trackmcp
Back to directory

APIMesh — 23 pay-per-call web analysis APIs + 16-tool MCP server with autonomous API generation. Security audits, SEO, tech stack detection. x402 + Stripe MPP payments.

6 stars TypeScriptOthers Updated Jul 6, 2026
agentic-aiai-agentautonomous-agentsbunhonollm-toolsmcp-servermicropaymentsopenapipay-per-usex402x402-apiai-agentsmcpmpppay-per-callstripeweb-analysisapiusdc

Documentation

APIMesh

npm version
npm downloads
APIs
MCP Tools
License: MIT
Payments

Pay-per-call web analysis APIs for AI agents and developers. Security audits, performance monitoring, SEO analysis, email verification, tech stack detection, and more -- no signup required, just pay with USDC on Base and get your response.

APIMesh is a collection of 102 focused web analysis APIs, each on its own subdomain, with a 67-tool MCP server for direct use in Claude, Cursor, Windsurf, Cline, and any MCP-compatible client. Every endpoint supports three payment methods: crypto micropayments via x402, card payments via Stripe MPP, and traditional API keys via Stripe checkout.

**Live Site** -- **Dashboard** -- **npm** -- **MCP Registry** -- **Smithery**


Quick Start

Try free previews (no payment, no signup)

bash
curl https://core-web-vitals.apimesh.xyz/preview?url=https://example.com
curl https://security-headers.apimesh.xyz/preview?url=https://example.com
curl https://seo-audit.apimesh.xyz/preview?url=https://example.com
curl https://check.apimesh.xyz/preview?name=myapp

Install the MCP server

One command to add all 67 tools to your AI coding assistant:

bash
npx @mbeato/apimesh-mcp-server

Or add to your MCP client config (`claude_desktop_config.json`, `.cursor/mcp.json`, etc.):

json
{
  "mcpServers": {
    "apimesh": {
      "command": "npx",
      "args": ["@mbeato/apimesh-mcp-server"]
    }
  }
}

Direct API usage

bash
# 1. Hit any paid endpoint -- returns 402 with payment details
curl https://core-web-vitals.apimesh.xyz/check?url=https://example.com

# 2. Include x402 payment header -- returns the full response
curl -H "X-PAYMENT: " \
  https://core-web-vitals.apimesh.xyz/check?url=https://example.com

All APIs

Every API lives on its own subdomain: `https://{api-name}.apimesh.xyz`

Web Analysis APIs

APIEndpointPriceDescription
Core Web Vitals`GET /check?url=`$0.005Lighthouse scores, LCP, CLS, INP field data, performance/accessibility/SEO grades
Security Headers`GET /check?url=`$0.005Audit 10 HTTP security headers with A+ to F grading and remediation tips
SEO Audit`GET /check?url=`$0.003On-page SEO analysis: title, meta, headings, images, links, OG tags, JSON-LD (0-100 score)
Email Security`GET /check?domain=`$0.01SPF, DKIM (probes 10 selectors), DMARC, MX records with provider detection
Brand Assets`GET /check?domain=`$0.002Extract logos, favicons, theme colors, OG images, site name from any domain
Redirect Chain`GET /check?url=`$0.001Trace full redirect chain with per-hop status codes, latency, and loop detection
Indexability`GET /check?url=`$0.0015-layer analysis: robots.txt, HTTP status, meta robots, X-Robots-Tag, canonical
Web Checker`GET /check?name=`$0.005Brand name availability across 5 TLDs, GitHub, npm, PyPI, Reddit
HTTP Status`GET /check?url=`$0.001Live HTTP status check with optional expected status code
Favicon Checker`GET /check?url=`$0.001Check favicon existence, URL, and format
Health Check`POST /check`$0.003Parallel health check for up to 10 service URLs
Robots.txt Parser`GET /analyze?url=`$0.001Parse robots.txt into structured rules, sitemaps, and crawl directives
Email Verify`GET /check?email=`$0.001Syntax validation, MX check, disposable domain detection, role-address, deliverability
Tech Stack`GET /check?url=`$0.003Detect CMS, frameworks, analytics, CDN, hosting, JS libraries from headers + HTML

Developer Utility APIs

APIEndpointPriceDescription
Regex Builder`POST /build`$0.002Generate and test regex patterns from natural language descriptions
YAML Validator`POST /validate`$0.002Validate YAML syntax and structure
Mock JWT Generator`POST /generate`$0.001Generate test JWTs with custom claims and expiry
User Agent Analyzer`GET /analyze?ua=`$0.002Parse user agent strings into browser, OS, device, and bot info
Status Code Checker`GET /check?code=`$0.001Lookup HTTP status code meaning and usage
Swagger Docs Creator`POST /generate`$0.002Generate OpenAPI 3.0 documentation for your API endpoints

Autonomously Built APIs

These APIs were built, tested, and deployed by APIMesh's autonomous brain loop — no human wrote the code:

APIEndpointPriceDescription
Web Resource Validator`GET /validate?resource=`$0.005Validate presence of robots.txt, sitemap.xml, openapi.json, agent.json
Website Security Header Info`GET /check?url=`$0.01Analyze security-related HTTP headers (CSP, HSTS, X-Frame-Options, etc.)
Website Vulnerability Scan`GET /scan?url=`$0.01Comprehensive security audit combining SSL, headers, cookies, and CSP analysis
SEO Health Analyzer`GET /check?url=`$0.0055-layer indexability analysis with robots.txt, meta robots, and canonical checks
Comprehensive Site Audit`GET /check?url=`$0.01Multi-signal website audit combining health, security, performance, and tech stack
Performance Structure Report`GET /check?url=`$0.01Deep performance audit with network tracing, asset analysis, and server headers
Domain Authenticity Verify`GET /check?domain=`$0.005Multi-signal domain legitimacy verification via WHOIS, DNS, SSL, and web presence
Performance and Availability Report`GET /check?url=`$0.005Website performance metrics, uptime history from DNS and server response analysis
Domain Intelligence Aggregator`GET /check?domain=`$0.005WHOIS, DNS records, SSL certificates, and historical analysis in a single report

New APIs are added automatically as the brain discovers demand and builds solutions. See How the Brain Works below.

Wallet & Spend Tracking (free, no auth)

EndpointDescription
`GET /wallet/{address}`Spend summary (daily/7d/30d), active spend cap, recent requests
`GET /wallet/{address}/history`Paginated transaction history, filterable by API
`PUT /wallet/{address}/cap`Set daily/monthly spend caps on your wallet

Payment Methods

APIMesh supports three ways to pay:

1. x402 -- crypto micropayments (default)

code
Agent request --> 402 Payment Required (price, wallet, network)
                  Agent signs USDC on Base --> includes X-PAYMENT header
                  Server verifies via Coinbase CDP --> returns response

No accounts. No API keys. No subscriptions. The agent handles payment autonomously.

  • Protocol: x402 (open standard)
  • Currency: USDC on Base (chain ID 8453)
  • Facilitator: Coinbase CDP

2. MPP -- Stripe Machine Payments Protocol

Stripe MPP enables AI agents to pay with cards or stablecoins through Stripe's infrastructure.

3. API key + credits

Traditional auth for developers who prefer it. Purchase credits via Stripe checkout and include your API key in requests.


Discovery & Integration

ChannelLink
npm`@mbeato/apimesh-mcp-server`
MCP Registry`io.github.mbeato/apimesh`
Smitheryapimesh-mcp-server
x402scanapimesh
x402 discovery`https://apimesh.xyz/.well-known/x402`
AI docs`https://apimesh.xyz/llms.txt`
AI plugin`https://apimesh.xyz/.well-known/ai-plugin.json`

Most APIs offer free `/preview` endpoints so agents can verify functionality before paying. Every API has free `/health` and `/` info endpoints.


The Autonomous Brain

APIMesh has an autonomous build loop that runs daily on the server. It discovers demand, generates APIs, tests them, and deploys to production — no human in the loop. It also maintains the awesome-mpp ecosystem directory.

code
Monitor → Scanner → Scout → Build → Security Audit → Staging → Prod
  │         │        │          │              │        │
  │         │        │          │              │        └─ verify health
  ��         │        │          │              └─ deploy + test endpoints
  │         │        │          └─ static analysis (secrets, SSRF, eval, etc.)
  │         │        └─ LLM generates multi-file Hono API (up to 6 retries)
  │         └─ gather market signals, score opportunities with LLM
  └─ check API health, revenue, error rates

Hardened against prompt injection: external signal data is sanitized, LLM prompts use system-role security rules, generated code is audited for 14+ vulnerability patterns, and the test environment is sandboxed with `.env` isolation.

The brain currently uses OpenAI (`gpt-4.1-mini`) for code generation and scores opportunities based on demand, implementation depth, and competitive differentiation.


Tech Stack

  • Bun -- runtime and bundler
  • Hono -- web framework
  • x402 + MPP -- payment protocols
  • Caddy -- reverse proxy with automatic HTTPS
  • SQLite -- analytics and usage tracking
  • OpenAI -- autonomous API generation

  • awesome-mpp -- the MPP ecosystem registry (100+ projects)

Contributing

Contributions are welcome. If you find a bug or want to suggest a new API tool, open an issue or start a discussion.

To run locally:

bash
git clone https://github.com/mbeato/APIMesh.git
cd conway
bun install
bun --hot apis/router.ts

License

MIT

Frequently asked questions

What is APIMesh?

APIMesh is APIMesh — 23 pay-per-call web analysis APIs + 16-tool MCP server with autonomous API generation. Security audits, SEO, tech stack detection. x402 + Stripe MPP payments.

How do I install APIMesh?

Open the GitHub repository and follow its README. Most MCP servers are added to your client's MCP config, then called by your agent.

Is APIMesh open source?

Yes — it is hosted on GitHub at https://github.com/mbeato/APIMesh and has 6 stars.

Related MCP tools

Run your own MCP server? See who uses it and what to fix.

Measure it with TrackMCP