | PASS |
| L4 | Behavioural (sandbox) | SKIPPED |
What the source does
- Filesystem
- declared (13 observation(s))
- Network
- declared (17 observation(s))
- Shell
- declared (4 observation(s))
- Dependencies
- not all pinned
- Secrets in source
- found
Findings (25)
if [ "$(echo "$AC > 0" | python3 -c "import sys; print(eval(open('/dev/stdin').read().strip()))")" = "True" ] 2>/dev/null; then".env" ... curl
/.env" ... curl
DATABASE_URL=postgresql://apibase:CHANGE_ME@postgres:5432/apibase?schema=public&connection_limit=20
DATABASE_URL_WORKER=postgresql://apibase:CHANGE_ME@postgres:5432/apibase?schema=public&connection_limit=10
DATABASE_URL_OUTBOX=postgresql://apibase:CHANGE_ME@postgres:5432/apibase?schema=public&connection_limit=5
env["DATABASE_URL"] = f"postgresql://apibase:[email protected]:{PG_PORT}/apibase"
proxy_pass http://127.0.0.1:8881;
proxy_pass http://127.0.0.1:8881;
proxy_pass http://127.0.0.1:8881;
proxy_pass http://127.0.0.1:8881;
proxy_pass http://127.0.0.1:8881;
'Real-time PM2.5 readings (μg/m3) for the 5 Singapore regions (north/south/east/west/central). NEA, SG Open Data Licence v1.0',
'Returns PM10, PM2.5 (μg/m3), carbon monoxide, nitrogen dioxide, sulphur dioxide, ozone, ' +
const src = text.replace(/^/, '');
const secret = 'tuya-access-token-abc123';
const secret = 'super-secret-refresh-token-xyz';
const TOKEN = '0x20c0000000000000000000000000000000000000';
const TOKEN = '0x20C000000000000000000000b9537d11c60E8b50';
token: '0x20C000000000000000000000b9537d11c60E8b50',
return new Function(`${documentShim}\n${depsSrc}\n${src}\nreturn ${name};`)() as T;row4, rc4 = psql_raw(
assert rc4 == 0 and row4 == "", "scenario 4: UNMATCHED must never open an incident"
row2, rc4 = ap.psql("SELECT incident_id FROM email_events WHERE msg_id = '<[email protected]>'")assert rc4 == 0 and row2
Gates applied: no_behavioural_pass.
2347080995a0full audit observations/trust-audit/mcp-server/whiteknightonhorse__apibase.json · Report an issue / request a re-scanAudit history
Every audit this server has had. A grade with a past is a grade somebody is still checking.
| Date | Source | Verdict | Grade | Score | Change |
|---|---|---|---|---|---|
| 2026-10-10 | 2347080995a0 | BLOCK | F | 40 | first audit |
Questions
What is the APIbase MCP server?
One MCP + REST endpoint to APIbase's live tool catalog (counts: https://apibase.pro/llms.txt). No signup, no subscription, no API key to start — pay per call in USDC (x402 on Base or MPP on Tempo).
What tools does APIbase expose?
11 in total: 10 read-only, 1 that write, and 0 that can delete or overwrite. Every one is listed on this page with its risk.
Is APIbase safe to connect to an agent?
No — not without reading the findings first. The audit graded it F (40/100) and found 7 critical or high issues in the source. Each one is listed on this page with the file and line it is on.
What credentials does APIbase need?
It reads APIBASE_API_KEY, DRILL_401_KEY, ENCRYPTION_KEY, INTEGRATOR_STREAM_PILOT_TEMPO_KEY, KEY_BRIDGE_ADAPTERS_DIR, KEY_BRIDGE_RESOLUTIONS, MPP_SECRET_KEY, ORCHESTRA_INTERNAL_KEY, PROVIDER_KEY_BHL, PROVIDER_KEY_GFW, PROVIDER_KEY_INSEE and PROVIDER_KEY_NAMESILO from the environment. Give it a token scoped to the least it needs — an agent that can be talked into calling a tool can be talked into calling it with your credentials.
How does APIbase run?
It speaks sse, stdio and streamable-http, so it runs as a local process your client starts. It is published on npm as @apibase11/stream-settler at 0.1.0.
How current is this page?
The grade is for one exact copy of the source (2347080995a0), read on 2026-10-10. The repository is watched and re-audited when it changes.