API Tools

passfa.st

An MCP server for generating, retrieving, and managing wallet passes via an API, including batch generation of up to 100 passes.

1 endpoint47 known toolsFirst detected September 22, 2026Last detected September 22, 2026

ENDPOINT 1

https://passfa.st/mcp

No auth detected

MCP server metadata

Name: passfast
Version: 1.0.0

Capabilities

tools

Server instructions

PassFast MCP exposes the public PassFast HTTP API as tools named after OpenAPI operationIds (https://passfa.st/openapi.yaml). Authenticate by pasting a secret key once in the MCP client config: Authorization: Bearer sk_live_… Omit X-App-Id by default; set it only for multi-app orgs. initialize and tools/list validate the key the same way as tools/call (invalid or revoked sk_live_ is rejected). No OAuth, no PassFast agent account, no chat UI — the agent is the MCP client (Cursor / Claude / ChatGPT / Codex / Grok). This server accepts only sk_live_, never pk_live_. Do not invent endpoints. Tool names match operationIds exactly. Member and invitation tools (listMembers, inviteMember, acceptInvitation, updateMemberRole, removeMember, listInvitations, revokeInvitation) require a user JWT and are out of scope for key-auth MCP v1. Use the dashboard or HTTP API with a session JWT. generatePass and batchGeneratePasses bill and rate-limit exactly as the HTTP API does — there is no extra MCP spend. First 100 generates are free once; then $0.015 per active pass / month. Expired passes still bill until voided or deleted. batchGeneratePasses proxies POST https://passfa.st/api/passes/batch (max 100 rows, same free-100 / card gates; 101 rows → 400 row_limit_exceeded). Install docs: https://passfa.st/docs/mcp

Known tools 47

generatePass

Generate a wallet pass Generates a wallet pass from a published template.

Inferred read-only

getBatchGenerateLimits

Batch generate limits Public metadata for `POST /passes/batch`.

Potential side effects

batchGeneratePasses

Batch generate wallet passes Generate up to 100 wallet passes in one **synchronous** request.

Inferred read-only

listPasses

List passes Returns a paginated list of passes for the current app.

Inferred read-only

getPass

Get a pass Returns the full details of a single pass.

Inferred read-only

updatePass

Update a pass Updates the dynamic data of an active pass.

Potential side effects

getPassBySerial

Get a pass by serial number Returns the full details of a single pass looked up by serial number.

Inferred read-only

updatePassBySerial

Update a pass by serial number Updates the dynamic data of an active pass looked up by serial number.

Potential side effects

downloadPassBySerial

Download a .

Inferred read-only

voidPassBySerial

Void a pass by serial number Marks a pass (looked up by serial number) as invalidated and rebuilds the `.

Inferred read-only

downloadPass

Download a .

Inferred read-only

voidPass

Void a pass Marks a pass as invalidated and rebuilds the `.

Inferred read-only

createTemplate

Create a template Creates a new pass template in draft status.

Potential side effects

listTemplates

List templates Returns all templates for the current app.

Inferred read-only

getTemplate

Get a template Returns the full details of a single template.

Inferred read-only

updateTemplate

Update a template Updates a draft template.

Potential side effects

deleteTemplate

Delete a template Soft-deletes a template by marking it as archived.

Potential side effects

publishTemplate

Publish a template Publishes a draft template, making it available for pass generation.

Potential side effects

uploadImage

Upload an image Uploads an image for use in pass templates or per-pass strip overrides.

Potential side effects

listImages

List images Returns all images for the current app, including signed preview URLs.

Inferred read-only

deleteImage

Delete an image Deletes an image (storage file + DB row).

Potential side effects

getImageUsage

Get image usage / reference counts Report how an image is referenced across templates and passes.

Inferred read-only

uploadP12Certificate

Upload a .

Potential side effects

uploadCertificate

Upload a single certificate Uploads a single PEM-encoded certificate or key.

Potential side effects

listCertificates

List certificates Returns all certificates for the current app.

Inferred read-only

deleteCertificate

Delete a certificate Deletes a certificate.

Potential side effects

uploadGoogleCredentials

Upload Google credentials Uploads Google service account credentials for Google Wallet pass signing.

Potential side effects

listGoogleCredentials

List Google credentials Returns all active Google Wallet credentials for the current app.

Inferred read-only

deactivateGoogleCredential

Deactivate Google credential Deactivates a Google Wallet credential.

Inferred read-only

testGoogleConnection

Test Google connection Tests the configured Google Wallet credentials by attempting to authenticate with the Google Wallet API.

Inferred read-only

testAppleCertificates

Test Apple certificates Generates an ephemeral test `.

Inferred read-only

getOrganization

Get organization details Returns the current organization's settings.

Inferred read-only

updateOrganization

Update organization settings Updates the current organization's settings, including APNs credentials.

Potential side effects

getApp

Get current app details Returns the current app's settings.

Inferred read-only

createApp

Create a new app Creates a new app within the organization.

Potential side effects

updateApp

Update app settings Updates the current app's settings, including webhook configuration.

Potential side effects

deleteApp

Deactivate an app Deactivates the current app.

Inferred read-only

testWebhook

Test the validation webhook Sends a sample validation webhook payload to the configured URL and returns the result.

Inferred read-only

getManagedSigningStatus

Check managed signing availability Returns whether managed (platform) signing credentials are available for Apple and Google wallets.

Inferred read-only

listWebhookEvents

List webhook events Returns a paginated list of webhook event delivery records for the current app.

Inferred read-only

listApiKeys

List API keys Returns all API keys for the current organization.

Inferred read-only

createApiKey

Create an API key Creates a new API key.

Potential side effects

revokeApiKey

Revoke an API key Revokes an API key, making it inactive.

Inferred read-only

deleteApiKey

Delete an API key Permanently deletes an API key.

Potential side effects

createShareToken

Create a share token Creates a public share token for a pass, enabling distribution via URL, QR code, or messaging.

Potential side effects

getSharePassMetadata

Get shared pass metadata Returns public metadata for a shared pass.

Inferred read-only

downloadSharedPass

Download shared Apple .

Inferred read-only

CONNECT WITH APPROVAL

Client installation

Review this server and its permissions before adding it. Secret placeholders must be set locally.

Codex

~/.codex/config.toml

[mcp_servers.passfast]
url = "https://passfa.st/mcp"
enabled = true

Claude Code

.mcp.json

{
  "mcpServers": {
    "passfast": {
      "type": "http",
      "url": "https://passfa.st/mcp"
    }
  }
}

Claude Desktop

Settings → Connectors → Add custom connector

Name: passfast
Remote MCP URL: https://passfa.st/mcp

Add this remote URL as a custom connector in Claude Desktop. Availability depends on the user plan and workspace policy.

Cursor

.cursor/mcp.json

{
  "mcpServers": {
    "passfast": {
      "url": "https://passfa.st/mcp"
    }
  }
}

Visual Studio Code

.vscode/mcp.json

Add to Visual Studio Code

{
  "servers": {
    "passfast": {
      "type": "http",
      "url": "https://passfa.st/mcp"
    }
  }
}

Generic MCP

Client-specific MCP configuration

{
  "name": "passfast",
  "transport": "streamable-http",
  "url": "https://passfa.st/mcp"
}

MCP Inspector

Run the official MCP Inspector locally and enter the indexed Streamable HTTP endpoint.

TRUST AND VERIFICATION EVIDENCE

Trust Data Available

BuiltWith Trust API v2 evidence for passfa.st was fetched 2026-09-23T13:27:56.847Z.

Trust status Neutral

passfa.st is assessed as Neutral: No suspicious signals found, but no strong positive signal either

Indexed

Evidence is source-attributed and does not guarantee that a third-party server is safe. Risk labels are conservative metadata heuristics.