apipay
Server Details
Prepaid balance for AI agents: one key, 4,900+ tools your agent can run today, caps, receipts.
- Status
- Healthy
- Uptime
- 99.0% over 22 days
- Last Tested
- Transport
- Streamable HTTP · MCP 2025-11-25
- URL
- Repository
- iamalanlui/apifare-mcp
- GitHub Stars
- 0
TDQS
Scored across 8 tools
Most tools target clearly distinct resources: catalog search, balance, top-up, vault link, and secret operations. call_api and vendor_call could be confused at a glance since both invoke APIs, but their cost/credential models are clearly separated in the descriptions.
The set mostly uses verb_noun names like call_api, check_balance, and search_apis, but secret_generate and secret_transfer invert the pattern to noun_verb, and topup is a single compound. The mixed conventions are readable but not fully consistent.
Eight tools is well-scoped for a server handling prepaid API access, balance management, BYOK vault links, secrets, and vendor management calls. Each tool covers a distinct function without redundancy or bloat.
The core workflow is well covered: discover APIs, call them, check and top up balance, issue vault links, manage secrets server-side, and invoke vendor APIs. Minor gaps such as vault link revocation or transaction history exist, but agents can work around them.
Available Tools
8 toolscall_apiAInspect
Call an API from the apifare catalog by slug (find slugs with search_apis). The cost in prepaid credits is deducted automatically and returned with the result.
| Name | Required | Description | Default |
|---|---|---|---|
| slug | Yes | API slug from search_apis, e.g. "web-search" | |
| params | No | Params object per the API's manifest |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations provided, the description carries the full behavioral burden, and it does disclose something important: the cost is deducted automatically in prepaid credits and returned with the result. However, it says nothing about failure modes, idempotency/retry behavior, or whether a failed call still incurs cost — meaningful gaps for a paid side-effecting operation.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences with zero filler; the core action and its prerequisite are front-loaded and the billing caveat is appended where it belongs. Every clause earns its place.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a two-parameter wrapper with no output schema, the description covers the operation, the required lookup step, and the credit-cost side effect — enough to call it correctly. It could go further on how the nested params object maps to each API's manifest and what a failure response looks like.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100%, so both parameters are already documented (including the example slug 'web-search' and the manifest-driven params object), establishing the baseline of 3. The description's 'by slug' adds no syntax or format detail beyond what the schema supplies.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Call an API from the apifare catalog') qualified by the lookup key ('by slug'), which is enough to distinguish it from the sibling search_apis that only finds slugs. An agent can identify the tool's job without reading the schema.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The parenthetical '(find slugs with search_apis)' explicitly routes the agent to the prerequisite sibling tool, which is a genuine usage condition. It stops short of stating when not to use this tool or what happens on unknown slugs, so it is strong but not exhaustive.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
check_balanceAInspect
Check the remaining apifare prepaid credit balance (1 credit = $0.01) and get the top-up link.
| Name | Required | Description | Default |
|---|---|---|---|
No parameters | |||
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. 'Check' implies a read-only operation and the unit conversion is helpful, but the description does not explicitly state that the operation is non-consuming, whether any authentication is needed, or what the top-up link represents. The behavior is reasonably clear but not fully disclosed.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single sentence conveys the tool's purpose and the credit unit in an economical way. Every clause earns its place, and the core action is front-loaded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a zero-parameter, no-output-schema tool, the description covers the essential behavior and return artifact (balance and top-up link). It lacks only minor context such as whether the top-up link is user-specific or how the balance is returned, but nothing critical prevents an agent from invoking it correctly.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
The input schema has zero parameters and schema description coverage is 100% vacuously, so there is no parameter meaning for the description to add. The description correctly avoids inventing parameters and stays focused on behavior.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description uses a specific verb ('Check') and a precise resource ('remaining apifare prepaid credit balance'), and also identifies the second deliverable ('top-up link'). It is clearly distinct from the sibling tool 'topup', which is about adding credit rather than reading the current balance.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The intended use is implied by the action itself: use this tool when you need to know the current prepaid credit balance. However, it does not explicitly contrast itself with siblings like 'topup' or explain when to check the balance before calling 'call_api', so the guidance is only implicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
get_vault_linkAInspect
Get a secure one-time link where the user can save their OWN API key for a provider (BYOK). Never ask the user to paste an API key into the chat — always use this link instead. BYOK calls cost a flat 0.1 credits; the user's own provider account pays the provider.
| Name | Required | Description | Default |
|---|---|---|---|
| provider | Yes | API slug from search_apis, e.g. "fal" |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does well: it discloses the link is one-time, that it is the secure path for BYOK, the flat 0.1 credit cost, and that the user's provider account foots the provider bill. It omits link expiry/validity window and any auth requirement, which are the main remaining behavioral unknowns.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three short sentences, front-loaded with what the tool returns, followed by the usage rule and the cost model. Every sentence earns its place with no redundancy.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a single-parameter tool with no output schema and no annotations, the description covers purpose, usage mandate, and cost model adequately; the returned link is implied by 'get a secure one-time link.' Minor gaps remain around link expiry and how the link is delivered to the user.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is 100% and the schema already explains that provider is an API slug from search_apis with an example ('fal'). The description only says 'for a provider' and adds no format, casing, or sourcing detail beyond the schema, so baseline 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (get) and a specific resource (a secure one-time link for saving the user's own API key), with the BYOK scope made explicit. An agent can distinguish this from call_api or vendor_call, which consume keys rather than collect them.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Gives a strong directive: 'Never ask the user to paste an API key into the chat — always use this link instead,' which tells the agent when to reach for this tool over an ad-hoc request. It does not, however, contrast with siblings like secret_generate or secret_transfer, which also deal with secrets, so routing between those is left to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
search_apisAInspect
Search the apifare catalog of ready-to-call APIs (web search, scraping, weather, and more). Returns each API's slug, params, and per-call price in prepaid credits. Every miss is logged so missing APIs get added.
| Name | Required | Description | Default |
|---|---|---|---|
| query | Yes | What kind of API you need, in plain words |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full behavioral burden; it does disclose useful traits — the return fields (slug, params, per-call price in prepaid credits) and the fact that misses are logged so missing APIs get added. It stops short of stating auth needs, result limits, or pagination, which matters for a catalog search tool that returns an unbounded set of matches.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two sentences, front-loaded with the core purpose, then the return shape and the logging side-effect. No filler or restatement of the name; every clause carries information.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter search tool with no output schema, the description covers the essential contract: what is searched, what comes back (slug, params, price), and the miss-logging behavior. It would be fully complete with a note on result volume or pagination, but it is sufficient for correct invocation.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the single query parameter is fully documented as 'What kind of API you need, in plain words.' The description adds no syntax, format, or keyword guidance beyond the schema, so the baseline 3 is appropriate when the schema does the heavy lifting.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb (Search) and resource (the apifare catalog of ready-to-call APIs) and enumerates the domain (web search, scraping, weather), so the agent knows exactly what is being queried. It is distinguishable from call_api by implication, but it never names the sibling or explicitly frames this as the discovery step preceding invocation.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The catalog-search framing implies it is used to find an API before calling one via call_api, and the 'every miss is logged' note hints at expected negative-result usage. However, there is no explicit when-to-use, no statement of when not to use it, and no named alternative, so the guidance remains inferred rather than stated.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
secret_generateBInspect
Generate a random secret and place it directly at a vendor resource SERVER-SIDE — the value never enters this conversation.
| Name | Required | Description | Default |
|---|---|---|---|
| to | Yes | ||
| bytes | No |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
No annotations exist, so the description carries the full burden. It usefully discloses that generation and placement happen SERVER-SIDE and that the value is never surfaced to the conversation — a meaningful behavioral trait. However, it omits auth requirements, whether the secret is retrievable later, idempotency, and error behavior, which for a write-style tool are significant gaps.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
A single tight sentence with zero waste, front-loading the core action and the key security property. Nothing redundant or padded.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a nested-object tool with no output schema and no annotations, the description conveys the central security behavior but leaves too much unstated: how vendor/resource/key identify the destination, what auth is needed, and whether the generated secret can be retrieved afterward. Given the schema's opacity, more was required.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0%, so the description must compensate, and it largely does not. It references 'a vendor resource' but never explains the vendor/resource/key fields of the nested 'to' object, nor the 'bytes' length parameter (16-64). An agent cannot tell what values these accept or how they map to the placement.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource: generate a random secret and place it at a vendor resource. The scope is clear. It does not explicitly contrast itself with the sibling secret_transfer, so an agent must infer the distinction, keeping it below a 5.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
No when-to-use or when-not-to-use guidance. The phrase 'the value never enters this conversation' hints at a security rationale but does not tell the agent when to prefer this over secret_transfer or get_vault_link. No prerequisites or alternatives are named.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
secret_transferBInspect
Move a secret from one vendor to another SERVER-SIDE — the value never enters this conversation. Example: fetch a Supabase service_role key and place it as a Vercel env var.
| Name | Required | Description | Default |
|---|---|---|---|
| to | Yes | ||
| from | Yes |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden. It discloses one valuable trait — the transfer is SERVER-SIDE and the value never enters the conversation — but says nothing about required permissions, whether the source secret is retained or removed, idempotency, or failure behavior for a mutation tool.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Two compact sentences: the action is front-loaded, the security property follows immediately, and the example earns its place by grounding the abstract vendor-to-vendor move.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a nested-parameter mutation with no annotations and no output schema, the description covers purpose and the secret-handling concern well but leaves parameter semantics and side-effect/return behavior thin. No output schema means return values need not be explained, keeping this mid-range.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 0% and the parameters are nested objects, so the description must compensate. The example loosely maps 'from' to a source key and 'to' to a destination env var, but never explains the vendor/resource/field vs vendor/resource/key structure, leaving the semantics largely undocumented.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb+resource ('Move a secret from one vendor to another') and clearly separates itself in meaning from sibling secret_generate. It does not explicitly name siblings, but the 'move' framing makes the distinction inferable.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
The Supabase-to-Vercel example implies a usage context, but there is no explicit when-to-use, when-not-to-use, or routing versus secret_generate/get_vault_link. Usage is conveyed only by example.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
topupAInspect
Top up the apifare balance from the owner's standing auto-refill mandate (if the owner enabled one). Charges within the owner's configured limits and returns the new balance. Without a mandate, returns payment instructions to relay to the user.
| Name | Required | Description | Default |
|---|---|---|---|
| amount_usd | No | Optional whole-dollar amount; defaults to the mandate's refill amount and is clamped to it |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full burden and does disclose the critical trait: this tool spends money, bounded by the owner's configured limits, and it describes both the success return (new balance) and the no-mandate fallback (payment instructions). It omits auth/permission requirements and whether charges are reversible or idempotent.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three sentences, front-loaded with the action and funding source, then the limits, then the fallback. No filler or repetition of schema content.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a one-parameter, no-annotation tool with no output schema, the description covers the important unknowns: that a charge occurs, that it is limit-bounded, and what is returned in each branch. It could still say more about permissions and failure behavior, but nothing essential to calling it is missing.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema description coverage is 100% and the single optional amount_usd parameter is fully documented there, including its default and clamping behavior. The description adds nothing about the parameter, so the baseline of 3 is appropriate.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
The description names a specific verb and resource ('top up the apifare balance') and precisely scopes the funding source (the owner's standing auto-refill mandate). It is clearly a write/action tool distinct from check_balance or call_api, though it never names an alternative to contrast against explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
It gives the key precondition ('if the owner enabled one') and explains the two outcome branches depending on whether a mandate exists. It does not state when an agent should reach for this tool versus siblings such as check_balance, so the routing guidance is contextual rather than explicit.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
vendor_callAInspect
Call a vendor MANAGEMENT API (supabase, vercel, fly, resend, github, npm, cloudflare, lemonsqueezy) with the owner's vaulted root credential injected server-side. Native request/response; destructive, billing, and member/admin routes are blocked. The root token is never visible.
| Name | Required | Description | Default |
|---|---|---|---|
| body | No | JSON body for write methods | |
| path | Yes | The vendor's own API path, e.g. "v9/projects" | |
| method | No | HTTP method (default GET) | |
| vendor | Yes | Vendor name, e.g. "vercel" |
TDQS
Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
With no annotations, the description carries the full load and does well: it discloses that the owner's root credential is injected server-side, that the token is never visible, and that whole classes of routes are blocked. It omits rate limits, error/response semantics beyond 'native', and whether the credential is scoped down, keeping it short of a 5.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.
Is the description appropriately sized, front-loaded, and free of redundancy?
Three dense sentences with the credential-injection mechanic front-loaded and no filler. The vendor list is long but functional rather than padding; slightly heavy inline enumeration is the only cost.
Shorter descriptions cost fewer tokens and are easier for agents to parse. Every sentence should earn its place.
Given the tool's complexity, does the description cover enough for an agent to succeed on first attempt?
For a tool with no annotations and no output schema, the description covers auth behavior, route restrictions, and the 'native request/response' return shape, which is what an agent needs to call it safely. It could still say more about failure modes and whether the raw vendor response is passed through unmodified.
Complex tools with many parameters or behaviors need more documentation. Simple tools need less. This dimension scales expectations accordingly.
Does the description clarify parameter syntax, constraints, interactions, or defaults beyond what the schema provides?
Schema coverage is already 100%, so the baseline is 3. The description adds value beyond the schema by listing the concrete set of valid vendor values (schema supplies only an example and no enum) and by clarifying the injected-credential context for the caller's path/method/body.
Input schemas describe structure but not intent. Descriptions should explain non-obvious parameter relationships and valid value ranges.
Does the description clearly state what the tool does and how it differs from similar tools?
States a specific verb and resource ('Call a vendor MANAGEMENT API') and enumerates the eight supported vendors, which sharply confines the scope. It is distinguishable from the generic sibling call_api by the vendor-managed credential model, though it never names that sibling explicitly.
Agents choose between tools based on descriptions. A clear purpose with a specific verb and resource helps agents select the right tool.
Does the description explain when to use this tool, when not to, or what alternatives exist?
Provides useful negative guidance by stating that destructive, billing, and member/admin routes are blocked, which tells the agent what will be rejected. It does not, however, say when to prefer this over call_api or the other vault tools, leaving the choice between siblings to inference.
Agents often have multiple tools that could apply. Explicit usage guidance like "use X instead of Y when Z" prevents misuse.
Tool Schema Changelog
Recent tool additions, removals, and schema changes observed during successful MCP inspections.
8 tool updates
- First observed
call_api - First observed
check_balance - First observed
get_vault_link - First observed
search_apis - First observed
secret_generate - First observed
secret_transfer - First observed
topup - First observed
vendor_call
Related MCP Connectors
Prepaid virtual cards for AI agents: one-time cards, spend caps, human approvals.
Verified, pay-per-use API tools for AI agents through one authenticated connection.
Discover, inspect and run 63,000+ agent tools from one balance. Pay per call, no subscriptions.
Pay-per-use tool API for AI agents. Free tier, x402 USDC micropayments, or API key.
Related MCP Servers
- AlicenseNot gradedqualityBmaintenanceGive your AI agent a prepaid card to pay per call for hundreds of paid services — no per-vendor signups or API keys.44MIT
- AlicenseAqualityFmaintenanceEnables AI agents to access paid tools like crypto prices, weather, translation, and web intelligence via per-request USDC payments on Base, with no API keys or subscriptions.1527 npmMIT
- AlicenseNot gradedqualityDmaintenanceEnables AI agents to pay for x402 pay-per-use services like web search, scraping, and screenshots using a simple API key and USD balance, without managing crypto wallets.6 npmMIT
- -licenseNot gradedqualityFmaintenanceEnables AI agents to manage and use prepaid virtual Visa cards with hard budget limits for secure online transactions. It provides tools for creating cards, checking balances, and retrieving payment credentials with human-in-the-loop approvals.1-
Glama MCP Gateway
Add one secure layer between your agents and this server.