APIMesh

Pay-per-call web analysis APIs for AI agents and developers. Security audits, performance monitoring, SEO analysis, email verification, tech stack detection, and more -- no signup required, just pay with USDC on Base and get your response.

APIMesh is a collection of 23 focused web analysis APIs, each on its own subdomain, with a 19-tool MCP server for direct use in Claude, Cursor, Windsurf, Cline, and any MCP-compatible client. Every endpoint supports three payment methods: crypto micropayments via x402, card payments via Stripe MPP, and traditional API keys via Stripe checkout.

Live Site -- Dashboard -- npm -- MCP Registry -- Smithery

---

Quick Start

Try free previews (no payment, no signup)

curl https://core-web-vitals.apimesh.xyz/preview?url=https://example.com
curl https://security-headers.apimesh.xyz/preview?url=https://example.com
curl https://seo-audit.apimesh.xyz/preview?url=https://example.com
curl https://check.apimesh.xyz/preview?name=myapp

Install the MCP server

One command to add all 19 tools to your AI coding assistant:

npx @mbeato/apimesh-mcp-server

Or add to your MCP client config (claude_desktop_config.json, .cursor/mcp.json, etc.):

{
  "mcpServers": {
    "apimesh": {
      "command": "npx",
      "args": ["@mbeato/apimesh-mcp-server"]
    }
  }
}

Direct API usage

# 1. Hit any paid endpoint -- returns 402 with payment details
curl https://core-web-vitals.apimesh.xyz/check?url=https://example.com

# 2. Include x402 payment header -- returns the full response
curl -H "X-PAYMENT: <signed-usdc-payment>" \
  https://core-web-vitals.apimesh.xyz/check?url=https://example.com

---

All APIs

Every API lives on its own subdomain: https://{api-name}.apimesh.xyz

Web Analysis APIs

| API | Endpoint | Price | Description | |-----|----------|-------|-------------| | Core Web Vitals | GET /check?url= | $0.005 | Lighthouse scores, LCP, CLS, INP field data, performance/accessibility/SEO grades | | Security Headers | GET /check?url= | $0.005 | Audit 10 HTTP security headers with A+ to F grading and remediation tips | | SEO Audit | GET /check?url= | $0.003 | On-page SEO analysis: title, meta, headings, images, links, OG tags, JSON-LD (0-100 score) | | Email Security | GET /check?domain= | $0.01 | SPF, DKIM (probes 10 selectors), DMARC, MX records with provider detection | | Brand Assets | GET /check?domain= | $0.002 | Extract logos, favicons, theme colors, OG images, site name from any domain | | Redirect Chain | GET /check?url= | $0.001 | Trace full redirect chain with per-hop status codes, latency, and loop detection | | Indexability | GET /check?url= | $0.001 | 5-layer analysis: robots.txt, HTTP status, meta robots, X-Robots-Tag, canonical | | Web Checker | GET /check?name= | $0.005 | Brand name availability across 5 TLDs, GitHub, npm, PyPI, Reddit | | HTTP Status | GET /check?url= | $0.001 | Live HTTP status check with optional expected status code | | Favicon Checker | GET /check?url= | $0.001 | Check favicon existence, URL, and format | | Health Check | POST /check | $0.003 | Parallel health check for up to 10 service URLs | | Robots.txt Parser | GET /analyze?url= | $0.001 | Parse robots.txt into structured rules, sitemaps, and crawl directives | | Email Verify | GET /check?email= | $0.001 | Syntax validation, MX check, disposable domain detection, role-address, deliverability | | Tech Stack | GET /check?url= | $0.003 | Detect CMS, frameworks, analytics, CDN, hosting, JS libraries from headers + HTML |

Developer Utility APIs

| API | Endpoint | Price | Description | |-----|----------|-------|-------------| | Regex Builder | POST /build | $0.002 | Generate and test regex patterns from natural language descriptions | | YAML Validator | POST /validate | $0.002 | Validate YAML syntax and structure | | Mock JWT Generator | POST /generate | $0.001 | Generate test JWTs with custom claims and expiry | | User Agent Analyzer | GET /analyze?ua= | $0.002 | Parse user agent strings into browser, OS, device, and bot info | | Status Code Checker | GET /check?code= | $0.001 | Lookup HTTP status code meaning and usage | | Swagger Docs Creator | POST /generate | $0.002 | Generate OpenAPI 3.0 documentation for your API endpoints |

Autonomously Built APIs

These APIs were built, tested, and deployed by APIMesh's autonomous brain loop — no human wrote the code:

| API | Endpoint | Price | Description | |-----|----------|-------|-------------| | Web Resource Validator | GET /validate?resource= | $0.005 | Validate presence of robots.txt, sitemap.xml, openapi.json, agent.json | | Website Security Header Info | GET /check?url= | $0.01 | Analyze security-related HTTP headers (CSP, HSTS, X-Frame-Options, etc.) | | Website Vulnerability Scan | GET /scan?url= | $0.01 | Comprehensive security audit combining SSL, headers, cookies, and CSP analysis |

New APIs are added automatically as the brain discovers demand and builds solutions. See How the Brain Works below.

Wallet & Spend Tracking (free, no auth)

| Endpoint | Description | |----------|-------------| | GET /wallet/{address} | Spend summary (daily/7d/30d), active spend cap, recent requests | | GET /wallet/{address}/history | Paginated transaction history, filterable by API | | PUT /wallet/{address}/cap | Set daily/monthly spend caps on your wallet |

---

Payment Methods

APIMesh supports three ways to pay:

1. x402 -- crypto micropayments (default)

Agent request --> 402 Payment Required (price, wallet, network)
                  Agent signs USDC on Base --> includes X-PAYMENT header
                  Server verifies via Coinbase CDP --> returns response

No accounts. No API keys. No subscriptions. The agent handles payment autonomously.

• Protocol: x402 (open standard)
• Currency: USDC on Base (chain ID 8453)
• Facilitator: Coinbase CDP

2. MPP -- Stripe Machine Payments Protocol

Stripe MPP enables AI agents to pay with cards or stablecoins through Stripe's infrastructure.

3. API key + credits

Traditional auth for developers who prefer it. Purchase credits via Stripe checkout and include your API key in requests.

---

Discovery & Integration

| Channel | Link | |---------|------| | npm | @mbeato/apimesh-mcp-server | | MCP Registry | io.github.mbeato/apimesh | | Smithery | apimesh-mcp-server | | x402scan | apimesh | | x402 discovery | https://apimesh.xyz/.well-known/x402 | | AI docs | https://apimesh.xyz/llms.txt | | AI plugin | https://apimesh.xyz/.well-known/ai-plugin.json |

Most APIs offer free /preview endpoints so agents can verify functionality before paying. Every API has free /health and / info endpoints.

---

The Autonomous Brain

APIMesh has an autonomous build loop that runs daily on the server. It discovers demand, generates APIs, tests them, and deploys to production — no human in the loop.

Monitor → Scout → Build → Security Audit → Staging → Prod
  │         │        │          │              │        │
  │         │        │          │              │        └─ verify health
  ��         │        │          │              └─ deploy + test endpoints
  │         │        │          └─ static analysis (secrets, SSRF, eval, etc.)
  │         │        └─ LLM generates multi-file Hono API (up to 6 retries)
  │         └─ gather market signals, score opportunities with LLM
  └─ check API health, revenue, error rates

Hardened against prompt injection: external signal data is sanitized, LLM prompts use system-role security rules, generated code is audited for 14+ vulnerability patterns, and the test environment is sandboxed with .env isolation.

The brain currently uses OpenAI (gpt-4.1-mini) for code generation and scores opportunities based on demand, implementation depth, and competitive differentiation.

---

Tech Stack

• Bun -- runtime and bundler
• Hono -- web framework
• x402 + MPP -- payment protocols
• Caddy -- reverse proxy with automatic HTTPS
• SQLite -- analytics and usage tracking
• OpenAI -- autonomous API generation

---

Related

• awesome-mpp -- the MPP ecosystem registry (100+ projects)

---

Contributing

Contributions are welcome. If you find a bug or want to suggest a new API tool, open an issue or [start