Apimesh

io.github.mbeato由 GitHub 帳號 mbeato 發布v1.8.2更新於 Oct 24, 2026

74 paid web-analysis APIs (SEO, security, TLS, DNS, email) as MCP tools. USDC via x402.

概覽

AI 產生的概覽

把付費的網站分析 API(SEO、安全、TLS、DNS、電子郵件、開發工具)包裝成 MCP 工具,按次以 USDC 或信用卡付費。

可以做什麼
  • 執行網站稽核:Core Web Vitals、安全標頭、SEO、可索引性、重新導向鏈、技術堆疊、favicon 與 HTTP 狀態
  • 檢查網域與電子郵件:SPF/DKIM/DMARC、MX 記錄、電子郵件驗證、WHOIS/DNS/SSL 情報、品牌名稱可用性
  • 提供開發工具:正規表達式產生、YAML 驗證、模擬 JWT 產生、User-Agent 解析、狀態碼查詢、OpenAPI 文件產生
  • 檢查服務健康狀態,並驗證 robots.txt、sitemap.xml、openapi.json 等網路資源
  • 查詢錢包消費摘要、交易紀錄與消費上限
適用情境
適合需要隨選進行網站稽核、SEO 或安全標頭檢查、網域與電子郵件驗證,或使用小型開發工具,又不想分別註冊多項服務的情況。免費預覽端點可先試用再付費。
執行需求
透過 npx 從 npm 套件 @mbeato/apimesh-mcp-server 在本機執行(需要 Node.js),並需能連線 apimesh.xyz 的端點。付費呼叫需要付款方式:透過 x402 的 X-PAYMENT 標頭使用 Base 上的 USDC、Stripe 信用卡付款,或購買額度後使用 API key。未宣告任何環境變數。
安裝前請注意
多數工具按次收費(約 0.001 至 0.01 美元),助理可能產生實際支出,包括透過加密貨幣自動付款;建議在錢包上設定消費上限。付款簽章涉及錢包與 Base 上的 USDC。送出的網址、網域與電子郵件會傳送給第三方服務。部分 API 由自動化流程產生並部署,沒有真人審核。

安裝

在 SourceWeft 中

  1. 開啟 儀表板中的 Apimesh,將其新增到工作區。
  2. 為需要使用其工具的對話啟用該服務。

Desktop only,透過 STDIO。 STDIO 服務會啟動本機處理程序,因此需要 SourceWeft 桌面主機。

其他 MCP 客戶端

參照 儲存庫 中的啟動說明。

README

[APIMesh]

APIMesh

[npm version] [npm downloads] [APIs] [MCP Tools] [License: MIT] [Payments]

Pay-per-call web analysis APIs for AI agents and developers. Security audits, performance monitoring, SEO analysis, email verification, tech stack detection, and more -- no signup required, just pay with USDC on Base and get your response.

APIMesh is a collection of 102 focused web analysis APIs, each on its own subdomain, with a 67-tool MCP server for direct use in Claude, Cursor, Windsurf, Cline, and any MCP-compatible client. Every endpoint supports three payment methods: crypto micropayments via x402, card payments via Stripe MPP, and traditional API keys via Stripe checkout.

Live Site -- Dashboard -- npm -- MCP Registry -- Smithery


Quick Start

Try free previews (no payment, no signup)

bash
curl https://core-web-vitals.apimesh.xyz/preview?url=https://example.comcurl https://security-headers.apimesh.xyz/preview?url=https://example.comcurl https://seo-audit.apimesh.xyz/preview?url=https://example.comcurl https://check.apimesh.xyz/preview?name=myapp

Install the MCP server

One command to add all 67 tools to your AI coding assistant:

bash
npx @mbeato/apimesh-mcp-server

Or add to your MCP client config (claude_desktop_config.json, .cursor/mcp.json, etc.):

json
{  "mcpServers": {    "apimesh": {      "command": "npx",      "args": ["@mbeato/apimesh-mcp-server"]    }  }}

Direct API usage

bash
# 1. Hit any paid endpoint -- returns 402 with payment detailscurl https://core-web-vitals.apimesh.xyz/check?url=https://example.com
# 2. Include x402 payment header -- returns the full responsecurl -H "X-PAYMENT: <signed-usdc-payment>" \  https://core-web-vitals.apimesh.xyz/check?url=https://example.com

All APIs

Every API lives on its own subdomain: https://{api-name}.apimesh.xyz

Web Analysis APIs

APIEndpointPriceDescription
Core Web VitalsGET /check?url=$0.005Lighthouse scores, LCP, CLS, INP field data, performance/accessibility/SEO grades
Security HeadersGET /check?url=$0.005Audit 10 HTTP security headers with A+ to F grading and remediation tips
SEO AuditGET /check?url=$0.003On-page SEO analysis: title, meta, headings, images, links, OG tags, JSON-LD (0-100 score)
Email SecurityGET /check?domain=$0.01SPF, DKIM (probes 10 selectors), DMARC, MX records with provider detection
Brand AssetsGET /check?domain=$0.002Extract logos, favicons, theme colors, OG images, site name from any domain
Redirect ChainGET /check?url=$0.001Trace full redirect chain with per-hop status codes, latency, and loop detection
IndexabilityGET /check?url=$0.0015-layer analysis: robots.txt, HTTP status, meta robots, X-Robots-Tag, canonical
Web CheckerGET /check?name=$0.005Brand name availability across 5 TLDs, GitHub, npm, PyPI, Reddit
HTTP StatusGET /check?url=$0.001Live HTTP status check with optional expected status code
Favicon CheckerGET /check?url=$0.001Check favicon existence, URL, and format
Health CheckPOST /check$0.003Parallel health check for up to 10 service URLs
Robots.txt ParserGET /analyze?url=$0.001Parse robots.txt into structured rules, sitemaps, and crawl directives
Email VerifyGET /check?email=$0.001Syntax validation, MX check, disposable domain detection, role-address, deliverability
Tech StackGET /check?url=$0.003Detect CMS, frameworks, analytics, CDN, hosting, JS libraries from headers + HTML

Developer Utility APIs

APIEndpointPriceDescription
Regex BuilderPOST /build$0.002Generate and test regex patterns from natural language descriptions
YAML ValidatorPOST /validate$0.002Validate YAML syntax and structure
Mock JWT GeneratorPOST /generate$0.001Generate test JWTs with custom claims and expiry
User Agent AnalyzerGET /analyze?ua=$0.002Parse user agent strings into browser, OS, device, and bot info
Status Code CheckerGET /check?code=$0.001Lookup HTTP status code meaning and usage
Swagger Docs CreatorPOST /generate$0.002Generate OpenAPI 3.0 documentation for your API endpoints

Autonomously Built APIs

These APIs were built, tested, and deployed by APIMesh's autonomous brain loop — no human wrote the code:

APIEndpointPriceDescription
Web Resource ValidatorGET /validate?resource=$0.005Validate presence of robots.txt, sitemap.xml, openapi.json, agent.json
Website Security Header InfoGET /check?url=$0.01Analyze security-related HTTP headers (CSP, HSTS, X-Frame-Options, etc.)
Website Vulnerability ScanGET /scan?url=$0.01Comprehensive security audit combining SSL, headers, cookies, and CSP analysis
SEO Health AnalyzerGET /check?url=$0.0055-layer indexability analysis with robots.txt, meta robots, and canonical checks
Comprehensive Site AuditGET /check?url=$0.01Multi-signal website audit combining health, security, performance, and tech stack
Performance Structure ReportGET /check?url=$0.01Deep performance audit with network tracing, asset analysis, and server headers
Domain Authenticity VerifyGET /check?domain=$0.005Multi-signal domain legitimacy verification via WHOIS, DNS, SSL, and web presence
Performance and Availability ReportGET /check?url=$0.005Website performance metrics, uptime history from DNS and server response analysis
Domain Intelligence AggregatorGET /check?domain=$0.005WHOIS, DNS records, SSL certificates, and historical analysis in a single report

New APIs are added automatically as the brain discovers demand and builds solutions. See How the Brain Works below.

Wallet & Spend Tracking (free, no auth)

EndpointDescription
GET /wallet/{address}Spend summary (daily/7d/30d), active spend cap, recent requests
GET /wallet/{address}/historyPaginated transaction history, filterable by API
PUT /wallet/{address}/capSet daily/monthly spend caps on your wallet

Payment Methods

APIMesh supports three ways to pay:

1. x402 -- crypto micropayments (default)

Agent request --> 402 Payment Required (price, wallet, network)                  Agent signs USDC on Base --> includes X-PAYMENT header                  Server verifies via Coinbase CDP --> returns response

No accounts. No API keys. No subscriptions. The agent handles payment autonomously.

  • Protocol: x402 (open standard)
  • Currency: USDC on Base (chain ID 8453)
  • Facilitator: Coinbase CDP

2. MPP -- Stripe Machine Payments Protocol

Stripe MPP enables AI agents to pay with cards or stablecoins through Stripe's infrastructure.

3. API key + credits

Traditional auth for developers who prefer it. Purchase credits via Stripe checkout and include your API key in requests.


Discovery & Integration

ChannelLink
npm@mbeato/apimesh-mcp-server
MCP Registryio.github.mbeato/apimesh
Smitheryapimesh-mcp-server
x402scanapimesh
x402 discoveryhttps://apimesh.xyz/.well-known/x402
AI docshttps://apimesh.xyz/llms.txt
AI pluginhttps://apimesh.xyz/.well-known/ai-plugin.json

Most APIs offer free /preview endpoints so agents can verify functionality before paying. Every API has free /health and / info endpoints.


The Autonomous Brain

APIMesh has an autonomous build loop that runs daily on the server. It discovers demand, generates APIs, tests them, and deploys to production — no human in the loop. It also maintains the awesome-mpp ecosystem directory.

Monitor → Scanner → Scout → Build → Security Audit → Staging → Prod  │         │        │          │              │        │  │         │        │          │              │        └─ verify health  ��         │        │          │              └─ deploy + test endpoints  │         │        │          └─ static analysis (secrets, SSRF, eval, etc.)  │         │        └─ LLM generates multi-file Hono API (up to 6 retries)  │         └─ gather market signals, score opportunities with LLM  └─ check API health, revenue, error rates

Hardened against prompt injection: external signal data is sanitized, LLM prompts use system-role security rules, generated code is audited for 14+ vulnerability patterns, and the test environment is sandboxed with .env isolation.

The brain currently uses OpenAI (gpt-4.1-mini) for code generation and scores opportunities based on demand, implementation depth, and competitive differentiation.


Tech Stack

  • Bun -- runtime and bundler
  • Hono -- web framework
  • x402 + MPP -- payment protocols
  • Caddy -- reverse proxy with automatic HTTPS
  • SQLite -- analytics and usage tracking
  • OpenAI -- autonomous API generation

Related

  • awesome-mpp -- the MPP ecosystem registry (100+ projects)

Contributing

Contributions are welcome. If you find a bug or want to suggest a new API tool, open an issue or start a discussion.

To run locally:

bash
git clone https://github.com/mbeato/APIMesh.gitcd conwaybun installbun --hot apis/router.ts

License

MIT

來源:README.md,提交 b0d111f

工具

0
SourceWeft 尚未在沙箱中啟動過該軟體包,因此其工具未知。

版本歷史

1
  1. v1.8.2最新Sep 16, 2026

評分

已滿足適用檢查項的 50%

該評分衡量此收錄條目的完整程度,依據註冊中心條目、端點與公開來源計算得出。它不是對伺服器本身的評價,也不表示伺服器安全或目前可用:可連通性是帶日期的檢查結果,評分也不包含安裝量或使用者評價。

  • 近 30 天內可連通25 分

    請保持端點能夠回應 MCP 握手;SourceWeft 每 30 天探測一次。

  • 已宣告認證方式10 分

    請在註冊中心條目中宣告憑證請求標頭,或保持端點能夠回應探測,以便判定其認證方式。

  • 已列出工具15 分

    請讓伺服器在無憑證時回應 tools/list,或發布可在沙箱中無憑證啟動的軟體包。

  • 描述必需15 分
  • 圖示10 分
  • 文件15 分
  • 授權條款10 分