Search / io.github.TheSnakeFang/buyapi-mcp
protogridR0· no sign-inVendor intelligence for AI coding agents choosing developer tools and stacks.
v0.7.1 · active · repository · website · descriptor JSON · versions
{
"mcpServers": {
"buyapi-mcp": {
"type": "http",
"url": "https://buyapi.ai/api/mcp"
}
}
}claude mcp add --transport http buyapi-mcp https://buyapi.ai/api/mcp[mcp_servers.buyapi-mcp]
url = "https://buyapi.ai/api/mcp"
{
"$schema": "https://opencode.ai/config.json",
"mcp": {
"buyapi-mcp": {
"type": "remote",
"url": "https://buyapi.ai/api/mcp",
"enabled": true
}
}
}{
"mcpServers": {
"buyapi-mcp": {
"type": "http",
"url": "https://buyapi.ai/api/mcp"
}
},
"deeplink": "cursor://anysphere.cursor-deeplink/mcp/install?name=buyapi-mcp&config=eyJ0eXBlIjoiaHR0cCIsInVybCI6Imh0dHBzOi8vYnV5YXBpLmFpL2FwaS9tY3AifQ%3D%3D"
}{
"servers": {
"buyapi-mcp": {
"type": "http",
"url": "https://buyapi.ai/api/mcp"
}
}
}{
"mcpServers": {
"buyapi-mcp": {
"httpUrl": "https://buyapi.ai/api/mcp"
}
}
}extensions:
"buyapi-mcp":
enabled: true
name: "buyapi-mcp"
type: streamable_http
uri: "https://buyapi.ai/api/mcp"
timeout: 300
protocol.modernnewest supported version is 2025-11-25; 2026-07-28 not supported, older versions are deprecated until 2027-07-28protocol.statelessonly applies to 2026-07-28 serversprotocol.transportstreamable HTTPprotocol.list_ttlonly applies to 2026-07-28 serversauth.prm, auth.as_metadata, auth.cimdno remote uses OAuthauth.secret_in_urlno templated URLtools.descriptionsevery tool has a descriptiontools.description_lengthdescriptions are concisetools.schemasevery tool has an object input schematools.annotations7 of 7 tools declare readOnlyHint or destructiveHinttools.directory_hintsevery tool declares readOnlyHint, destructiveHint, idempotentHint and openWorldHinttools.token_costabout 2,138 tokens to load every tooltools.api_dumptools are not a one-to-one API dumpstability.changesno tool changes in 30 daysstability.rug_pullno tool changed its meaning under the same namedeps.known_vulnsno known advisory in 98 resolved packagesdeps.mcp_sdk_version@modelcontextprotocol/sdk 1.30.1 has 1 known advisory (GHSA-6qxp-vccf-f47h); update @modelcontextprotocol/sdk to 1.31.0 or laterdeps.resolvable[email protected] resolved: 98 packagesNo tool definition changes recorded. A server's first observation is its baseline; later probes record what changes.
Checks run on what our credential-free, read-only probes observe; tools are never called and no code audit is performed. How it is computed.
+repository +namespace-matches-repo +website +reachable +uptime-100% ~updated-169d-ago
Derived from observable signals (official registry feed and our own credential-free probes); no code audit performed. How it is computed.
[email protected] npm97 dependencies, resolved · MCP SDK @modelcontextprotocol/sdk 1.30.1 · advisories checked 2026-10-19
| advisory | severity | package | fixed in |
|---|---|---|---|
| GHSA-6qxp-vccf-f47hMCP TypeScript SDK: OAuth client could send credentials to an authorization server chosen by the MCP server | high | @modelcontextprotocol/[email protected]MCP SDK, direct | fixed in 1.31.0 |
Dependency graphs from deps.dev; advisories from OSV.dev, including the GitHub Advisory Database and the PyPI Advisory Database; all CC BY 4.0. The graph is what a clean install of this version resolves today; nothing was installed or run. How it is checked.
| remote | auth | reachable | uptime 30d | p50 | protocol | last ok |
|---|---|---|---|---|---|---|
https://buyapi.ai/api/mcp streamable-http | none | yes | 100% | 571 ms | 2025-11-25 | 2026-10-20 |
| package | registry | version | runtime | secrets |
|---|---|---|---|---|
buyapi | npm | 0.7.1 | npx |
stacks.findSimilarread-only | Finds reviewed public stack examples related to a vendor, or recent curated stack examples. Use this when the user asks who uses a tool, what similar builders use, or wants examples of real stack combinations. Do not use it as a generic recommendation tool. |
stacks.recommendread-only | Recommends a complete stack from BuyAPI's corpus with a structured decision matrix, cost estimate, assumptions, unknowns, alternatives, and sources. Use this when the user is starting a project or asks for a complete multi-layer stack choice. Do not use this for local coding/debugging/docs questions that do not involve software or vendor selection. Do not call vendors.resolve first; this tool handles retrieval and ranking. |
vendors.compareread-only | Compares two or more already-known BuyAPI vendors for a specific workload or decision. Use this when the candidate set is known, for head-to-head questions like "Convex vs Supabase vs Neon for a realtime SaaS" or "Stripe vs Paddle for a marketplace". If the user has not named candidates, use vendors.resolve first. |
vendors.detailsread-only | Follow-up tool for one known vendor. Retrieves detailed pricing, features, limits, gotchas, comparisons, and source provenance. Call vendors.resolve first unless the user already provided a BuyAPI vendor ID like /database/supabase. Use this after a candidate is selected and the user needs claim-level pricing, limit, gotcha, or provenance details. |
vendors.estimateCostread-only | Produces directional monthly cost estimates from BuyAPI pricing data and explicit workload inputs. Use this only when the user asks for cost math and provides explicit workload inputs. Missing workload fields are returned as assumptions or unknowns instead of being hallucinated. Treat results as BuyAPI claim-based estimate math; verify exact billing in first-party docs, vendor CLIs, or vendor MCPs before purchase or production decisions. |
vendors.evidenceread-only | Returns recent reviewed BuyAPI evidence rows for a vendor, category, stack, or comparison. Use this when the user asks why BuyAPI believes something, what sources support a recommendation, or what recent human/source/opinion/history signals exist. This is a trust and provenance follow-up, not the first recommendation tool. |
vendors.resolveread-only | First stop for category-specific vendor recommendations and vendor ID discovery. Finds BuyAPI vendor IDs for a user question; provide category when known. Use this when the user asks which provider in a category fits their constraints. With a covered category, the response includes ranked results plus a top-3 decision matrix with fit labels, confidence, tradeoffs, cost notes, freshness, and sources. Do not use this for local coding/debugging/docs questions unless they involve choosing a software vendor or tool. If the category is outside BuyAPI's corpus, the tool returns an explicit "not in corpus yet" result instead of inventing vendors. |
Schemas: list_tools.
{
"name": "io.github.TheSnakeFang/buyapi-mcp",
"title": "BuyAPI",
"$schema": "https://static.modelcontextprotocol.io/schemas/2025-12-11/server.schema.json",
"remotes": [
{
"url": "https://buyapi.ai/api/mcp",
"type": "streamable-http"
}
],
"version": "0.7.1",
"packages": [
{
"version": "0.7.1",
"transport": {
"type": "stdio"
},
"identifier": "buyapi",
"runtimeHint": "npx",
"registryType": "npm",
"packageArguments": [
{
"type": "positional",
"value": "mcp"
}
],
"runtimeArguments": [
{
"type": "positional",
"value": "-y"
}
]
}
],
"repository": {
"url": "https://github.com/TheSnakeFang/buyapi-mcp",
"source": "github"
},
"websiteUrl": "https://buyapi.ai",
"description": "Vendor intelligence for AI coding agents choosing developer tools and stacks."
}