io.github.OrbisAPI/orbis-mcpfinance

Orbis API Marketplace

Flagged

8,000+ pay-per-call APIs via x402 USDC micropayments on Base. No API keys needed.

Our take

The listing presents as an 8,000+ API marketplace paid via x402 USDC micropayments, but the audit found awesome-list fork spam plus a dead product. The operator forked at least four curated lists (solana-awesome, awesome-solana-ai, Merit's awesome-agentic-commerce, solana-foundation/pay-skills) and committed Orbis self-insertions to their default branches in a single June 20 burst — none accepted upstream. Meanwhile orbisapi.com, the backend the npm bridge proxies every call to, serves a 'this app isn't live yet' placeholder, so the package doesn't function at all. The registry entry also demands a required, secret WALLET_PRIVATE_KEY that the shipped code never reads, and the API count inflates from 2,000 to 2,800 to 8,000 depending on where you look.

reviewed by hand · 2026-07-06

Something wrong or dead here? Report it

Verification record

last verified
yesterday
github stars
1
last commit
25 days ago
archived
no
license
MIT
downloads / wk
202
latest version
1.0.7
in registry since
2026-06-11

github.com/OrbisAPI/orbis-mcp