Apimesh MCP server

Read from the package source without running it. The installed server may list more.

• api_endpoint_discovery

  Comprehensively crawl and analyze API endpoints on the specified domain

• api_lintingwrite action

  Run a comprehensive linting and validation on provided OpenAPI spec and implementation URLs

• api_response_heuristics

  Comprehensive API response heuristic analysis with scoring and recommendations

• api_schema_delta

  Compare multiple API schemas from given URLs and return detailed diff and evolution analysis

• api_schema_diff

  Compare multiple API schema versions (REST or GraphQL) to highlight differences and score compatibility

• api_standard_compliance

  Perform a comprehensive API standard compliance analysis on the target API response URL

• brand_assets

  Extract brand assets from any domain. Returns logo URL, favicon, theme colors, OG image, and site name. Free preview: GET https://brand-assets.apimesh.xyz/preview?domain=... returns Google favicon URL for free

• cdn_infrastructure_enricher

  Comprehensive paid audit integrating DNS, HTTP headers, IP and regional info with detailed scoring and recommendations

• content_security_policy_check

  Perform a comprehensive security header and content security policy audit

• content_shuffle_detector

  Paid comprehensive audit with multiple fetches, deep NLP content variation analysis, content diffing, and scoring to detect content shuffling and obfuscation

• core_web_vitals

  Get Core Web Vitals and Lighthouse performance scores for any URL. Returns LCP, CLS, INP field data plus performance, accessibility, best-practices, and SEO scores. Free preview: GET https://core-web-vitals.apimesh.xyz/preview?url=... returns performance score only

• cross_origin_resource_policymapper

  Perform comprehensive CORS headers audit across multiple endpoints

• csp_policy_heuristics

  Paid comprehensive audit with advanced heuristic analysis, web crawling, scoring, and detailed recommendations

• dependency_license_audit

  Comprehensive license audit across multiple project manifests and license databases with risk scoring

• dns_propagation_heatmap

  Paid comprehensive DNS propagation audit across multiple resolver types, including scoring and actionable recommendations

• dns_propagation_inspector

  Comprehensive DNS propagation audit across global resolvers with detailed result analysis

• dns_propagation_mapper

  Comprehensive DNS propagation audit across multiple global DNS resolvers with delay correlation, misconfiguration detection, scoring, grading, and recommendations

• dns_propagation_simulator

  Simulate DNS record propagation across multiple DNS resolvers with delay estimation and misconfiguration detection

• email_securitywrite action

  Check email security configuration for any domain. Analyzes SPF, DMARC, DKIM (probes 10 common selectors), and MX records with provider detection. Free preview: GET https://email-security.apimesh.xyz/preview?domain=... checks SPF and DMARC for free

• email_verifywrite action

  Verify an email address: syntax validation, MX record check, disposable domain detection, role-address detection, free provider detection, and deliverability assessment. Free preview: GET https://email-verify.apimesh.xyz/preview?email=... checks syntax and disposable status for free

• favicon_checker

  Check whether a website has a favicon and get its URL, format, and status. Useful for link previews and site branding validation

• http_method_enumeration

  Full enumeration of HTTP methods supported by a target URL with scoring and analysis

• http_status_checker

  Check the live HTTP status of any URL, optionally verify against an expected code. Useful for uptime monitoring, redirect validation, and link checking

• indexability_checker

  Check if a URL is indexable by search engines. Performs 5-layer analysis: robots.txt rules, HTTP status, meta robots, X-Robots-Tag, and canonical tag. Free preview: GET https://indexability.apimesh.xyz/preview?url=... checks HTTP status and meta robots for free

• ip_geolocation_enrichment

  Enrich an IP address with detailed ASN, ISP, geolocation, and routing data

• ip_infrastructure_analyst

  Analyze an IP address for ASN, ISP, geolocation, and routing info; returns comprehensive report with scoring and recommendations

• ip_infrastructure_analyzer

  Comprehensive IP infrastructure analysis: ASN, ISP, geolocation, routing checks, scoring, recommendations

• microservice_health_check

  Check health and response times of up to 10 service URLs in parallel. Free preview: GET https://microservice-health-check.apimesh.xyz/preview?url=... checks 1 service for free

• mock_jwt_generator

  Generate test JWTs with custom claims and expiry for local development. Returns a signed HS256 token. Useful for testing auth flows without a real identity provider.

• network_route_mapper

  Paid comprehensive analysis of network routing paths including ASN hops, geolocation, latency, suspicion scoring, and remediation

• performance_security_compliance_report

  Comprehensive payable audit combining performance metrics, security headers, SSL cert and DNS analysis with scoring and prioritized fix suggestions

• port_scanner

  Perform a deep port scan on a target IP or hostname

• port_scanner_aggregate

  Deep scan of a list of IP addresses or CIDR ranges with multi-source aggregation and vulnerability scoring

• privacy_policy_enricher

  Fetch and analyze a privacy policy URL, combining multiple signals for GDPR and CCPA compliance, data sharing practices, and privacy features

• privacy_policy_qualify

  Fetch and analyze privacy policies across domains for GDPR/CCPA compliance and data sharing signals

• privacy_risk_score

  Comprehensive privacy risk analysis of a domain's publicly available privacy policies and disclosures

• redirect_chain

  Trace the full redirect chain for any URL. Returns each hop with status code, location, and latency. Detects loops and extracts the final canonical URL. Free preview: GET https://redirect-chain.apimesh.xyz/preview?url=... traces up to 5 hops for free

• regex_builder

  Build and test regex patterns. POST /build creates a regex from a pattern string or components. POST /test validates a pattern against test strings. Useful for generating and debugging regular expressions.

• robots_txt_parser

  Fetch and parse a website's robots.txt into structured rules, sitemaps, and crawl directives

• security_headers

  Audit HTTP security headers for any URL. Checks 10 headers (CSP, HSTS, X-Frame-Options, etc.) with weighted grading A+ through F and remediation suggestions. Free preview: GET https://security-headers.apimesh.xyz/preview?url=... checks 3 key headers for free

• security_headers_checker

  Perform a comprehensive security headers audit with detailed scoring and remediation

• seo_auditwrite action

  Run a comprehensive on-page SEO audit on any URL. Analyzes title, meta description, headings, images, links, content, canonical, OG tags, JSON-LD, and robots directives with a 0-100 score. Free preview: GET https://seo-audit.apimesh.xyz/preview?url=... returns title, meta, H1, and score for free

• site_security_baseline

  Comprehensive baseline audit with combined security headers, SSL, and configuration checks

• ssl_and_tls_hardening_scorewrite action

  Run full SSL, TLS, and HTTP security header comprehensive hardening score with actionable recommendations

• ssl_expiry_forecast

  Paid endpoint combining certificate transparency logs, DNS, SSL cert data to forecast expiry across multiple domains

• ssl_tls_configuration_forecast

  Comprehensive paid SSL/TLS configuration forecast and security score for a domain

• ssl_tls_configuration_ranker

  Perform a deep, comprehensive SSL/TLS configuration audit of a target site

• ssl_tls_expiry_forecast

  Comprehensive SSL/TLS certificate and protocol expiry forecast for multiple domains

• ssl_tls_hardening_assessor

  Get a comprehensive SSL/TLS and DNS record security assessment for a hostname

• ssl_tls_hardening_forecast

  Analyze SSL/TLS info and forecast renewal and security outlook with detailed alerts and recommendations

• ssl_tls_inception_score

  Comprehensive SSL/TLS certificate and protocol audit for the specified hostname or URL

• ssl_tls_risk_analyzer

  Aggregates SSL/TLS configuration details from public scans, DNS records, and certificate transparency logs, then performs a risk assessment

• ssl_tls_threat_assessment

  Comprehensive TLS security threat assessment for a domain

• status_code_checker

  Check the live HTTP status code of any URL. Returns the actual status code, reason phrase, and response headers. Simpler than http_status_checker — no expected-code validation.

• subdomain_exposure_heatmap

  Exhaustive subdomain enumeration from multiple sources, risk analysis, exposure scoring, recommendations and heatmap report

• subdomain_exposure_ranking

  Comprehensive paid scan: exhaustive subdomain enumeration from DNS, CT logs, plus HTTP endpoint probing, header analysis, TLS version checks, outdated service detection, with full scoring and rich recommendations

• subdomain_exposure_rankings

  Paid, comprehensive analysis of subdomain exposure and security ranking

• subdomain_exposure_score

  Paid comprehensive full subdomain exposure scoring and audit report

• subdomain_exposure_scorer

  Comprehensive enumeration and exposure scoring of all detected subdomains for a domain

• subdomain_risk_ranking

  Perform a deep, comprehensive subdomain enumeration and risk ranking audit

• subdomain_vulnerability_ranker

  Exhaustive subdomain enumeration, vulnerability inference, scoring, and recommendations

• subdomain_vulnerability_ranking

  Paid comprehensive subdomain enumeration and vulnerability ranking

• subdomain_vulnerability_rankings

  Paid comprehensive subdomain enumeration and vulnerability ranking

• swagger_docs_creator

  Generate OpenAPI 3.0 documentation for an API endpoint. Provide the path, method, summary, and optionally parameters/requestBody/responses to get a complete OpenAPI spec fragment.

• tech_stack

  Detect the technology stack of any website. Analyzes HTTP headers and HTML to identify CMS, frameworks, languages, analytics, CDN, hosting, JavaScript libraries, and CSS frameworks. Free preview: GET https://tech-stack.apimesh.xyz/preview?url=... detects technologies from HTTP headers only

• user_agent_analyzer

  Parse a User-Agent string into structured data: browser name/version, OS name/version, device type, and bot detection. Useful for analytics and request filtering.

• wallet_set_cap

  Set a spend cap on your wallet. Once the daily or monthly USDC limit is reached, further paid API calls return 429 before payment is attempted. Set limits to null to remove a cap.

• wallet_usage

  Check your wallet's APIMesh spend and cap status. Returns daily/7d/30d spend totals, active spend cap with remaining budget, and recent requests. No authentication required.

• web_checker

  Check if a brand name is available across 5 domain TLDs (.com, .io, .xyz, .dev, .ai), GitHub, npm, PyPI, and Reddit in one call. Free preview: GET https://check.apimesh.xyz/preview?name=... returns .com availability only

• web_configuration_audit

  Comprehensive paid audit with detailed scoring, grade, meta tags, and .env leak detection

• web_misconfiguration_scanwrite action

  Run a comprehensive security misconfiguration scan against the specified URL

• web_resource_validator

  Validate presence and correctness of common web resources (robots.txt, sitemap.xml, openapi.json, agent.json) for any domain. Returns availability status for the requested resource.

• website_authenticity_assessment

  Comprehensive website authenticity assessment combining SSL cert validation, DNS records, redirect chain analysis, and server headers

• website_security_header_info

  Analyze security-related HTTP headers for any website. Checks Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options, X-XSS-Protection, Referrer-Policy, and Permissions-Policy with issue detection.

• website_vulnerability_scan

  Comprehensive website security audit combining hostname analysis, SSL certificate validation, HTTP security headers, cookie security, and Content Security Policy analysis. Returns an overall security score (0-100) with actionable recommendations. Supports basic, detailed, and full scan levels.

• yaml_validator

  Validate YAML syntax and structure. Returns parsed result on success or detailed error with line/column on failure. Useful for CI pipelines and config file validation.

• Code scan3 source files scanned20/25
• –Live reliabilityno gateway calls yet and no remote to proben/a
• –Tool poisoningtools not inspected (local package is not executed); not countedn/a
• Auth qualitylocal package, no credentials required12/15
• Maintenancelast push 139 days ago8/15
• Maintainer identityregistry namespace matches repository owner; GitHub account older than a year8/10

Safety score

74/100

higher than 39% of 769 SEO servers

Tools

76

the typical SEO server has 6

Tools that change things

8%

typical: 0%. Fewer write tools means less an agent can break

GitHub stars

6

more than 86% of 405 SEO servers

Downloads a week

62

more than 45% of 170 SEO servers with a package

Apimesh: common questions

Is Apimesh MCP server safe?

Mostly: it is graded B (74/100). Read the Apimesh safety report

How do I install Apimesh?

It runs on your machine. Copy the Claude Code, Cursor, VS Code or Claude Desktop config from the install section.

Does Apimesh need an API key?

Not as far as the registry entry and our scan can tell: no credentials are declared or required.

Is Apimesh maintained?

The last commit was 177 days ago (2026-05-11). The latest release is v1.8.2.

What can I use instead of Apimesh?

Servers from other publishers that do the same job: Bacon Services MCP server, squirrelscan MCP server and Web Validator by DigestSEO MCP server.

How does Apimesh compare with other SEO MCP servers?

safety score 74/100 (higher than 39% of 769 SEO servers); tools 76 (the typical SEO server has 6); tools that change things 8% (typical: 0%. Fewer write tools means less an agent can break). Full comparison.