SandBase MCP Server (SandBase CLI)

Why it got a B

SandBase's own Apache-2.0 TypeScript CLI (npm @sandbaseai/cli, about 190 GitHub stars). connect signs you in through the browser, saves a key in ~/.sandbase/credentials.json (owner-only) and adds a small stdio bridge to each AI client it finds; the bridge forwards calls to SandBase's hosted server over HTTPS. Seven tools: discover, inspect (input schema and live price), run, run status, run history, balance and cancel. sandbase_run is the one that costs money: 100 data API calls a day are free per organization, then every model or API call is billed from your prepaid balance. The server tells the AI to inspect the price first and marks run as destructive, so keep your client's approval prompt on for it. Its instructions also tell the AI it can upload a local file to a public URL from a shell, after asking you. Run connect with --client to change one client instead of every one it detects. No advisories on record. Biggest deduction: each sign-in key can spend your whole SandBase balance on any of the 2,000+ models and APIs (there are no scopes), so set a spending limit on it in the dashboard.