<p align="center">
<a href="https://apimesh.xyz">

</a>
</p>
<h1 align="center">APIMesh</h1>

Pay-per-call web analysis APIs for AI agents and developers. Security audits, performance monitoring, SEO analysis, email verification, tech stack detection, and more -- no signup required, just pay with USDC on Base and get your response.

APIMesh is a collection of 102 focused web analysis APIs, each on its own subdomain, with a 67-tool MCP server for direct use in Claude, Cursor, Windsurf, Cline, and any MCP-compatible client. Every endpoint supports three payment methods: crypto micropayments via x402, card payments via Stripe MPP, and traditional API keys via Stripe checkout.

Live Site -- Dashboard -- npm -- MCP Registry -- Smithery

---

Quick Start

Try free previews (no payment, no signup)

curl https://core-web-vitals.apimesh.xyz/preview?url=https://example.com
curl https://security-headers.apimesh.xyz/preview?url=https://example.com
curl https://seo-audit.apimesh.xyz/preview?url=https://example.com
curl https://check.apimesh.xyz/preview?name=myapp

Install the MCP server

One command to add all 67 tools to your AI coding assistant:

npx @mbeato/apimesh-mcp-server

Or add to your MCP client config (claude_desktop_config.json, .cursor/mcp.json, etc.):

{
  "mcpServers": {
    "apimesh": {
      "command": "npx",
      "args": ["@mbeato/apimesh-mcp-server"]
    }
  }
}

Direct API usage

# 1. Hit any paid endpoint -- returns 402 with payment details
curl https://core-web-vitals.apimesh.xyz/check?url=https://example.com
2. Include x402 payment header -- returns the full response
curl -H "X-PAYMENT: <signed-usdc-payment>" \
  https://core-web-vitals.apimesh.xyz/check?url=https://example.com

---

All APIs

Every API lives on its own subdomain: https://{api-name}.apimesh.xyz

Web Analysis APIs

| API | Endpoint | Price | Description |
|-----|----------|-------|-------------|
| Core Web Vitals | GET /check?url= | $0.005 | Lighthouse scores, LCP, CLS, INP field data, performance/accessibility/SEO grades |
| Security Headers | GET /check?url= | $0.005 | Audit 10 HTTP security headers with A+ to F grading and remediation tips |
| SEO Audit | GET /check?url= | $0.003 | On-page SEO analysis: title, meta, headings, images, links, OG tags, JSON-LD (0-100 score) |
| Email Security | GET /check?domain= | $0.01 | SPF, DKIM (probes 10 selectors), DMARC, MX records with provider detection |
| Brand Assets | GET /check?domain= | $0.002 | Extract logos, favicons, theme colors, OG images, site name from any domain |
| Redirect Chain | GET /check?url= | $0.001 | Trace full redirect chain with per-hop status codes, latency, and loop detection |
| Indexability | GET /check?url= | $0.001 | 5-layer analysis: robots.txt, HTTP status, meta robots, X-Robots-Tag, canonical |
| Web Checker | GET /check?name= | $0.005 | Brand name availability across 5 TLDs, GitHub, npm, PyPI, Reddit |
| HTTP Status | GET /check?url= | $0.001 | Live HTTP status check with optional expected status code |
| Favicon Checker | GET /check?url= | $0.001 | Check favicon existence, URL, and format |
| Health Check | POST /check | $0.003 | Parallel health check for up to 10 service URLs |
| Robots.txt Parser | GET /analyze?url= | $0.001 | Parse robots.txt into structured rules, sitemaps, and crawl directives |
| Email Verify | GET /check?email= | $0.001 | Syntax validation, MX check, disposable domain detection, role-address, deliverability |
| Tech Stack | GET /check?url= | $0.003 | Detect CMS, frameworks, analytics, CDN, hosting, JS libraries from headers + HTML |

Developer Utility APIs

| API | Endpoint | Price | Description |
|-----|----------|-------|-------------|
| Regex Builder | POST /build | $0.002 | Generate and test regex patterns from natural language descriptions |
| YAML Validator | POST /validate | $0.002 | Validate YAML syntax and structure |
| Mock JWT Generator | POST /generate | $0.001 | Generate test JWTs with custom claims and expiry |
| User Agent Analyzer | GET /analyze?ua= | $0.002 | Parse user agent strings into browser, OS, device, and bot info |
| Status Code Checker | GET /check?code= | $0.001 | Lookup HTTP status code meaning and usage |
| Swagger Docs Creator | POST /generate | $0.002 | Generate OpenAPI 3.0 documentation for your API endpoints |

Autonomously Built APIs

These APIs were built, tested, and deployed by APIMesh's autonomous brain loop — no human wrote the code:

| API | Endpoint | Price | Description |
|-----|----------|-------|-------------|
| Web Resource Validator | GET /validate?resource= | $0.005 | Validate presence of robots.txt, sitemap.xml, openapi.json, agent.json |
| Website Security Header Info | GET /check?url= | $0.01 | Analyze security-related HTTP headers (CSP, HSTS, X-Frame-Options, etc.) |
| Website Vulnerability Scan | GET /scan?url= | $0.01 | Comprehensive security audit combining SSL, headers, cookies, and CSP analysis |
| SEO Health Analyzer | GET /check?url= | $0.005 | 5-layer indexability analysis with robots.txt, meta robots, and canonical checks |
| Comprehensive Site Audit | GET /check?url= | $0.01 | Multi-signal website audit combining health, security, performance, and tech stack |
| Performance Structure Report | GET /check?url= | $0.01 | Deep performance audit with network tracing, asset analysis, and server headers |
| Domain Authenticity Verify | GET /check?domain= | $0.005 | Multi-signal domain legitimacy verification via WHOIS, DNS, SSL, and web presence |
| Performance and Availability Report | GET /check?url= | $0.005 | Website performance metrics, uptime history from DNS and server response analysis |
| Domain Intelligence Aggregator | GET /check?domain= | $0.005 | WHOIS, DNS records, SSL certificates, and historical analysis in a single report |

New APIs are added automatically as the brain discovers demand and builds solutions. See How the Brain Works below.

Wallet & Spend Tracking (free, no auth)

| Endpoint | Description |
|----------|-------------|
| GET /wallet/{address} | Spend summary (daily/7d/30d), active spend cap, recent requests |
| GET /wallet/{address}/history | Paginated transaction history, filterable by API |
| PUT /wallet/{address}/cap | Set daily/monthly spend caps on your wallet |

---

Payment Methods

APIMesh supports three ways to pay:

1. x402 -- crypto micropayments (default)

Agent request --> 402 Payment Required (price, wallet, network)
                  Agent signs USDC on Base --> includes X-PAYMENT header
                  Server verifies via Coinbase CDP --> returns response

No accounts. No API keys. No subscriptions. The agent handles payment autonomously.

- Protocol: x402 (open standard)
- Currency: USDC on Base (chain ID 8453)
- Facilitator: Coinbase CDP

2. MPP -- Stripe Machine Payments Protocol

Stripe MPP enables AI agents to pay with cards or stablecoins through Stripe's infrastructure.

3. API key + credits

Traditional auth for developers who prefer it. Purchase credits via Stripe checkout and include your API key in requests.

---

Discovery & Integration

| Channel | Link |
|---------|------|
| npm | @mbeato/apimesh-mcp-server |
| MCP Registry | io.github.mbeato/apimesh |
| Smithery | apimesh-mcp-server |
| x402scan | apimesh |
| x402 discovery | https://apimesh.xyz/.well-known/x402 |
| AI docs | https://apimesh.xyz/llms.txt |
| AI plugin | https://apimesh.xyz/.well-known/ai-plugin.json |

Most APIs offer free /preview endpoints so agents can verify functionality before paying. Every API has free /health and / info endpoints.

---

The Autonomous Brain

APIMesh has an autonomous build loop that runs daily on the server. It discovers demand, generates APIs, tests them, and deploys to production — no human in the loop. It also maintains the awesome-mpp ecosystem directory.

Monitor → Scanner → Scout → Build → Security Audit → Staging → Prod
  │         │        │          │              │        │
  │         │        │          │              │        └─ verify health
  ��         │        │          │              └─ deploy + test endpoints
  │         │        │          └─ static analysis (secrets, SSRF, eval, etc.)
  │         │        └─ LLM generates multi-file Hono API (up to 6 retries)
  │         └─ gather market signals, score opportunities with LLM
  └─ check API health, revenue, error rates

Hardened against prompt injection: external signal data is sanitized, LLM prompts use system-role security rules, generated code is audited for 14+ vulnerability patterns, and the test environment is sandboxed with .env isolation.

The brain currently uses OpenAI (gpt-4.1-mini) for code generation and scores opportunities based on demand, implementation depth, and competitive differentiation.

---

Tech Stack

- Bun -- runtime and bundler
- Hono -- web framework
- x402 + MPP -- payment protocols
- Caddy -- reverse proxy with automatic HTTPS
- SQLite -- analytics and usage tracking
- OpenAI -- autonomous API generation

---

Related

- awesome-mpp -- the MPP ecosystem registry (100+ projects)

---

Contributing

Contributions are welcome. If you find a bug or want to suggest a new API tool, open an issue or start a discussion.

To run locally:

git clone https://github.com/mbeato/APIMesh.git
cd conway
bun install
bun --hot apis/router.ts

---

License

MIT