io. github. apihubio/ mcp-server
by apihubio · remote · no sign-in to list tools · v1.0.0 · published by GitHub user apihubio
Discover and pay for APIs with USDC credits. No wallet, no gas, MCP-native marketplace.
9 tools: 2 do something that can't be undone, 1 change things and 6 only read.
Scanned Oct 21, 2026
- Deletes or cancels0Claude Code: deny
- Can't be undone2Claude Code: ask: see these tools
- Changes things1Claude Code: ask: see these tools
- Only reads6Claude Code: allow: see these tools
No check matched anything in the tool definitions. No finding is not a safety guarantee. How the checks work.
claude mcp add --transport http apihubio https://mcp.apihub.io/mcpTools
Open a tool for its reasons and full description. Descriptions are the publisher's own words, shown as they are.
9 tools
Can't be undone 2Claude Code: ask
apihub_callSends payment.No findings
Why it is in this group
- The name "apihub_call" says "call": a word for a change.
- The description's first verb is "send": a word for sending, and what is sent cannot be taken back.
Description, as the server wrote it Sends payment. Calls a paid endpoint on an onboarded APIHub service. Debits the endpoint's price from your credit balance and forwards the request to the upstream provider. Returns an object with the upstream response body, HTTP status, and credits_charged_microdollars. Requires a valid API key and sufficient credit balance; if balance is insufficient the call returns a 402 with payment requirements (use apihub_topup to add credits, apihub_balance to check). Use this for services already onboarded to APIHub (find slugs via apihub_search or apihub_list_services); use apihub_call_external for arbitrary x402 URLs not onboarded here, or apihub_read_content for content gateways.
apihub_topupPurchase APIHub credits via x402 (USDC on Base).No findings
Why it is in this group
- The name "apihub_topup" says "topup": a word that usually means money moves, which cannot be taken back.
Description, as the server wrote it Purchase APIHub credits via x402 (USDC on Base). Returns payment instructions including a web URL for browser-based payment, a CLI command, and raw x402 requirements for agents with wallet support. Credits are added to your account instantly once payment confirms on-chain.
Changes things 1Claude Code: ask
apihub_call_externalCall an external x402-protected URL (any provider in the marketplace or any x402 API).No findings
Why it is in this group
- The name "apihub_call_external" says "call": a word for a change.
Description, as the server wrote it Call an external x402-protected URL (any provider in the marketplace or any x402 API). APIHub pays the provider on your behalf using the platform wallet and debits your credit balance for the exact amount. No wallet or gas required.
Only reads 6Claude Code: allow
apihub_balanceRead-only.No findings
Why it is in this group
- The description's first verb is "read": a word for reading.
Description, as the server wrote it Read-only. Returns your current APIHub credit balance (in microdollars and USD), total lifetime spending (microdollars and USD), and total completed request count. Requires a valid API key. Use before apihub_call or apihub_call_external to confirm sufficient funds for a paid request, or periodically to audit usage. Does not modify state, send payments, or call upstream APIs; for top-ups use apihub_topup.
apihub_get_serviceGet full details for a specific API service including all endpoints, schemas, and pricing.No findings
Why it is in this group
- The name "apihub_get_service" says "get": a word for reading.
Description, as the server wrote it Get full details for a specific API service including all endpoints, schemas, and pricing.
apihub_list_servicesRead-only.No findings
Why it is in this group
- The name "apihub_list_services" says "list": a word for reading.
Description, as the server wrote it Read-only. Lists onboarded APIHub services alphabetically, returning each service's slug, name, description, category, provider, endpoint count, and lowest per-endpoint price in microdollars. No authentication required. Use this to browse the full onboarded catalog when you don't have a specific capability in mind; prefer apihub_search when filtering by query, category, or price. Does not include external x402 APIs (use apihub_search_external for those) and does not return endpoint-level details (use apihub_get_service for that).
apihub_read_contentRead web content through a paid content gateway.No findings
Why it is in this group
- The name "apihub_read_content" says "read": a word for reading.
Description, as the server wrote it Read web content through a paid content gateway. Returns clean, structured text extracted from the URL. Use this for content services (service_type = 'content').
apihub_searchRead-only.No findings
Why it is in this group
- The name "apihub_search" says "search": a word for reading.
Description, as the server wrote it Read-only. Searches onboarded APIHub services by free-text query, with optional category, price, and type filters. Returns up to 10 matches ranked by uptime and endpoint count, each with slug, description, endpoints array, min price in microdollars, provider name, and quality score. No authentication required. Use this when you need to find an API by capability; use apihub_list_services to browse without a query, apihub_search_external to include the external x402 catalog, or apihub_get_service when you already know a slug. Does not call any upstream API or debit credits.
apihub_search_externalSearch external x402-protected APIs (not operated by APIHub, but callable via credits).No findings
Why it is in this group
- The name "apihub_search_external" says "search": a word for reading.
Description, as the server wrote it Search external x402-protected APIs (not operated by APIHub, but callable via credits). Returns listings with endpoint counts, prices, and tx_count_7d (USDC payments received on Base in the last 7 days), most used first.
This is not a safety rating, and no finding is not a safety guarantee. The groups and findings come from fixed checks of the tool definitions the server returned on the date shown, not from its code or what it does when called. How the checks work.
Install
Pinned to version 1.0.0. Values in angle brackets are yours to fill in.
claude mcp add --transport http apihubio https://mcp.apihub.io/mcpRun in a terminal.
Claude Code permissions
Allow the reads, ask before a change, deny the deletes. Paste into .claude/settings.json.
{
"permissions": {
"allow": [
"mcp__apihubio__apihub_search",
"mcp__apihubio__apihub_list_services",
"mcp__apihubio__apihub_get_service",
"mcp__apihubio__apihub_search_external",
"mcp__apihubio__apihub_read_content",
"mcp__apihubio__apihub_balance"
],
"ask": [
"mcp__apihubio__apihub_call",
"mcp__apihubio__apihub_call_external",
"mcp__apihubio__apihub_topup"
],
"deny": []
}
}Tools that only read are allowed, tools that change things ask first, tools that delete or cancel are denied. It assumes the server is installed as apihubio. Review it before you use it.
