Apimesh

io.github.mbeatoPublished by GitHub account mbeatov1.8.2Updated Oct 24, 2026

74 paid web-analysis APIs (SEO, security, TLS, DNS, email) as MCP tools. USDC via x402.

VerifiedSTDIODesktop onlyWeb Search & ScrapingDeveloper ToolsSecurity & Monitoring

Overview

AI-generated overview

Paid web-analysis APIs (SEO, security, TLS, DNS, email, dev utilities) exposed as MCP tools, paid per call with USDC or cards.

What you can do
  • Run website audits: Core Web Vitals, security headers, SEO, indexability, redirect chains, tech stack, favicons and HTTP status
  • Check domains and email: SPF/DKIM/DMARC, MX records, email verification, WHOIS/DNS/SSL intelligence, brand-name availability
  • Run developer utilities: regex building, YAML validation, mock JWT generation, user-agent parsing, status-code lookup, OpenAPI docs
  • Check service health and validate web resources such as robots.txt, sitemap.xml and openapi.json
  • Query wallet spend summaries, transaction history and spend caps
When to use it
Useful when an assistant needs on-demand website audits, SEO or security-header checks, domain and email verification, or small developer utilities without signing up for separate services. Free preview endpoints let you test an API before paying.
Requirements
Runs locally via npx from the npm package @mbeato/apimesh-mcp-server (Node.js). Network access to the apimesh.xyz endpoints is required. Paid calls need a payment method: USDC on Base via the x402 X-PAYMENT header, Stripe card payments, or an API key with purchased credits. No environment variables are declared.
Before you install
Most tools are paid per call (roughly $0.001 to $0.01), so an assistant can spend real money, including autonomously via crypto micropayments; set spend caps on the wallet. Payment signing involves a wallet and USDC on Base. Submitted URLs, domains and emails are sent to a third-party service. Some APIs are generated and deployed by an automated loop with no human review.

Installation

In SourceWeft

  1. Open Apimesh in the dashboard and add it to a workspace.
  2. Enable the server for the chats that should use its tools.

Desktop only via STDIO. STDIO servers start a local process, so they need the SourceWeft desktop host.

Other MCP clients

Follow the launch instructions in the repository.

README

[APIMesh]

APIMesh

[npm version] [npm downloads] [APIs] [MCP Tools] [License: MIT] [Payments]

Pay-per-call web analysis APIs for AI agents and developers. Security audits, performance monitoring, SEO analysis, email verification, tech stack detection, and more -- no signup required, just pay with USDC on Base and get your response.

APIMesh is a collection of 102 focused web analysis APIs, each on its own subdomain, with a 67-tool MCP server for direct use in Claude, Cursor, Windsurf, Cline, and any MCP-compatible client. Every endpoint supports three payment methods: crypto micropayments via x402, card payments via Stripe MPP, and traditional API keys via Stripe checkout.

Live Site -- Dashboard -- npm -- MCP Registry -- Smithery

Quick Start

Try free previews (no payment, no signup)

bash
curl https://core-web-vitals.apimesh.xyz/preview?url=https://example.comcurl https://security-headers.apimesh.xyz/preview?url=https://example.comcurl https://seo-audit.apimesh.xyz/preview?url=https://example.comcurl https://check.apimesh.xyz/preview?name=myapp

Install the MCP server

One command to add all 67 tools to your AI coding assistant:

bash
npx @mbeato/apimesh-mcp-server

Or add to your MCP client config (claude_desktop_config.json, .cursor/mcp.json, etc.):

json
{  "mcpServers": {    "apimesh": {      "command": "npx",      "args": ["@mbeato/apimesh-mcp-server"]    }  }}

Direct API usage

bash
# 1. Hit any paid endpoint -- returns 402 with payment detailscurl https://core-web-vitals.apimesh.xyz/check?url=https://example.com
# 2. Include x402 payment header -- returns the full responsecurl -H "X-PAYMENT: <signed-usdc-payment>" \  https://core-web-vitals.apimesh.xyz/check?url=https://example.com

All APIs

Every API lives on its own subdomain: https://{api-name}.apimesh.xyz

Web Analysis APIs

APIEndpointPriceDescription
Core Web VitalsGET /check?url=$0.005Lighthouse scores, LCP, CLS, INP field data, performance/accessibility/SEO grades
Security HeadersGET /check?url=$0.005Audit 10 HTTP security headers with A+ to F grading and remediation tips
SEO AuditGET /check?url=$0.003On-page SEO analysis: title, meta, headings, images, links, OG tags, JSON-LD (0-100 score)
Email SecurityGET /check?domain=$0.01SPF, DKIM (probes 10 selectors), DMARC, MX records with provider detection
Brand AssetsGET /check?domain=$0.002Extract logos, favicons, theme colors, OG images, site name from any domain
Redirect ChainGET /check?url=$0.001Trace full redirect chain with per-hop status codes, latency, and loop detection
IndexabilityGET /check?url=$0.0015-layer analysis: robots.txt, HTTP status, meta robots, X-Robots-Tag, canonical
Web CheckerGET /check?name=$0.005Brand name availability across 5 TLDs, GitHub, npm, PyPI, Reddit
HTTP StatusGET /check?url=$0.001Live HTTP status check with optional expected status code
Favicon CheckerGET /check?url=$0.001Check favicon existence, URL, and format
Health CheckPOST /check$0.003Parallel health check for up to 10 service URLs
Robots.txt ParserGET /analyze?url=$0.001Parse robots.txt into structured rules, sitemaps, and crawl directives
Email VerifyGET /check?email=$0.001Syntax validation, MX check, disposable domain detection, role-address, deliverability
Tech StackGET /check?url=$0.003Detect CMS, frameworks, analytics, CDN, hosting, JS libraries from headers + HTML

Developer Utility APIs

APIEndpointPriceDescription
Regex BuilderPOST /build$0.002Generate and test regex patterns from natural language descriptions
YAML ValidatorPOST /validate$0.002Validate YAML syntax and structure
Mock JWT GeneratorPOST /generate$0.001Generate test JWTs with custom claims and expiry
User Agent AnalyzerGET /analyze?ua=$0.002Parse user agent strings into browser, OS, device, and bot info
Status Code CheckerGET /check?code=$0.001Lookup HTTP status code meaning and usage
Swagger Docs CreatorPOST /generate$0.002Generate OpenAPI 3.0 documentation for your API endpoints

Autonomously Built APIs

These APIs were built, tested, and deployed by APIMesh's autonomous brain loop — no human wrote the code:

APIEndpointPriceDescription
Web Resource ValidatorGET /validate?resource=$0.005Validate presence of robots.txt, sitemap.xml, openapi.json, agent.json
Website Security Header InfoGET /check?url=$0.01Analyze security-related HTTP headers (CSP, HSTS, X-Frame-Options, etc.)
Website Vulnerability ScanGET /scan?url=$0.01Comprehensive security audit combining SSL, headers, cookies, and CSP analysis
SEO Health AnalyzerGET /check?url=$0.0055-layer indexability analysis with robots.txt, meta robots, and canonical checks
Comprehensive Site AuditGET /check?url=$0.01Multi-signal website audit combining health, security, performance, and tech stack
Performance Structure ReportGET /check?url=$0.01Deep performance audit with network tracing, asset analysis, and server headers
Domain Authenticity VerifyGET /check?domain=$0.005Multi-signal domain legitimacy verification via WHOIS, DNS, SSL, and web presence
Performance and Availability ReportGET /check?url=$0.005Website performance metrics, uptime history from DNS and server response analysis
Domain Intelligence AggregatorGET /check?domain=$0.005WHOIS, DNS records, SSL certificates, and historical analysis in a single report

New APIs are added automatically as the brain discovers demand and builds solutions. See How the Brain Works below.

Wallet & Spend Tracking (free, no auth)

EndpointDescription
GET /wallet/{address}Spend summary (daily/7d/30d), active spend cap, recent requests
GET /wallet/{address}/historyPaginated transaction history, filterable by API
PUT /wallet/{address}/capSet daily/monthly spend caps on your wallet

Payment Methods

APIMesh supports three ways to pay:

1. x402 -- crypto micropayments (default)

Agent request --> 402 Payment Required (price, wallet, network)                  Agent signs USDC on Base --> includes X-PAYMENT header                  Server verifies via Coinbase CDP --> returns response

No accounts. No API keys. No subscriptions. The agent handles payment autonomously.

  • Protocol: x402 (open standard)
  • Currency: USDC on Base (chain ID 8453)
  • Facilitator: Coinbase CDP

2. MPP -- Stripe Machine Payments Protocol

Stripe MPP enables AI agents to pay with cards or stablecoins through Stripe's infrastructure.

3. API key + credits

Traditional auth for developers who prefer it. Purchase credits via Stripe checkout and include your API key in requests.

Discovery & Integration

ChannelLink
npm@mbeato/apimesh-mcp-server
MCP Registryio.github.mbeato/apimesh
Smitheryapimesh-mcp-server
x402scanapimesh
x402 discoveryhttps://apimesh.xyz/.well-known/x402
AI docshttps://apimesh.xyz/llms.txt
AI pluginhttps://apimesh.xyz/.well-known/ai-plugin.json

Most APIs offer free /preview endpoints so agents can verify functionality before paying. Every API has free /health and / info endpoints.

The Autonomous Brain

APIMesh has an autonomous build loop that runs daily on the server. It discovers demand, generates APIs, tests them, and deploys to production — no human in the loop. It also maintains the awesome-mpp ecosystem directory.

Monitor → Scanner → Scout → Build → Security Audit → Staging → Prod  │         │        │          │              │        │  │         │        │          │              │        └─ verify health  ��         │        │          │              └─ deploy + test endpoints  │         │        │          └─ static analysis (secrets, SSRF, eval, etc.)  │         │        └─ LLM generates multi-file Hono API (up to 6 retries)  │         └─ gather market signals, score opportunities with LLM  └─ check API health, revenue, error rates

Hardened against prompt injection: external signal data is sanitized, LLM prompts use system-role security rules, generated code is audited for 14+ vulnerability patterns, and the test environment is sandboxed with .env isolation.

The brain currently uses OpenAI (gpt-4.1-mini) for code generation and scores opportunities based on demand, implementation depth, and competitive differentiation.

Tech Stack

  • Bun -- runtime and bundler
  • Hono -- web framework
  • x402 + MPP -- payment protocols
  • Caddy -- reverse proxy with automatic HTTPS
  • SQLite -- analytics and usage tracking
  • OpenAI -- autonomous API generation

Related

  • awesome-mpp -- the MPP ecosystem registry (100+ projects)

Contributing

Contributions are welcome. If you find a bug or want to suggest a new API tool, open an issue or start a discussion.

To run locally:

bash
git clone https://github.com/mbeato/APIMesh.gitcd conwaybun installbun --hot apis/router.ts

License

MIT

Source: README.md at commit b0d111f

Tools

0
SourceWeft has not started this package in its sandbox yet, so its tools are not known.

Version history

1
  1. v1.8.2LatestSep 16, 2026

Score

50% of the applicable checks met

How complete this listing is, computed from the registry entry, the endpoint and public sources. Not a rating of the server and not a statement that it is safe or working today: reachability is a dated check, and no installs or reviews go into the score.

  • Reached in the last 30 days25 pts

    Keep the endpoint answering the MCP handshake; SourceWeft probes it every 30 days.

  • Auth declared10 pts

    Declare the credential headers in the registry entry, or keep the endpoint answering the probe so its auth can be classified.

  • Tools listed15 pts

    Answer tools/list without a credential, or ship a package that starts in a sandbox without one.

  • DescriptionRequired15 pts
  • Logo10 pts
  • Documentation15 pts
  • License10 pts