Orbis API Marketplace
Flagged8,000+ pay-per-call APIs via x402 USDC micropayments on Base. No API keys needed.
Our take
The listing presents as an 8,000+ API marketplace paid via x402 USDC micropayments, but the audit found awesome-list fork spam plus a dead product. The operator forked at least four curated lists (solana-awesome, awesome-solana-ai, Merit's awesome-agentic-commerce, solana-foundation/pay-skills) and committed Orbis self-insertions to their default branches in a single June 20 burst — none accepted upstream. Meanwhile orbisapi.com, the backend the npm bridge proxies every call to, serves a 'this app isn't live yet' placeholder, so the package doesn't function at all. The registry entry also demands a required, secret WALLET_PRIVATE_KEY that the shipped code never reads, and the API count inflates from 2,000 to 2,800 to 8,000 depending on where you look.
Verification record
- yesterday
- 1
- 25 days ago
- no
- MIT
- 202
- 1.0.7
- 2026-06-11