Apimesh

io.github.mbeato由 GitHub 账号 mbeato 发布v1.8.2更新于 Oct 24, 2026

74 paid web-analysis APIs (SEO, security, TLS, DNS, email) as MCP tools. USDC via x402.

已验证STDIO仅桌面网页搜索与抓取开发者工具安全与监控

概览

AI 生成的概览

把付费的网站分析 API（SEO、安全、TLS、DNS、邮箱、开发工具）封装为 MCP 工具，按次以 USDC 或银行卡付费。

可以做什么
  • 执行网站审计：Core Web Vitals、安全响应头、SEO、可索引性、重定向链、技术栈、favicon 与 HTTP 状态
  • 检查域名与邮箱：SPF/DKIM/DMARC、MX 记录、邮箱验证、WHOIS/DNS/SSL 情报、品牌名可用性
  • 提供开发工具：正则生成、YAML 校验、模拟 JWT 生成、User-Agent 解析、状态码查询、OpenAPI 文档生成
  • 检查服务健康状态，并校验 robots.txt、sitemap.xml、openapi.json 等网络资源
  • 查询钱包消费汇总、交易历史与消费上限
适用场景
适合需要按需进行网站审计、SEO 或安全响应头检查、域名与邮箱验证，或使用小型开发工具，又不想分别注册多项服务的场景。免费预览接口可先试用再付费。
运行要求
通过 npx 从 npm 包 @mbeato/apimesh-mcp-server 在本地运行（需要 Node.js），并需能访问 apimesh.xyz 的接口。付费调用需要支付方式：通过 x402 的 X-PAYMENT 头使用 Base 上的 USDC、Stripe 银行卡支付，或购买额度后使用 API key。未声明任何环境变量。
安装前请注意
多数工具按次收费（约 0.001 至 0.01 美元），助手可能产生真实支出，包括通过加密货币自动付款；建议在钱包上设置消费上限。支付签名涉及钱包和 Base 上的 USDC。提交的网址、域名和邮箱会发送给第三方服务。部分 API 由自动化流程生成并部署，无人工审核。

安装

在 SourceWeft 中

  1. 打开 控制台中的 Apimesh，将其添加到工作区。
  2. 为需要使用其工具的对话启用该服务。

Desktop only，通过 STDIO。 STDIO 服务会启动本地进程，因此需要 SourceWeft 桌面宿主。

其他 MCP 客户端

参照 仓库 中的启动说明。

README

[APIMesh]

APIMesh

[npm version] [npm downloads] [APIs] [MCP Tools] [License: MIT] [Payments]

Pay-per-call web analysis APIs for AI agents and developers. Security audits, performance monitoring, SEO analysis, email verification, tech stack detection, and more -- no signup required, just pay with USDC on Base and get your response.

APIMesh is a collection of 102 focused web analysis APIs, each on its own subdomain, with a 67-tool MCP server for direct use in Claude, Cursor, Windsurf, Cline, and any MCP-compatible client. Every endpoint supports three payment methods: crypto micropayments via x402, card payments via Stripe MPP, and traditional API keys via Stripe checkout.

Live Site -- Dashboard -- npm -- MCP Registry -- Smithery

Quick Start

Try free previews (no payment, no signup)

bash
curl https://core-web-vitals.apimesh.xyz/preview?url=https://example.comcurl https://security-headers.apimesh.xyz/preview?url=https://example.comcurl https://seo-audit.apimesh.xyz/preview?url=https://example.comcurl https://check.apimesh.xyz/preview?name=myapp

Install the MCP server

One command to add all 67 tools to your AI coding assistant:

bash
npx @mbeato/apimesh-mcp-server

Or add to your MCP client config (claude_desktop_config.json, .cursor/mcp.json, etc.):

json
{  "mcpServers": {    "apimesh": {      "command": "npx",      "args": ["@mbeato/apimesh-mcp-server"]    }  }}

Direct API usage

bash
# 1. Hit any paid endpoint -- returns 402 with payment detailscurl https://core-web-vitals.apimesh.xyz/check?url=https://example.com
# 2. Include x402 payment header -- returns the full responsecurl -H "X-PAYMENT: <signed-usdc-payment>" \  https://core-web-vitals.apimesh.xyz/check?url=https://example.com

All APIs

Every API lives on its own subdomain: https://{api-name}.apimesh.xyz

Web Analysis APIs

APIEndpointPriceDescription
Core Web VitalsGET /check?url=$0.005Lighthouse scores, LCP, CLS, INP field data, performance/accessibility/SEO grades
Security HeadersGET /check?url=$0.005Audit 10 HTTP security headers with A+ to F grading and remediation tips
SEO AuditGET /check?url=$0.003On-page SEO analysis: title, meta, headings, images, links, OG tags, JSON-LD (0-100 score)
Email SecurityGET /check?domain=$0.01SPF, DKIM (probes 10 selectors), DMARC, MX records with provider detection
Brand AssetsGET /check?domain=$0.002Extract logos, favicons, theme colors, OG images, site name from any domain
Redirect ChainGET /check?url=$0.001Trace full redirect chain with per-hop status codes, latency, and loop detection
IndexabilityGET /check?url=$0.0015-layer analysis: robots.txt, HTTP status, meta robots, X-Robots-Tag, canonical
Web CheckerGET /check?name=$0.005Brand name availability across 5 TLDs, GitHub, npm, PyPI, Reddit
HTTP StatusGET /check?url=$0.001Live HTTP status check with optional expected status code
Favicon CheckerGET /check?url=$0.001Check favicon existence, URL, and format
Health CheckPOST /check$0.003Parallel health check for up to 10 service URLs
Robots.txt ParserGET /analyze?url=$0.001Parse robots.txt into structured rules, sitemaps, and crawl directives
Email VerifyGET /check?email=$0.001Syntax validation, MX check, disposable domain detection, role-address, deliverability
Tech StackGET /check?url=$0.003Detect CMS, frameworks, analytics, CDN, hosting, JS libraries from headers + HTML

Developer Utility APIs

APIEndpointPriceDescription
Regex BuilderPOST /build$0.002Generate and test regex patterns from natural language descriptions
YAML ValidatorPOST /validate$0.002Validate YAML syntax and structure
Mock JWT GeneratorPOST /generate$0.001Generate test JWTs with custom claims and expiry
User Agent AnalyzerGET /analyze?ua=$0.002Parse user agent strings into browser, OS, device, and bot info
Status Code CheckerGET /check?code=$0.001Lookup HTTP status code meaning and usage
Swagger Docs CreatorPOST /generate$0.002Generate OpenAPI 3.0 documentation for your API endpoints

Autonomously Built APIs

These APIs were built, tested, and deployed by APIMesh's autonomous brain loop — no human wrote the code:

APIEndpointPriceDescription
Web Resource ValidatorGET /validate?resource=$0.005Validate presence of robots.txt, sitemap.xml, openapi.json, agent.json
Website Security Header InfoGET /check?url=$0.01Analyze security-related HTTP headers (CSP, HSTS, X-Frame-Options, etc.)
Website Vulnerability ScanGET /scan?url=$0.01Comprehensive security audit combining SSL, headers, cookies, and CSP analysis
SEO Health AnalyzerGET /check?url=$0.0055-layer indexability analysis with robots.txt, meta robots, and canonical checks
Comprehensive Site AuditGET /check?url=$0.01Multi-signal website audit combining health, security, performance, and tech stack
Performance Structure ReportGET /check?url=$0.01Deep performance audit with network tracing, asset analysis, and server headers
Domain Authenticity VerifyGET /check?domain=$0.005Multi-signal domain legitimacy verification via WHOIS, DNS, SSL, and web presence
Performance and Availability ReportGET /check?url=$0.005Website performance metrics, uptime history from DNS and server response analysis
Domain Intelligence AggregatorGET /check?domain=$0.005WHOIS, DNS records, SSL certificates, and historical analysis in a single report

New APIs are added automatically as the brain discovers demand and builds solutions. See How the Brain Works below.

Wallet & Spend Tracking (free, no auth)

EndpointDescription
GET /wallet/{address}Spend summary (daily/7d/30d), active spend cap, recent requests
GET /wallet/{address}/historyPaginated transaction history, filterable by API
PUT /wallet/{address}/capSet daily/monthly spend caps on your wallet

Payment Methods

APIMesh supports three ways to pay:

1. x402 -- crypto micropayments (default)

Agent request --> 402 Payment Required (price, wallet, network)                  Agent signs USDC on Base --> includes X-PAYMENT header                  Server verifies via Coinbase CDP --> returns response

No accounts. No API keys. No subscriptions. The agent handles payment autonomously.

  • Protocol: x402 (open standard)
  • Currency: USDC on Base (chain ID 8453)
  • Facilitator: Coinbase CDP

2. MPP -- Stripe Machine Payments Protocol

Stripe MPP enables AI agents to pay with cards or stablecoins through Stripe's infrastructure.

3. API key + credits

Traditional auth for developers who prefer it. Purchase credits via Stripe checkout and include your API key in requests.

Discovery & Integration

ChannelLink
npm@mbeato/apimesh-mcp-server
MCP Registryio.github.mbeato/apimesh
Smitheryapimesh-mcp-server
x402scanapimesh
x402 discoveryhttps://apimesh.xyz/.well-known/x402
AI docshttps://apimesh.xyz/llms.txt
AI pluginhttps://apimesh.xyz/.well-known/ai-plugin.json

Most APIs offer free /preview endpoints so agents can verify functionality before paying. Every API has free /health and / info endpoints.

The Autonomous Brain

APIMesh has an autonomous build loop that runs daily on the server. It discovers demand, generates APIs, tests them, and deploys to production — no human in the loop. It also maintains the awesome-mpp ecosystem directory.

Monitor → Scanner → Scout → Build → Security Audit → Staging → Prod  │         │        │          │              │        │  │         │        │          │              │        └─ verify health  ��         │        │          │              └─ deploy + test endpoints  │         │        │          └─ static analysis (secrets, SSRF, eval, etc.)  │         │        └─ LLM generates multi-file Hono API (up to 6 retries)  │         └─ gather market signals, score opportunities with LLM  └─ check API health, revenue, error rates

Hardened against prompt injection: external signal data is sanitized, LLM prompts use system-role security rules, generated code is audited for 14+ vulnerability patterns, and the test environment is sandboxed with .env isolation.

The brain currently uses OpenAI (gpt-4.1-mini) for code generation and scores opportunities based on demand, implementation depth, and competitive differentiation.

Tech Stack

  • Bun -- runtime and bundler
  • Hono -- web framework
  • x402 + MPP -- payment protocols
  • Caddy -- reverse proxy with automatic HTTPS
  • SQLite -- analytics and usage tracking
  • OpenAI -- autonomous API generation

Related

  • awesome-mpp -- the MPP ecosystem registry (100+ projects)

Contributing

Contributions are welcome. If you find a bug or want to suggest a new API tool, open an issue or start a discussion.

To run locally:

bash
git clone https://github.com/mbeato/APIMesh.gitcd conwaybun installbun --hot apis/router.ts

License

MIT

来源：README.md，提交 b0d111f

工具

0
SourceWeft 尚未在沙箱中启动过该软件包，因此其工具未知。

版本历史

1
  1. v1.8.2最新Sep 16, 2026

评分

已满足适用检查项的 50%

该评分衡量此收录条目的完整程度，依据注册中心条目、端点与公开来源计算得出。它不是对服务器本身的评价，也不表示服务器安全或当前可用：可连通性是带日期的检查结果，评分也不包含安装量或用户评价。

  • 近 30 天内可连通25 分

    请保持端点能够响应 MCP 握手；SourceWeft 每 30 天探测一次。

  • 已声明认证方式10 分

    请在注册中心条目中声明凭据请求头，或保持端点能够响应探测，以便判定其认证方式。

  • 已列出工具15 分

    请让服务器在无凭据时响应 tools/list，或发布可在沙箱中无凭据启动的软件包。

  • 描述必需15 分
  • 图标10 分
  • 文档15 分
  • 许可证10 分