Trustbase Lab · MCP Access
Our MCP data service is open to everyone: no sign-up, no key, free access to every published tool. An API key is an optional upgrade — calls are attributed to your key and the anonymous rate limit no longer applies. Keys are free as well, at least for this release.
中文 · MCP access docs · Usage board · Methodology
The tiers are functionally identical — a key unlocks no extra tools or data. It only changes attribution and rate limiting.
| Anonymous (default) | Keyed (optional) | |
|---|---|---|
| Cost | Free | Free (this release) |
| Requires | Nothing — call the endpoint right away | Email application, issued manually |
| Rate limit | 120 requests per minute per IP (burst protection) | Anonymous limit not applied |
| When limited | 429 + Retry-After, never a ban; works again once the window resets | — |
| Attribution | Salted hash (not reversible) | Per key (more accurate; shown on the usage board) |
| Tools | All published tools | All published tools |
business@trustbaselab.com and include: your use case (which kind of agent / application, which tools you plan to call); your organisation (optional); an rough expected call volume; and a reply address. Keys are issued manually after review. The full key appears exactly once in the issuance email — store it safely. We only keep a sha256 digest of the key (first 16 hex chars) and cannot recover the original; ask us to revoke and re-issue if it is lost or possibly leaked.Either standard header works with any MCP client:
Authorization: Bearer <your-key>X-API-Key: <your-key>X-Trustbase-Auth: anon (key_invalid). That header means the key is broken (mistyped or revoked); check it and retry. Rationale: a 401 would turn callers away, while anonymous fallback keeps the service uninterrupted and still makes the failure discoverable.The anonymous tier uses a sliding window (120 requests/min/IP). It is burst protection, not a quota: exceeding it returns 429 with a Retry-After header and instructions for requesting a key. No bans — once the window resets you can continue, or apply for a key to lift the constraint.
Metering follows exactly the same rules as the usage board: call metadata only (tool name, time, salted hash, success flag) — never the body of your queries. Free does not mean unmetered: the record itself is our public answer to who uses the service and how much. Terms: /terms · privacy: /privacy.
Trustbase Lab · independent third-party industry data infrastructure ｜ MCP endpoint: /ai ｜ usage board: /usage/en ｜ methodology: /methodology/en