settings — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited settings (Hook) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
One MCP + REST endpoint to 1385 tools from 400 providers. No signup, no subscription, no API key to start — pay per call in USDC (x402 on Base or MPP on Tempo).
Latest release: see the tag that equals package.json version; release notes in docs/releases/.
{
"mcpServers": {
"apibase": { "url": "https://apibase.pro/mcp" }
}
}That's the Claude Desktop config. Cursor, Windsurf, OpenAI Agents SDK, LangChain, Google ADK, CrewAI, Microsoft Copilot Studio, and plain REST: [apibase.pro/connect](https://apibase.pro/connect).
/mcp); revision 2026-07-28 is not served yet (the released SDK does not support it). Current list: protocolVersions in mcp.jsonAI payment for merchants: a merchant gets its own MCP storefront, and a buyer's agent gets a quote and pays in USDC (x402 on Base, MPP on Tempo) straight to the merchant wallet. Non-custodial; fee 0% during the pilot.
https://apibase.pro/r/<id>.json, see receipts./api/v1/tools/manifest.[Full framework guides →](https://apibase.pro/frameworks)
Registry listings: Smithery · Glama · MCP Registry (io.github.whiteknightonhorse/apibase) · PulseMCP · MPPScan
git clone https://github.com/whiteknightonhorse/APIbase.git && cd APIbase
cp .env.example .env # set POSTGRES_PASSWORD, X402_PAYMENT_ADDRESS, provider keys
docker compose -f docker-compose.yml -f docker-compose.prod.yml up -dFull prerequisites, verification steps, and config reference: docs/self-hosting.md.
Single Node.js/TypeScript API server, PostgreSQL as the append-only financial source of truth, Redis for cache/rate-limiting only, multi-container Docker stack on one Hetzner server. Every tool call runs the same multi-stage pipeline (escrow-first, idempotent, content-moderated, fail-closed on payment, cache and rate limit; the idempotency stage fails open on Redis errors) — dual-rail payments (self-hosted x402 facilitator + MPP), error-code contract, and full container/pipeline detail (exact counts, live): docs/architecture.md.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.