io.github.iamalanlui/apipay

Measured conclusion: Deep-tested. L2 outcome: tools_ok.

Prepaid balance for AI agents: one key, 4,900+ tools your agent can run today, caps, receipts.

Add to your agent

Copy this into your MCP client config:

{
  "mcpServers": {
    "apipay": {
      "url": "https://apifare.com/mcp",
      "transport": "streamable-http"
    }
  }
}

Measured tools (8)

• search_apis read-only

  Search the apifare catalog of ready-to-call APIs (web search, scraping, weather, and more). Returns each API's slug, params, and per-call price in prepaid credits. Every miss is logged so missing APIs get added.

  Parameters:

  • query (required) — string — What kind of API you need, in plain words

  Hints: read-only yes · destructive not declared · idempotent yes · open-world yes

• call_api

  Call an API from the apifare catalog by slug (find slugs with search_apis). The cost in prepaid credits is deducted automatically and returned with the result.

  Parameters:

  • slug (required) — string — API slug from search_apis, e.g. "web-search"
  • params — object — Params object per the API's manifest

  Hints: read-only no · destructive no · idempotent no · open-world yes

• get_vault_link

  Get a secure one-time link where the user can save their OWN API key for a provider (BYOK). Never ask the user to paste an API key into the chat — always use this link instead. BYOK calls cost a flat 0.1 credits; the user's own provider account pays the provider.

  Parameters:

  • provider (required) — string — API slug from search_apis, e.g. "fal"

  Hints: read-only no · destructive no · idempotent no · open-world no

• check_balance read-only

  Check the remaining apifare prepaid credit balance (1 credit = $0.01) and get the top-up link.

  Hints: read-only yes · destructive not declared · idempotent yes · open-world no

• topup destructive

  Top up the apifare balance from the owner's standing auto-refill mandate (if the owner enabled one). Charges within the owner's configured limits and returns the new balance. Without a mandate, returns payment instructions to relay to the user.

  Parameters:

  • amount_usd — integer — Optional whole-dollar amount; defaults to the mandate's refill amount and is clamped to it

  Hints: read-only no · destructive yes · idempotent no · open-world no

• vendor_call

  Call a vendor MANAGEMENT API (supabase, vercel, fly, resend, github, npm, cloudflare, lemonsqueezy) with the owner's vaulted root credential injected server-side. Native request/response; destructive, billing, and member/admin routes are blocked. The root token is never visible.

  Parameters:

  • vendor (required) — string — Vendor name, e.g. "vercel"
  • path (required) — string — The vendor's own API path, e.g. "v9/projects"
  • body — object — JSON body for write methods
  • method — string — HTTP method (default GET)

  Hints: read-only no · destructive no · idempotent no · open-world yes

• secret_transfer destructive

  Move a secret from one vendor to another SERVER-SIDE — the value never enters this conversation. Example: fetch a Supabase service_role key and place it as a Vercel env var.

  Parameters:

  • from (required) — object
  • to (required) — object

  Hints: read-only no · destructive yes · idempotent no · open-world yes

• secret_generate destructive

  Generate a random secret and place it directly at a vendor resource SERVER-SIDE — the value never enters this conversation.

  Parameters:

  • to (required) — object
  • bytes — integer

  Hints: read-only no · destructive yes · idempotent no · open-world yes

Repository

Measured by MCPYP probing. Untested fields are omitted, never estimated. Listing is always free; MCPYP never proxies calls or stores user tokens.