Skip to content
verify mcp Beta VerifyMCP is currently in beta. If you notice any issues, get in touch and we’ll put it right.

Apixies Developer API Suite

NPM · @APIXIES/MCP-SERVER · SCANNED SEP 25

50 developer utility APIs as tools: SSL, DNS, WHOIS, email checks, HTML to PDF, sitemaps and more.

Available components

71 Trust /100
Trust breakdown (7 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score → Why this is hard to score →

Supply Chain Security98
  • No malware found by supply-chain analysis.Pass
  • No known CVEs affecting this package version or its production dependencies.Pass
  • No install/post-install scripts declared.Pass
  • 31 of 96 dependencies flagged as unhealthy. View diagnostics → Partial
Provenance & Transparency45
  • Source repository is publicly reachable at the declared URL. View diagnostics → Pass
  • Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
  • Clear OSI-approved license (MIT).Pass
  • Actively maintained (last published 6 days ago).Pass
  • Security-disclosure policy not yet verified: we couldn't inspect the source repository.Unverified
Schema Quality & AI Usability83
  • AI-judged instruction clarity (excellent).Pass
  • Tool/resource definitions use about 4020 tokens (~80/item across 50 items; 50 tools + 0 resources), lean.Pass
  • Usage-examples check failed: none of the tools include examples. See how to fix → Fail
Stability & Change Management0
  • Stability not yet verified: not enough scan history yet (needs a 30-day window).Unverified
Tool Coverage100
  • 100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
  • 100% of tool parameters carry a description.Pass
Tool Safety100
  • No prompt-injection markers were found in the server instructions, tool names or descriptions we captured.Pass
  • We read all 50 captured tool definition(s), and no name or description among them implies an irreversible operation.Pass
  • An AI judge read all 50 captured unit(s) of tool text and found none that tries to manipulate the model reading it.Pass
Capabilities100
  • Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Unverified: 1 category

A category scored 0 because we could not verify it: a data source with nothing on this package, evidence we could not reach, or a check we could not run. We only credit what we can confirm.

Install

How do I install the Apixies Developer API Suite MCP server?

Apixies Developer API Suite runs locally as an npm package, launched with npx -y @apixies/mcp-server. Ready-made configuration for Claude, Cursor, VS Code, Codex and 5 more is on this page, copied from each client's own documentation.

npm · @apixies/mcp-server

# add to Claude Code
claude mcp add io-apixies-mcp-server -- npx -y @apixies/mcp-server
// .cursor/mcp.json
{
  "mcpServers": {
    "io-apixies-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@apixies/mcp-server"
      ]
    }
  }
}
// .vscode/mcp.json
{
  "servers": {
    "io-apixies-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@apixies/mcp-server"
      ]
    }
  }
}
# add to Codex CLI
codex mcp add io-apixies-mcp-server -- npx -y @apixies/mcp-server
// opencode.json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "io-apixies-mcp-server": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@apixies/mcp-server"
      ],
      "enabled": true
    }
  }
}
# add to OpenClaw
openclaw mcp add io-apixies-mcp-server --command npx --arg -y --arg @apixies/mcp-server
# ~/.hermes/config.yaml
mcp_servers:
  io-apixies-mcp-server:
    command: "npx"
    args: ["-y", "@apixies/mcp-server"]
// ~/.netclaw/config/netclaw.json
{
  "McpServers": {
    "io-apixies-mcp-server": {
      "Transport": "stdio",
      "Command": "npx",
      "Arguments": [
        "-y",
        "@apixies/mcp-server"
      ]
    }
  }
}
# add to Vellum
assistant mcp add io-apixies-mcp-server -t stdio -c npx -a -y @apixies/mcp-server
// mcp.json
{
  "mcpServers": {
    "io-apixies-mcp-server": {
      "command": "npx",
      "args": [
        "-y",
        "@apixies/mcp-server"
      ]
    }
  }
}
Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

  • 25 Sept 26 0
    • We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
  • 23 Sept 26 0
    • Security disclosure: unverified → fail ▼ functional
  • 22 Sept 26 0
    • Security disclosure: fail → unverified ▼ functional
  • 20 Sept 26 +15
    • Malware scan: unverified → pass ▲ security
  • 19 Sept 26 56

    First indexed and scored.

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 25 Sept 2026 · Analysed npm/@apixies/mcp-server@1.4.2

Provenance No attestation

The registry publishes no build provenance for this version, so there is nothing to verify.

Result No attestation
Ecosystem npm

Background: How many MCP packages publish verified provenance →

Dependencies 96 packages
Packages resolved 96
Stale 31
Tree resolution Complete

Background: SBOMs and build attestations, explained →

MCP tools · 50 exposed · ~4,020 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability. A tool's description is untrusted text the model reads on every call, which is what makes this list a security surface and not just an inventory: how tool poisoning works →

Tool Tokens
analyze_text ~47

Analyze text content. Returns word count, character count, sentence count, paragraph count, reading time, speaking time, and top word frequency.

NameTypeReqDescription
textstringyesText content to analyze

No output schema declared.

No examples provided.

base64_encode_decode ~55

Encode or decode a Base64 string. Supports standard and URL-safe Base64.

NameTypeReqDescription
actionstringyes"encode" or "decode"
inputstringyesText to encode or Base64 string to decode

No output schema declared.

No examples provided.

check_cors ~92

Check if a URL has CORS headers configured. Sends a preflight OPTIONS request and reports allowed origins, methods, headers, and security issues. Useful for debugging frontend API integration problems.

NameTypeReqDescription
originstring–Origin to send in preflight request (default: "https://example.com")
urlstringyesURL to check for CORS headers (e.g., "https://api.github.com")

No output schema declared.

No examples provided.

check_headers ~59

Check security headers for a URL. Returns present and missing headers (HSTS, CSP, X-Frame-Options, etc.) with a security grade.

NameTypeReqDescription
urlstringyesFull URL to check (e.g., "https://github.com")

No output schema declared.

No examples provided.

check_link ~50

Check if a URL is reachable. Returns HTTP status code, response time, content type, and SSL status.

NameTypeReqDescription
urlstringyesURL to check (e.g., "https://docs.github.com")

No output schema declared.

No examples provided.

check_mixed_content ~73

Scan an HTTPS page for mixed content (HTTP resources on HTTPS pages). Finds insecure images, scripts, stylesheets, and iframes that cause browser warnings. Reports severity (active vs passive) and line numbers.

NameTypeReqDescription
urlstringyesHTTPS URL to scan (e.g., "https://example.com")

No output schema declared.

No examples provided.

check_performance ~58

Measure website performance. Returns DNS lookup time, TCP connect time, SSL handshake time, TTFB, content download time, and total load time.

NameTypeReqDescription
urlstringyesURL to analyze (e.g., "https://stripe.com")

No output schema declared.

No examples provided.

check_ssl ~70

Check the SSL/TLS certificate of a domain. Returns issuer, validity dates, expiry countdown, protocol version, cipher suite, and certificate chain details.

NameTypeReqDescription
domainstringyesDomain name to check (e.g., "stripe.com")
portnumber–Port number (default: 443)

No output schema declared.

No examples provided.

convert_color ~96

Convert a color between HEX, RGB, and HSL formats. Input any format and get all three representations back.

NameTypeReqDescription
colorstringyesColor value in HEX (#FF5733), RGB (rgb(255,87,51)), or HSL (hsl(11,100%,60%))
formatstring–Preferred output format: "hex", "rgb", or "hsl". Returns all formats regardless.

No output schema declared.

No examples provided.

convert_timestamp ~100

Convert between Unix timestamps and human-readable dates. Returns ISO 8601, RFC 2822, human-readable, and Unix formats with timezone support.

NameTypeReqDescription
timestampstringyesUnix timestamp (e.g., "1700000000") or date string (e.g., "2023-11-14")
timezonestring–IANA timezone (e.g., "America/New_York", "Europe/London"). Default: "UTC"

No output schema declared.

No examples provided.

csv_to_json ~83

Convert CSV data to a JSON array of objects. Supports custom delimiters, header detection, and quoted fields.

NameTypeReqDescription
csvstringyesCSV content as a string
delimiterstring–Column delimiter: comma, semicolon, tab, or pipe (default: comma)
has_headersboolean–First row contains column headers (default: true)

No output schema declared.

No examples provided.

decode_jwt ~58

Decode a JWT token without verification. Returns the header, payload with all claims, signature, and expiry information.

NameTypeReqDescription
tokenstringyesJWT token string (e.g., "eyJhbGciOiJIUzI1NiIs...")

No output schema declared.

No examples provided.

dns_lookup ~107

Query DNS records for a domain. Returns A, AAAA, MX, TXT, CNAME, NS, SOA, SRV, CAA, PTR records. Optionally filter by record type.

NameTypeReqDescription
domainstringyesDomain name to query (e.g., "github.com")
typestring–Record type filter: A, AAAA, MX, TXT, CNAME, NS, SOA, SRV, CAA, PTR. Omit for all.

No output schema declared.

No examples provided.

dns_propagation ~115

Check whether a DNS change has propagated: asks Google, Cloudflare, Quad9, OpenDNS and AdGuard the same question at once and reports which resolvers agree, with TTLs. Different answers can also mean load balancing, not only an unfinished change.

NameTypeReqDescription
domainstringyesDomain name to check (e.g., "github.com")
resolversarray–Resolvers to ask, at least two. Omit for all five.
typestring–Record type (default: A)

No output schema declared.

No examples provided.

encode_decode_url ~59

URL-encode or decode a string. RFC 3986 compliant encoding for URLs and query strings.

NameTypeReqDescription
actionstringyes"encode" or "decode"
inputstringyesText to encode or URL-encoded string to decode

No output schema declared.

No examples provided.

extract_meta_tags ~56

Extract meta tags from a URL. Returns OpenGraph tags, Twitter Card tags, standard meta tags, title, and description.

NameTypeReqDescription
urlstringyesURL to extract meta tags from (e.g., "https://stripe.com")

No output schema declared.

No examples provided.

fetch_favicon ~49

Find favicon URLs for a website. Returns all discovered icons with their URLs, types, and sizes.

NameTypeReqDescription
domainstringyesDomain name (e.g., "stripe.com"). Without https://

No output schema declared.

No examples provided.

format_json ~103

Format, validate, and analyze JSON. Returns formatted output, minified version, and stats (key count, depth, size, type counts).

NameTypeReqDescription
indentnumber–Indent spaces (default: 2, range: 0-8)
inputstringyesJSON string to format
minifyboolean–Return minified JSON (default: false)
sort_keysboolean–Sort object keys alphabetically (default: false)

No output schema declared.

No examples provided.

format_phone ~93

Parse and format a phone number into E.164, national, and international formats. Validates the number and identifies the country.

NameTypeReqDescription
country_codestring–ISO 3166-1 alpha-2 country code (e.g., "US", "GB", "DE"). Default: "US"
phonestringyesPhone number (e.g., "+1 (212) 555-1234")

No output schema declared.

No examples provided.

generate_hash ~89

Generate a cryptographic hash of the input text. Supports MD5, SHA-1, SHA-256, SHA-384, SHA-512, CRC32, and Whirlpool.

NameTypeReqDescription
algorithmstring–Hash algorithm: md5, sha1, sha256, sha384, sha512, crc32, whirlpool (default: sha256)
inputstringyesText to hash

No output schema declared.

No examples provided.

generate_lorem ~78

Generate Lorem Ipsum placeholder text. Choose between words, sentences, or paragraphs with a configurable count.

NameTypeReqDescription
countnumber–Number of units to generate (default: 3, max: 100)
typestring–Output type: "words", "sentences", or "paragraphs" (default: "paragraphs")

No output schema declared.

No examples provided.

generate_password ~158

Generate cryptographically secure random passwords. Configurable length, character sets, and exclusions.

NameTypeReqDescription
countnumber–Number of passwords to generate (default: 1, max: 20)
excludestring–Characters to exclude (e.g., "0O1lI" for ambiguous characters)
lengthnumber–Password length (default: 16, range: 8-128)
lowercaseboolean–Include lowercase letters a-z (default: true)
numbersboolean–Include numbers 0-9 (default: true)
symbolsboolean–Include symbols !@#$... (default: true)
uppercaseboolean–Include uppercase letters A-Z (default: true)

No output schema declared.

No examples provided.

generate_qr ~149

Generate a QR code image from text or a URL. Returns SVG with customizable size, colors, and margin.

NameTypeReqDescription
bgstring–Background color as hex (default: "#ffffff")
colorstring–Foreground color as hex (default: "#1a1a2e")
formatstring–Output format: "svg" (the only format)
marginnumber–Margin/quiet zone size (default: 1, range: 0-10)
sizenumber–Size in pixels (default: 200, range: 50-1000)
textstringyesText or URL to encode in the QR code

No output schema declared.

No examples provided.

generate_uuid ~86

Generate UUID identifiers. Supports v4 (random) and v7 (time-sorted). Bulk generation up to 50 at once.

NameTypeReqDescription
countnumber–Number of UUIDs to generate (default: 1, max: 50)
versionstring–UUID version: "v4" (random, default) or "v7" (time-sorted)

No output schema declared.

No examples provided.

geolocate_ip ~60

Get geolocation data for an IP address. Returns country, city, region, coordinates, timezone, ISP, and organization.

NameTypeReqDescription
ipstringyesIPv4 or IPv6 address (e.g., "8.8.8.8")

No output schema declared.

No examples provided.

html_to_markdown ~94

Convert HTML content to clean Markdown. Supports GitHub Flavored Markdown with tables and strikethrough. Useful for scraping web content for LLM processing.

NameTypeReqDescription
gfmboolean–Use GitHub Flavored Markdown (default: true)
htmlstringyesHTML content to convert
strip_tagsstring–Comma-separated tags to strip (e.g., "script,style,nav")

No output schema declared.

No examples provided.

html_to_pdf ~48

Convert HTML content to a PDF document. Send HTML markup and receive a PDF. Useful for generating invoices, reports, and documents.

NameTypeReqDescription
htmlstringyesHTML content to convert to PDF

No output schema declared.

No examples provided.

http_status_lookup ~64

Look up an HTTP status code. Returns the name, description, common causes, how to fix, and RFC reference. Covers all standard codes plus Cloudflare codes.

NameTypeReqDescription
codenumberyesHTTP status code (e.g., 404, 429, 502)

No output schema declared.

No examples provided.

inspect_email ~52

Inspect an email address. Checks format validity, MX records, domain resolution, disposable domain detection, and role-based address detection.

NameTypeReqDescription
emailstringyesEmail address to inspect (e.g., "hello@example.com")

No output schema declared.

No examples provided.

json_diff ~82

Compare two JSON objects and return a structured diff. Shows additions, deletions, and changes with JSONPath locations. Useful for comparing API responses, config files, or database records.

NameTypeReqDescription
ignore_orderboolean–Ignore array element ordering (default: false)
modifiedstringyesModified JSON (after)
originalstringyesOriginal JSON (before)

No output schema declared.

No examples provided.

json_to_csv ~76

Convert a JSON array of objects to CSV format. Handles nested objects and custom delimiters.

NameTypeReqDescription
datastringyesJSON array of objects (e.g., '[{"name": "Alice", "age": 30}]')
delimiterstring–CSV delimiter: "," (default), ";", "\t", or "|"

No output schema declared.

No examples provided.

json_to_xml ~96

Convert a JSON object to well-formed XML. Supports custom root element, attribute conversion, and XML declaration toggle.

NameTypeReqDescription
jsonstringyesJSON content to convert (must be an object)
prettyboolean–Pretty-print XML output (default: true)
root_elementstring–Root element name (default: "root")
xml_declarationboolean–Include XML declaration header (default: true)

No output schema declared.

No examples provided.

json_to_yaml ~94

Convert a JSON object to YAML format. Useful for generating Kubernetes configs, Docker Compose files, and CI/CD pipeline definitions from JSON data.

NameTypeReqDescription
indentnumber–Indentation spaces: 2, 4, or 8 (default: 2)
inline_levelnumber–Depth for inline notation (default: 10, higher = more expanded)
jsonstringyesJSON content to convert

No output schema declared.

No examples provided.

markdown_to_html ~75

Convert Markdown text to HTML. Supports GFM (GitHub Flavored Markdown) including tables, code blocks, and task lists.

NameTypeReqDescription
allow_htmlboolean–Keep raw HTML from the input (default: false, HTML is escaped). Unsafe link schemes are always dropped.
markdownstringyesMarkdown text to convert

No output schema declared.

No examples provided.

markdown_to_pdf ~115

Convert Markdown content to a downloadable PDF document. Supports GFM tables, code blocks, and custom page sizes. Returns a URL to the generated PDF.

NameTypeReqDescription
marginstring–Page margin (default: "20mm")
markdownstringyesMarkdown content to convert
orientationstring–Orientation: portrait, landscape (default: portrait)
page_sizestring–Page size: A4, Letter, Legal (default: A4)
titlestring–Document title for PDF metadata

No output schema declared.

No examples provided.

my_ip ~37

Get the public IP address of the MCP server. Returns the IP, version (IPv4/IPv6), and whether it's a private address.

Input schema present but exposes no named parameters.

No output schema declared.

No examples provided.

parse_cron ~120

Parse a cron expression into a human-readable description and calculate next run times. Supports standard 5-field cron and special strings like @daily, @hourly.

NameTypeReqDescription
expressionstringyesCron expression (e.g., "*/5 * * * *", "0 9 * * MON-FRI")
num_nextnumber–Number of next run times to return (default: 5, max: 20)
timezonestring–Timezone for calculations (default: UTC, e.g., "Europe/Zurich")

No output schema declared.

No examples provided.

parse_robots_txt ~57

Fetch and parse a domain's robots.txt file. Returns user-agent rules, allowed/disallowed paths, crawl delays, and sitemap URLs.

NameTypeReqDescription
domainstringyesDomain name (e.g., "github.com"). Without https://

No output schema declared.

No examples provided.

parse_sitemap ~113

Fetch and parse a sitemap.xml file. Returns all URLs with lastmod, changefreq, and priority metadata. Can follow sitemap index files. Useful for SEO audits and content discovery.

NameTypeReqDescription
follow_indexboolean–Follow and parse child sitemaps in a sitemap index (default: false)
limitnumber–Max URLs to return (default: 100, max: 1000)
urlstringyesURL of the sitemap (e.g., "https://example.com/sitemap.xml")

No output schema declared.

No examples provided.

parse_user_agent ~49

Parse a User-Agent string. Detects browser name and version, operating system, device type, and whether it's a bot or crawler.

NameTypeReqDescription
user_agentstringyesUser-Agent string to parse

No output schema declared.

No examples provided.

take_screenshot ~175

Capture a screenshot of any webpage as PNG or JPEG. Configurable viewport size, full-page mode, and image quality.

NameTypeReqDescription
formatstring–Image format: "png" (default) or "jpeg"
full_pageboolean–Capture the entire scrollable page (default: false)
heightnumber–Viewport height in pixels (default: 800, range: 200-2160). Ignored if full_page is true.
qualitynumber–JPEG quality (default: 80, range: 1-100). Only applies to JPEG format.
urlstringyesURL to screenshot (e.g., "https://github.com")
widthnumber–Viewport width in pixels (default: 1280, range: 320-3840)

No output schema declared.

No examples provided.

test_regex ~134

Test a regular expression pattern against text. Returns all matches, captured groups, named groups, and match positions. Useful for validating patterns before deploying them.

NameTypeReqDescription
flagsstring–Regex flags: i (case-insensitive), m (multiline), s (dotall), u (unicode)
globalboolean–Find all matches, not just the first (default: true)
patternstringyesRegex pattern without delimiters (e.g., "^[a-z]+$", "(\w+)@(\w+)\.(\w+)")
textstringyesText to test the pattern against

No output schema declared.

No examples provided.

trace_redirects ~53

Follow a URL's redirect chain. Shows every hop with HTTP status code, final destination URL, and total number of redirects.

NameTypeReqDescription
urlstringyesURL to trace (e.g., "http://github.com")

No output schema declared.

No examples provided.

validate_email_auth ~62

Validate email authentication records (SPF, DKIM, DMARC) for a domain. Checks if each record exists, is valid, and returns the raw records.

NameTypeReqDescription
domainstringyesDomain name (e.g., "google.com"). Without https://

No output schema declared.

No examples provided.

validate_json_schema ~59

Validate JSON data against a JSON Schema definition (Draft-07+). Returns whether the data is valid and detailed error messages if not.

NameTypeReqDescription
datastringyesJSON data to validate
schemastringyesJSON Schema to validate against

No output schema declared.

No examples provided.

validate_structured_data ~69

Fetch a web page and extract all structured data (JSON-LD, Microdata, RDFa). Validates against common Schema.org types and reports missing properties. Useful for SEO audits.

NameTypeReqDescription
urlstringyesURL of the page to check (e.g., "https://example.com")

No output schema declared.

No examples provided.

validate_url ~54

Validate a URL's format and reachability. Checks syntax, whether it resolves, SSL status, response code, and response time.

NameTypeReqDescription
urlstringyesURL to validate (e.g., "https://cloudflare.com")

No output schema declared.

No examples provided.

whois_lookup ~55

Look up WHOIS registration data for a domain. Returns registrar, creation date, expiration date, name servers, and contact info.

NameTypeReqDescription
domainstringyesDomain name (e.g., "github.com"). Without https://

No output schema declared.

No examples provided.

xml_to_json ~89

Convert XML content to a JSON object. Handles attributes, namespaces, CDATA sections, and nested elements. Useful for parsing RSS feeds, SOAP responses, and legacy XML data.

NameTypeReqDescription
preserve_attributesboolean–Include XML attributes prefixed with @ (default: true)
prettyboolean–Pretty-print JSON output (default: true)
xmlstringyesXML content to convert

No output schema declared.

No examples provided.

yaml_to_json ~55

Convert YAML content to JSON. Supports multi-document YAML, anchors, aliases, and Kubernetes config files.

NameTypeReqDescription
prettyboolean–Pretty-print JSON output (default: true)
yamlstringyesYAML content to convert

No output schema declared.

No examples provided.

Common questions

What is the Apixies Developer API Suite MCP server?

Apixies Developer API Suite is an MCP server listed in the public MCP registry as io.apixies/mcp-server. 50 developer utility APIs as tools: SSL, DNS, WHOIS, email checks, HTML to PDF, sitemaps and more. This page covers its npm package (@apixies/mcp-server).

Is the Apixies Developer API Suite MCP server safe to use?

Apixies Developer API Suite scores 71 out of 100 on VerifyMCP. We found no known CVEs affecting it as of 25 September 2026. It declares no install or post-install scripts. That is a record of what we were able to check automatically, not an endorsement. The category breakdown on this page shows every signal behind the number, including the ones we could not confirm.

What tools does the Apixies Developer API Suite MCP server expose?

Apixies Developer API Suite exposes 50 tools: check_ssl, check_headers, inspect_email, parse_user_agent, geolocate_ip, and 45 more. Their descriptions and schemas cost roughly 4,020 tokens of context every time the server is loaded.

Is the Apixies Developer API Suite MCP server still maintained?

Apixies Developer API Suite is still listed as active in the MCP registry. We last reached this channel on 25 September 2026. Those dates come from our own scans of the registry and the channel itself, not from anything the publisher announced.

What licence is the Apixies Developer API Suite MCP server under?

Apixies Developer API Suite declares the MIT licence, which is OSI-approved. That covers the source only, and says nothing about the cost of any service it calls.