{"name":"io.github.mbeato/apimesh","slug":"mbeato-apimesh","title":null,"description":"74 paid web-analysis APIs (SEO, security, TLS, DNS, email) as MCP tools. USDC via x402.","url":"https://mcp.market/server/mbeato-apimesh","rating":null,"grade":"B","score":74,"certified":false,"status":"active","category":"seo","tags":["seo","email","security"],"presence":{"score":23,"stars":6,"forks":3,"downloads_week":62,"last_push_at":"2026-05-11T21:11:36.000Z","license":"MIT"},"uptime":null,"claimed":false,"transport":"npm","callable_via_gateway":false,"default_price_micros":0,"repository":"https://github.com/mbeato/conway","website":null,"version":"1.8.2","remotes":[],"packages":[{"registryType":"npm","identifier":"@mbeato/apimesh-mcp-server","version":"1.8.2","transport":{"type":"stdio"}}],"tools":[{"name":"api_endpoint_discovery","description":"Comprehensively crawl and analyze API endpoints on the specified domain","write_action":false,"price_micros":0,"input_schema":null},{"name":"api_linting","description":"Run a comprehensive linting and validation on provided OpenAPI spec and implementation URLs","write_action":true,"price_micros":0,"input_schema":null},{"name":"api_response_heuristics","description":"Comprehensive API response heuristic analysis with scoring and recommendations","write_action":false,"price_micros":0,"input_schema":null},{"name":"api_schema_delta","description":"Compare multiple API schemas from given URLs and return detailed diff and evolution analysis","write_action":false,"price_micros":0,"input_schema":null},{"name":"api_schema_diff","description":"Compare multiple API schema versions (REST or GraphQL) to highlight differences and score compatibility","write_action":false,"price_micros":0,"input_schema":null},{"name":"api_standard_compliance","description":"Perform a comprehensive API standard compliance analysis on the target API response URL","write_action":false,"price_micros":0,"input_schema":null},{"name":"brand_assets","description":"Extract brand assets from any domain. Returns logo URL, favicon, theme colors, OG image, and site name. Free preview: GET https://brand-assets.apimesh.xyz/preview?domain=... returns Google favicon URL for free","write_action":false,"price_micros":0,"input_schema":null},{"name":"cdn_infrastructure_enricher","description":"Comprehensive paid audit integrating DNS, HTTP headers, IP and regional info with detailed scoring and recommendations","write_action":false,"price_micros":0,"input_schema":null},{"name":"content_security_policy_check","description":"Perform a comprehensive security header and content security policy audit","write_action":false,"price_micros":0,"input_schema":null},{"name":"content_shuffle_detector","description":"Paid comprehensive audit with multiple fetches, deep NLP content variation analysis, content diffing, and scoring to detect content shuffling and obfuscation","write_action":false,"price_micros":0,"input_schema":null},{"name":"core_web_vitals","description":"Get Core Web Vitals and Lighthouse performance scores for any URL. Returns LCP, CLS, INP field data plus performance, accessibility, best-practices, and SEO scores. Free preview: GET https://core-web-vitals.apimesh.xyz/preview?url=... returns performance score only","write_action":false,"price_micros":0,"input_schema":null},{"name":"cross_origin_resource_policymapper","description":"Perform comprehensive CORS headers audit across multiple endpoints","write_action":false,"price_micros":0,"input_schema":null},{"name":"csp_policy_heuristics","description":"Paid comprehensive audit with advanced heuristic analysis, web crawling, scoring, and detailed recommendations","write_action":false,"price_micros":0,"input_schema":null},{"name":"dependency_license_audit","description":"Comprehensive license audit across multiple project manifests and license databases with risk scoring","write_action":false,"price_micros":0,"input_schema":null},{"name":"dns_propagation_heatmap","description":"Paid comprehensive DNS propagation audit across multiple resolver types, including scoring and actionable recommendations","write_action":false,"price_micros":0,"input_schema":null},{"name":"dns_propagation_inspector","description":"Comprehensive DNS propagation audit across global resolvers with detailed result analysis","write_action":false,"price_micros":0,"input_schema":null},{"name":"dns_propagation_mapper","description":"Comprehensive DNS propagation audit across multiple global DNS resolvers with delay correlation, misconfiguration detection, scoring, grading, and recommendations","write_action":false,"price_micros":0,"input_schema":null},{"name":"dns_propagation_simulator","description":"Simulate DNS record propagation across multiple DNS resolvers with delay estimation and misconfiguration detection","write_action":false,"price_micros":0,"input_schema":null},{"name":"email_security","description":"Check email security configuration for any domain. Analyzes SPF, DMARC, DKIM (probes 10 common selectors), and MX records with provider detection. Free preview: GET https://email-security.apimesh.xyz/preview?domain=... checks SPF and DMARC for free","write_action":true,"price_micros":0,"input_schema":null},{"name":"email_verify","description":"Verify an email address: syntax validation, MX record check, disposable domain detection, role-address detection, free provider detection, and deliverability assessment. Free preview: GET https://email-verify.apimesh.xyz/preview?email=... checks syntax and disposable status for free","write_action":true,"price_micros":0,"input_schema":null},{"name":"favicon_checker","description":"Check whether a website has a favicon and get its URL, format, and status. Useful for link previews and site branding validation","write_action":false,"price_micros":0,"input_schema":null},{"name":"http_method_enumeration","description":"Full enumeration of HTTP methods supported by a target URL with scoring and analysis","write_action":false,"price_micros":0,"input_schema":null},{"name":"http_status_checker","description":"Check the live HTTP status of any URL, optionally verify against an expected code. Useful for uptime monitoring, redirect validation, and link checking","write_action":false,"price_micros":0,"input_schema":null},{"name":"indexability_checker","description":"Check if a URL is indexable by search engines. Performs 5-layer analysis: robots.txt rules, HTTP status, meta robots, X-Robots-Tag, and canonical tag. Free preview: GET https://indexability.apimesh.xyz/preview?url=... checks HTTP status and meta robots for free","write_action":false,"price_micros":0,"input_schema":null},{"name":"ip_geolocation_enrichment","description":"Enrich an IP address with detailed ASN, ISP, geolocation, and routing data","write_action":false,"price_micros":0,"input_schema":null},{"name":"ip_infrastructure_analyst","description":"Analyze an IP address for ASN, ISP, geolocation, and routing info; returns comprehensive report with scoring and recommendations","write_action":false,"price_micros":0,"input_schema":null},{"name":"ip_infrastructure_analyzer","description":"Comprehensive IP infrastructure analysis: ASN, ISP, geolocation, routing checks, scoring, recommendations","write_action":false,"price_micros":0,"input_schema":null},{"name":"microservice_health_check","description":"Check health and response times of up to 10 service URLs in parallel. Free preview: GET https://microservice-health-check.apimesh.xyz/preview?url=... checks 1 service for free","write_action":false,"price_micros":0,"input_schema":null},{"name":"mock_jwt_generator","description":"Generate test JWTs with custom claims and expiry for local development. Returns a signed HS256 token. Useful for testing auth flows without a real identity provider.","write_action":false,"price_micros":0,"input_schema":null},{"name":"network_route_mapper","description":"Paid comprehensive analysis of network routing paths including ASN hops, geolocation, latency, suspicion scoring, and remediation","write_action":false,"price_micros":0,"input_schema":null},{"name":"performance_security_compliance_report","description":"Comprehensive payable audit combining performance metrics, security headers, SSL cert and DNS analysis with scoring and prioritized fix suggestions","write_action":false,"price_micros":0,"input_schema":null},{"name":"port_scanner","description":"Perform a deep port scan on a target IP or hostname","write_action":false,"price_micros":0,"input_schema":null},{"name":"port_scanner_aggregate","description":"Deep scan of a list of IP addresses or CIDR ranges with multi-source aggregation and vulnerability scoring","write_action":false,"price_micros":0,"input_schema":null},{"name":"privacy_policy_enricher","description":"Fetch and analyze a privacy policy URL, combining multiple signals for GDPR and CCPA compliance, data sharing practices, and privacy features","write_action":false,"price_micros":0,"input_schema":null},{"name":"privacy_policy_qualify","description":"Fetch and analyze privacy policies across domains for GDPR/CCPA compliance and data sharing signals","write_action":false,"price_micros":0,"input_schema":null},{"name":"privacy_risk_score","description":"Comprehensive privacy risk analysis of a domain's publicly available privacy policies and disclosures","write_action":false,"price_micros":0,"input_schema":null},{"name":"redirect_chain","description":"Trace the full redirect chain for any URL. Returns each hop with status code, location, and latency. Detects loops and extracts the final canonical URL. Free preview: GET https://redirect-chain.apimesh.xyz/preview?url=... traces up to 5 hops for free","write_action":false,"price_micros":0,"input_schema":null},{"name":"regex_builder","description":"Build and test regex patterns. POST /build creates a regex from a pattern string or components. POST /test validates a pattern against test strings. Useful for generating and debugging regular expressions.","write_action":false,"price_micros":0,"input_schema":null},{"name":"robots_txt_parser","description":"Fetch and parse a website's robots.txt into structured rules, sitemaps, and crawl directives","write_action":false,"price_micros":0,"input_schema":null},{"name":"security_headers","description":"Audit HTTP security headers for any URL. Checks 10 headers (CSP, HSTS, X-Frame-Options, etc.) with weighted grading A+ through F and remediation suggestions. Free preview: GET https://security-headers.apimesh.xyz/preview?url=... checks 3 key headers for free","write_action":false,"price_micros":0,"input_schema":null},{"name":"security_headers_checker","description":"Perform a comprehensive security headers audit with detailed scoring and remediation","write_action":false,"price_micros":0,"input_schema":null},{"name":"seo_audit","description":"Run a comprehensive on-page SEO audit on any URL. Analyzes title, meta description, headings, images, links, content, canonical, OG tags, JSON-LD, and robots directives with a 0-100 score. Free preview: GET https://seo-audit.apimesh.xyz/preview?url=... returns title, meta, H1, and score for free","write_action":true,"price_micros":0,"input_schema":null},{"name":"site_security_baseline","description":"Comprehensive baseline audit with combined security headers, SSL, and configuration checks","write_action":false,"price_micros":0,"input_schema":null},{"name":"ssl_and_tls_hardening_score","description":"Run full SSL, TLS, and HTTP security header comprehensive hardening score with actionable recommendations","write_action":true,"price_micros":0,"input_schema":null},{"name":"ssl_expiry_forecast","description":"Paid endpoint combining certificate transparency logs, DNS, SSL cert data to forecast expiry across multiple domains","write_action":false,"price_micros":0,"input_schema":null},{"name":"ssl_tls_configuration_forecast","description":"Comprehensive paid SSL/TLS configuration forecast and security score for a domain","write_action":false,"price_micros":0,"input_schema":null},{"name":"ssl_tls_configuration_ranker","description":"Perform a deep, comprehensive SSL/TLS configuration audit of a target site","write_action":false,"price_micros":0,"input_schema":null},{"name":"ssl_tls_expiry_forecast","description":"Comprehensive SSL/TLS certificate and protocol expiry forecast for multiple domains","write_action":false,"price_micros":0,"input_schema":null},{"name":"ssl_tls_hardening_assessor","description":"Get a comprehensive SSL/TLS and DNS record security assessment for a hostname","write_action":false,"price_micros":0,"input_schema":null},{"name":"ssl_tls_hardening_forecast","description":"Analyze SSL/TLS info and forecast renewal and security outlook with detailed alerts and recommendations","write_action":false,"price_micros":0,"input_schema":null},{"name":"ssl_tls_inception_score","description":"Comprehensive SSL/TLS certificate and protocol audit for the specified hostname or URL","write_action":false,"price_micros":0,"input_schema":null},{"name":"ssl_tls_risk_analyzer","description":"Aggregates SSL/TLS configuration details from public scans, DNS records, and certificate transparency logs, then performs a risk assessment","write_action":false,"price_micros":0,"input_schema":null},{"name":"ssl_tls_threat_assessment","description":"Comprehensive TLS security threat assessment for a domain","write_action":false,"price_micros":0,"input_schema":null},{"name":"status_code_checker","description":"Check the live HTTP status code of any URL. Returns the actual status code, reason phrase, and response headers. Simpler than http_status_checker — no expected-code validation.","write_action":false,"price_micros":0,"input_schema":null},{"name":"subdomain_exposure_heatmap","description":"Exhaustive subdomain enumeration from multiple sources, risk analysis, exposure scoring, recommendations and heatmap report","write_action":false,"price_micros":0,"input_schema":null},{"name":"subdomain_exposure_ranking","description":"Comprehensive paid scan: exhaustive subdomain enumeration from DNS, CT logs, plus HTTP endpoint probing, header analysis, TLS version checks, outdated service detection, with full scoring and rich recommendations","write_action":false,"price_micros":0,"input_schema":null},{"name":"subdomain_exposure_rankings","description":"Paid, comprehensive analysis of subdomain exposure and security ranking","write_action":false,"price_micros":0,"input_schema":null},{"name":"subdomain_exposure_score","description":"Paid comprehensive full subdomain exposure scoring and audit report","write_action":false,"price_micros":0,"input_schema":null},{"name":"subdomain_exposure_scorer","description":"Comprehensive enumeration and exposure scoring of all detected subdomains for a domain","write_action":false,"price_micros":0,"input_schema":null},{"name":"subdomain_risk_ranking","description":"Perform a deep, comprehensive subdomain enumeration and risk ranking audit","write_action":false,"price_micros":0,"input_schema":null},{"name":"subdomain_vulnerability_ranker","description":"Exhaustive subdomain enumeration, vulnerability inference, scoring, and recommendations","write_action":false,"price_micros":0,"input_schema":null},{"name":"subdomain_vulnerability_ranking","description":"Paid comprehensive subdomain enumeration and vulnerability ranking","write_action":false,"price_micros":0,"input_schema":null},{"name":"subdomain_vulnerability_rankings","description":"Paid comprehensive subdomain enumeration and vulnerability ranking","write_action":false,"price_micros":0,"input_schema":null},{"name":"swagger_docs_creator","description":"Generate OpenAPI 3.0 documentation for an API endpoint. Provide the path, method, summary, and optionally parameters/requestBody/responses to get a complete OpenAPI spec fragment.","write_action":false,"price_micros":0,"input_schema":null},{"name":"tech_stack","description":"Detect the technology stack of any website. Analyzes HTTP headers and HTML to identify CMS, frameworks, languages, analytics, CDN, hosting, JavaScript libraries, and CSS frameworks. Free preview: GET https://tech-stack.apimesh.xyz/preview?url=... detects technologies from HTTP headers only","write_action":false,"price_micros":0,"input_schema":null},{"name":"user_agent_analyzer","description":"Parse a User-Agent string into structured data: browser name/version, OS name/version, device type, and bot detection. Useful for analytics and request filtering.","write_action":false,"price_micros":0,"input_schema":null},{"name":"wallet_set_cap","description":"Set a spend cap on your wallet. Once the daily or monthly USDC limit is reached, further paid API calls return 429 before payment is attempted. Set limits to null to remove a cap.","write_action":false,"price_micros":0,"input_schema":null},{"name":"wallet_usage","description":"Check your wallet's APIMesh spend and cap status. Returns daily/7d/30d spend totals, active spend cap with remaining budget, and recent requests. No authentication required.","write_action":false,"price_micros":0,"input_schema":null},{"name":"web_checker","description":"Check if a brand name is available across 5 domain TLDs (.com, .io, .xyz, .dev, .ai), GitHub, npm, PyPI, and Reddit in one call. Free preview: GET https://check.apimesh.xyz/preview?name=... returns .com availability only","write_action":false,"price_micros":0,"input_schema":null},{"name":"web_configuration_audit","description":"Comprehensive paid audit with detailed scoring, grade, meta tags, and .env leak detection","write_action":false,"price_micros":0,"input_schema":null},{"name":"web_misconfiguration_scan","description":"Run a comprehensive security misconfiguration scan against the specified URL","write_action":true,"price_micros":0,"input_schema":null},{"name":"web_resource_validator","description":"Validate presence and correctness of common web resources (robots.txt, sitemap.xml, openapi.json, agent.json) for any domain. Returns availability status for the requested resource.","write_action":false,"price_micros":0,"input_schema":null},{"name":"website_authenticity_assessment","description":"Comprehensive website authenticity assessment combining SSL cert validation, DNS records, redirect chain analysis, and server headers","write_action":false,"price_micros":0,"input_schema":null},{"name":"website_security_header_info","description":"Analyze security-related HTTP headers for any website. Checks Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options, X-XSS-Protection, Referrer-Policy, and Permissions-Policy with issue detection.","write_action":false,"price_micros":0,"input_schema":null},{"name":"website_vulnerability_scan","description":"Comprehensive website security audit combining hostname analysis, SSL certificate validation, HTTP security headers, cookie security, and Content Security Policy analysis. Returns an overall security score (0-100) with actionable recommendations. Supports basic, detailed, and full scan levels.","write_action":false,"price_micros":0,"input_schema":null},{"name":"yaml_validator","description":"Validate YAML syntax and structure. Returns parsed result on success or detailed error with line/column on failure. Useful for CI pipelines and config file validation.","write_action":false,"price_micros":0,"input_schema":null}],"scan":{"score":74,"grade":"B","scanned_at":"2026-09-27T21:51:28.440Z","report":{"scannerVersion":"0.1.9","scannedAt":"2026-09-27T21:51:28.376Z","components":{"code":{"score":20,"max":25,"notes":["3 source files scanned"]},"reliability":{"score":-1,"max":20,"notes":["no gateway calls yet and no remote to probe"]},"poisoning":{"score":-1,"max":15,"notes":["tools not inspected (local package is not executed); not counted"]},"auth":{"score":12,"max":15,"notes":["local package, no credentials required"]},"maintenance":{"score":8,"max":15,"notes":["last push 139 days ago"]},"identity":{"score":8,"max":10,"notes":["registry namespace matches repository owner","GitHub account older than a year"]}},"findings":[{"id":"exec.eval","severity":"medium","component":"code","title":"eval / new Function used","evidence":"dist/index.js: …eCode, sch); const makeValidate = new Function(`${names_1.default.self}`, `${names_1.de…"}],"inputs":{"packages":[{"registryType":"npm","identifier":"@mbeato/apimesh-mcp-server","version":"1.8.2","found":true,"license":"MIT","hasInstallScripts":false,"dependencyCount":2,"publishedAt":"2026-04-26T03:53:38.034Z","repositoryUrl":"git+https://github.com/mbeato/conway.git","weeklyDownloads":62}],"repo":{"found":true,"owner":"mbeato","repo":"conway","archived":false,"pushedAt":"2026-05-11T21:11:36Z","stars":6,"forks":3,"openIssues":4,"ownerType":"User","ownerAvatarUrl":"https://avatars.githubusercontent.com/u/112347710?v=4","ownerCreatedAt":"2022-08-28T19:43:25Z","license":"MIT"},"icon":{"url":"https://avatars.githubusercontent.com/u/112347710?v=4&s=128","source":"github"},"presence":{"stars":6,"forks":3,"downloadsWeek":62,"license":"MIT","lastPushAt":"2026-05-11T21:11:36.000Z","score":23}}}},"grade_history":[],"reviews":[]}