# Reported issues for apibase

Pod holds 7 of 7 GitHub reports that passed its relevance review. This can include external user reports, maintainer-confirmed bugs, and concrete feature gaps. Treat them as evidence to inspect, not a count of distinct defects.

Back to [apibase](/mcp/apibase).

## Most discussed

### [Auto-Test] Score 96/100 (A) Verdict FAIL — 2026-09-02

[apibase tester] 🔴 VERDICT FAIL — score 96/100 (A) — https://apibase.pro
Verdict reasons:
  - 1 RED-class failure(s): P26/26.1 every public nginx location has a probed prefix
New failure(s) today (10):
  - P5|mpp-payment-summary: exp 3 paid, got 0/3
  - P6|x402-pay-anime.search: exp 200, got 502
  - P7|7.X request smuggling: exp !500, got TIMEOUT
  - P9|9.4 CRLF-injection: exp !200, got TIMEOUT
  - P16|16.21 new tools in catalog: exp 6/6, got 3/6
  - P16|16.21b all platform tools free: exp…

[Read the thread](https://github.com/whiteknightonhorse/APIbase/issues/265) · 2026-09-02 · open · 25 comments

### 🚫 False-onboard: zippopotam

Agent reported ONBOARD_OK but verification (adapter index.ts + tool_provider_config row) failed. Needs manual look or retry.

[Read the thread](https://github.com/whiteknightonhorse/APIbase/issues/321) · 2026-09-21 · open · 4 comments

### 🚫 False-onboard: usgs-earthquakes

Agent reported ONBOARD_OK but verification (adapter index.ts + tool_provider_config row) failed. Needs manual look or retry.

[Read the thread](https://github.com/whiteknightonhorse/APIbase/issues/318) · 2026-09-17 · open · 3 comments

### 🚫 Suspicious onboard: zippopotam

Onboard exited rc=0 but its log has no ONBOARD_OK/ONBOARD_FAILED status line. Needs manual look.

[Read the thread](https://github.com/whiteknightonhorse/APIbase/issues/337) · 2026-09-28 · open · 0 comments

### [Security Audit] CRITICAL — 1C/0H/1M findings — 2026-09-27

## Weekly Security Audit — CRITICAL

**Date:** 2026-09-27T04:00:07Z
**Findings:** 1 CRITICAL, 0 HIGH, 1 MEDIUM

### Findings

- **CRITICAL**: MCP Payment Bypass — Paid tool returned data without payment via MCP
- **MEDIUM**: console.log — 2 instances in production code

### Action Required
- **IMMEDIATE:** Critical vulnerabilities require immediate fix

- **SOON:** Medium issues should be reviewed this week

### How to Fix
Run `/security` skill in Claude Code for full audit with auto-fix.

---…

[Read the thread](https://github.com/whiteknightonhorse/APIbase/issues/335) · 2026-09-27 · open · 0 comments

### [Security Audit] CRITICAL — 1C/0H/1M findings — 2026-09-20

## Weekly Security Audit — CRITICAL

**Date:** 2026-09-20T04:00:06Z
**Findings:** 1 CRITICAL, 0 HIGH, 1 MEDIUM

### Findings

- **CRITICAL**: MCP Payment Bypass — Paid tool returned data without payment via MCP
- **MEDIUM**: console.log — 2 instances in production code

### Action Required
- **IMMEDIATE:** Critical vulnerabilities require immediate fix

- **SOON:** Medium issues should be reviewed this week

### How to Fix
Run `/security` skill in Claude Code for full audit with auto-fix.

---…

[Read the thread](https://github.com/whiteknightonhorse/APIbase/issues/319) · 2026-09-20 · open · 0 comments

### [Security Audit] CRITICAL — 1C/0H/1M findings — 2026-09-13

## Weekly Security Audit — CRITICAL

**Date:** 2026-09-13T04:00:06Z
**Findings:** 1 CRITICAL, 0 HIGH, 1 MEDIUM

### Findings

- **CRITICAL**: MCP Payment Bypass — Paid tool returned data without payment via MCP
- **MEDIUM**: console.log — 2 instances in production code

### Action Required
- **IMMEDIATE:** Critical vulnerabilities require immediate fix

- **SOON:** Medium issues should be reviewed this week

### How to Fix
Run `/security` skill in Claude Code for full audit with auto-fix.

---…

[Read the thread](https://github.com/whiteknightonhorse/APIbase/issues/311) · 2026-09-13 · open · 0 comments

## Most recent

The remaining reports are on [the project's issue tracker](https://github.com/whiteknightonhorse/APIbase/issues).