io.github.mbeato/apimesh

NPM · @MBEATO/APIMESH-MCP-SERVER · SCANNED AUG 3

74 paid web-analysis APIs (SEO, security, TLS, DNS, email) as MCP tools. USDC via x402.

Available components

+20 this week 60 60 Trust /100

Trust breakdown (6 categories)

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. How we score →

Supply Chain Security87

No malware found by supply-chain analysis.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.Partial
No install/post-install scripts declared.Pass
Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree. View diagnostics → Partial

Provenance & Transparency19

Repository check failed: the declared repository URL redirects; it must resolve directly. See how to fix → View diagnostics → Fail
Provenance check failed: no build-provenance attestation is published. See how to fix → View diagnostics → Fail
Clear OSI-approved license (MIT).Pass
Actively maintained (last published 99 days ago).Pass
Disclosure check failed: no security disclosure policy was found in the source repository. See how to fix → Fail

Schema Quality & AI Usability57

AI-judged instruction clarity (fair).Partial
Tool/resource definitions use about 4471 tokens (~58/item across 76 items; 76 tools + 0 resources), lean.Pass
Usage-examples check failed: none of the tools include examples. See how to fix → Fail

Stability & Change Management23

Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.Partial

Tool Coverage100

100% of tools have a non-trivial description (not blank, and not just the tool's name).Pass
100% of tool parameters carry a description.Pass

Capabilities100

Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.Pass

Install

Add this component to your MCP client. Where a client-specific snippet is available, pick your client below and copy it straight into your config; otherwise use the connection detail shown.

npm · @mbeato/apimesh-mcp-server

Claude Codex opencode OpenClaw Hermes Other

# add to Claude Code

claude mcp add mbeato-apimesh -- npx -y @mbeato/apimesh-mcp-server

# add to Codex CLI

codex mcp add mbeato-apimesh -- npx -y @mbeato/apimesh-mcp-server

// opencode.json

{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mbeato-apimesh": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@mbeato/apimesh-mcp-server"
      ],
      "enabled": true
    }
  }
}

# add to OpenClaw

openclaw mcp add mbeato-apimesh --command npx --arg -y --arg @mbeato/apimesh-mcp-server

# ~/.hermes/config.yaml

mcp_servers:
  mbeato-apimesh:
    command: "npx"
    args: ["-y", "@mbeato/apimesh-mcp-server"]

// mcp.json

{
  "mcpServers": {
    "mbeato-apimesh": {
      "command": "npx",
      "args": [
        "-y",
        "@mbeato/apimesh-mcp-server"
      ]
    }
  }
}

Changelog

Every change we have recorded for this component, newest first. Security-relevant changes are always shown. ▲ marks a change for the better, ▼ a change for the worse; unmarked changes are neutral.

3 Aug 26 +4
- Stability: unverified → 0.23 ▲ functional
2 Aug 26 +22
- Install scripts: pass → unverified ▼ security
- Provenance: fail → unverified ▼ security
- Known CVEs: unverified → partial ▲ security
- Malware scan: unverified → pass ▲ security
- License: pass → unverified ▼ functional
- Maintenance: pass → unverified ▼ functional
- Dependency health: unverified → partial ▲ functional
- Licence: MIT functional
1 Aug 26 −17
- We updated how we score, so this day's move reflects our rubric, not a change to the server See what changed → functional
30 Jul 26 +31
- Provenance: unverified → fail ▼ security
- Malware scan: pass → unverified ▼ security
- Install scripts: unverified → pass ▲ security
- Known CVEs: unverified → partial ▲ security
- Security disclosure: unverified → fail ▼ functional
- Tool coverage: unverified → 100 ▲ functional
- License: unverified → pass ▲ functional
- Schema quality: unverified → fair ▲ functional
- Maintenance: unverified → pass ▲ functional
- Licence: MIT functional
29 Jul 26 −20
- Tool coverage: 100 → unverified ▼ functional
- Security disclosure: fail → unverified ▼ functional
- Dependency health: unverified → partial ▲ functional
- First check of Schema quality: unverified functional
27 Jul 26 40

First indexed and scored.

Show 3 earlier entries Hide earlier entries

Diagnostics

Diagnostic detail from the automated scan of this channel: what the scanner observed at each step, so you can see exactly where a check passed or failed. It is informational only and never changes the trust score.

Captured 3 Aug 2026 · Analysed npm/@mbeato/[email protected]

Provenance none

Ecosystem: npm · Outcome: none

Dependencies 95 packages

95 packages in the resolved dependency tree · 95 deprecated · 29 stale.

The dependency tree was only partially resolved, so these counts may be incomplete.

MCP tools — 76 exposed · ~4,471 tokens

The tools this component advertises to a client, with an estimated token cost for each. Expand a tool to see its parameters and schema. The per-tool counts are indicative and are not scored directly; the schema's total context footprint is one signal in Schema Quality & AI Usability.

Tool Tokens

api_endpoint_discovery ~40

Comprehensively crawl and analyze API endpoints on the specified domain

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Target domain to scan, e.g., example.com

No output schema declared.

No examples provided.

api_linting ~63

Run a comprehensive linting and validation on provided OpenAPI spec and implementation URLs

Input Output Examples

Name	Type	Req	Description
impl_url	string	yes	URL to the live API endpoint to test actual implementation.
spec_url	string	yes	URL to the OpenAPI specification document (JSON or YAML).

No output schema declared.

No examples provided.

api_response_heuristics ~35

Comprehensive API response heuristic analysis with scoring and recommendations

Input Output Examples

Name	Type	Req	Description
url	string	yes	URL of the API endpoint to analyze

No output schema declared.

No examples provided.

api_schema_delta ~58

Compare multiple API schemas from given URLs and return detailed diff and evolution analysis

Input Output Examples

Name	Type	Req	Description
type	string	yes	Type of schema, either REST JSON Schema or GraphQL SDL
urls	string	yes	Array of schema URLs to fetch and compare

No output schema declared.

No examples provided.

api_schema_diff ~43

Compare multiple API schema versions (REST or GraphQL) to highlight differences and score compatibility

Input Output Examples

Name	Type	Req	Description
schemas	string	yes	List of schema URLs and version labels to compare

No output schema declared.

No examples provided.

api_standard_compliance ~41

Perform a comprehensive API standard compliance analysis on the target API response URL

Input Output Examples

Name	Type	Req	Description
url	string	yes	HTTP or HTTPS URL of the API endpoint to analyze

No output schema declared.

No examples provided.

brand_assets ~75

Extract brand assets from any domain. Returns logo URL, favicon, theme colors, OG image, and site name. Free preview: GET https://brand-assets.apimesh.xyz/preview?domain=... returns Google favicon URL for free

Input Output Examples

Name	Type	Req	Description
domain	string	yes	The domain to extract assets from (e.g. example.com)

No output schema declared.

No examples provided.

cdn_infrastructure_enricher ~51

Comprehensive paid audit integrating DNS, HTTP headers, IP and regional info with detailed scoring and recommendations

Input Output Examples

Name	Type	Req	Description
url	string	yes	Target website URL (http(s)://...) to deeply analyze.

No output schema declared.

No examples provided.

content_security_policy_check ~39

Perform a comprehensive security header and content security policy audit

Input Output Examples

Name	Type	Req	Description
url	string	yes	The full HTTPS or HTTP URL of the site to analyze

No output schema declared.

No examples provided.

content_shuffle_detector ~54

Paid comprehensive audit with multiple fetches, deep NLP content variation analysis, content diffing, and scoring to detect content shuffling and obfuscation

Input Output Examples

Name	Type	Req	Description
url	string	yes	The target URL (http(s)://...)

No output schema declared.

No examples provided.

core_web_vitals ~83

Get Core Web Vitals and Lighthouse performance scores for any URL. Returns LCP, CLS, INP field data plus performance, accessibility, best-practices, and SEO scores. Free preview: GET https://core-web-vitals.apimesh.xyz/preview?url=... returns performance score only

Input Output Examples

Name	Type	Req	Description
url	string	yes	The URL to analyze

No output schema declared.

No examples provided.

cross_origin_resource_policymapper ~69

Perform comprehensive CORS headers audit across multiple endpoints

Input Output Examples

Name	Type	Req	Description
baseUrl	string	yes	Base URL or domain to analyze (e.g. https://example.com)
endpoints	string	—	Optional comma-separated list of endpoint paths to analyze (e.g. /api,/auth)

No output schema declared.

No examples provided.

csp_policy_heuristics ~40

Paid comprehensive audit with advanced heuristic analysis, web crawling, scoring, and detailed recommendations

Input Output Examples

Name	Type	Req	Description
url	string	yes	Target URL to analyze

No output schema declared.

No examples provided.

dependency_license_audit ~71

Comprehensive license audit across multiple project manifests and license databases with risk scoring

Input Output Examples

Name	Type	Req	Description
includeDev	boolean	—	Optional flag to include devDependencies or test dependencies
manifest_urls	string	yes	Comma-separated list of public URLs to project manifest files (package.json, requirements.txt, pom.xml, etc.)

No output schema declared.

No examples provided.

dns_propagation_heatmap ~52

Paid comprehensive DNS propagation audit across multiple resolver types, including scoring and actionable recommendations

Input Output Examples

Name	Type	Req	Description
record	string	yes	DNS record full domain name
type	string	yes	DNS record type to query

No output schema declared.

No examples provided.

dns_propagation_inspector ~65

Comprehensive DNS propagation audit across global resolvers with detailed result analysis

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Domain name to check DNS propagation for
recordType	string	yes	DNS record type to query, e.g., A, AAAA, CNAME, TXT

No output schema declared.

No examples provided.

dns_propagation_mapper ~76

Comprehensive DNS propagation audit across multiple global DNS resolvers with delay correlation, misconfiguration detection, scoring, grading, and recommendations

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Domain name to check propagation status for
recordType	string	—	DNS record type to evaluate, e.g. A, AAAA, CNAME, TXT

No output schema declared.

No examples provided.

dns_propagation_simulator ~76

Simulate DNS record propagation across multiple DNS resolvers with delay estimation and misconfiguration detection

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Domain name to check (e.g. example.com)
recordType	string	—	DNS record type to query (A, AAAA, CNAME, TXT, etc.). Defaults to A.

No output schema declared.

No examples provided.

email_security ~84

Check email security configuration for any domain. Analyzes SPF, DMARC, DKIM (probes 10 common selectors), and MX records with provider detection. Free preview: GET https://email-security.apimesh.xyz/preview?domain=... checks SPF and DMARC for free

Input Output Examples

Name	Type	Req	Description
domain	string	yes	The domain to check (e.g. example.com)

No output schema declared.

No examples provided.

email_verify ~83

Verify an email address: syntax validation, MX record check, disposable domain detection, role-address detection, free provider detection, and deliverability assessment. Free preview: GET https://email-verify.apimesh.xyz/preview?email=... checks syntax and disposable status for free

Input Output Examples

Name	Type	Req	Description
email	string	yes	The email address to verify (e.g. [email protected])

No output schema declared.

No examples provided.

favicon_checker ~48

Check whether a website has a favicon and get its URL, format, and status. Useful for link previews and site branding validation

Input Output Examples

Name	Type	Req	Description
url	string	yes	The URL to check for a favicon

No output schema declared.

No examples provided.

http_method_enumeration ~50

Full enumeration of HTTP methods supported by a target URL with scoring and analysis

Input Output Examples

Name	Type	Req	Description
url	string	yes	Target URL (must be a valid HTTP or HTTPS URL, max 2048 characters)

No output schema declared.

No examples provided.

http_status_checker ~59

Check the live HTTP status of any URL, optionally verify against an expected code. Useful for uptime monitoring, redirect validation, and link checking

Input Output Examples

Name	Type	Req	Description
expected	number	—	Expected HTTP status code
url	string	yes	The URL to check

No output schema declared.

No examples provided.

indexability_checker ~85

Check if a URL is indexable by search engines. Performs 5-layer analysis: robots.txt rules, HTTP status, meta robots, X-Robots-Tag, and canonical tag. Free preview: GET https://indexability.apimesh.xyz/preview?url=... checks HTTP status and meta robots for free

Input Output Examples

Name	Type	Req	Description
url	string	yes	The URL to check

No output schema declared.

No examples provided.

ip_geolocation_enrichment ~44

Enrich an IP address with detailed ASN, ISP, geolocation, and routing data

Input Output Examples

Name	Type	Req	Description
ip	string	yes	IPv4 or IPv6 address to analyze

No output schema declared.

No examples provided.

ip_infrastructure_analyst ~51

Analyze an IP address for ASN, ISP, geolocation, and routing info; returns comprehensive report with scoring and recommendations

Input Output Examples

Name	Type	Req	Description
ip	string	yes	IPv4 or IPv6 address to analyze

No output schema declared.

No examples provided.

ip_infrastructure_analyzer ~47

Comprehensive IP infrastructure analysis: ASN, ISP, geolocation, routing checks, scoring, recommendations

Input Output Examples

Name	Type	Req	Description
ip	string	yes	IPv4 or IPv6 address to analyze (required)

No output schema declared.

No examples provided.

microservice_health_check ~66

Check health and response times of up to 10 service URLs in parallel. Free preview: GET https://microservice-health-check.apimesh.xyz/preview?url=... checks 1 service for free

Input Output Examples

Name	Type	Req	Description
services	array	yes	Array of service URLs to health-check

No output schema declared.

No examples provided.

mock_jwt_generator ~105

Generate test JWTs with custom claims and expiry for local development. Returns a signed HS256 token. Useful for testing auth flows without a real identity provider.

Input Output Examples

Name	Type	Req	Description
expiresInSeconds	number	—	Token expiry in seconds (default: 3600, max: 7 days)
payload	object	yes	JWT payload claims (e.g. { sub: '123', role: 'admin' })
secret	string	yes	HMAC secret for HS256 signing

No output schema declared.

No examples provided.

network_route_mapper ~46

Paid comprehensive analysis of network routing paths including ASN hops, geolocation, latency, suspicion scoring, and remediation

Input Output Examples

Name	Type	Req	Description
target	string	yes	Target IP address or domain name to analyze

No output schema declared.

No examples provided.

performance_security_compliance_report ~50

Comprehensive payable audit combining performance metrics, security headers, SSL cert and DNS analysis with scoring and prioritized fix suggestions

Input Output Examples

Name	Type	Req	Description
url	string	yes	Target URL (http(s)://...) to scan.

No output schema declared.

No examples provided.

port_scanner ~34

Perform a deep port scan on a target IP or hostname

Input Output Examples

Name	Type	Req	Description
target	string	yes	Target IP or hostname to scan

No output schema declared.

No examples provided.

port_scanner_aggregate ~79

Deep scan of a list of IP addresses or CIDR ranges with multi-source aggregation and vulnerability scoring

Input Output Examples

Name	Type	Req	Description
maxPorts	number	—	Optional limit on number of top common ports to scan per host (default 100).
targets	string	yes	List of IP addresses (IPv4 or v6) or CIDR ranges to scan.

No output schema declared.

No examples provided.

privacy_policy_enricher ~56

Fetch and analyze a privacy policy URL, combining multiple signals for GDPR and CCPA compliance, data sharing practices, and privacy features

Input Output Examples

Name	Type	Req	Description
url	string	yes	Public URL of privacy policy page to analyze (HTTP or HTTPS)

No output schema declared.

No examples provided.

privacy_policy_qualify ~48

Fetch and analyze privacy policies across domains for GDPR/CCPA compliance and data sharing signals

Input Output Examples

Name	Type	Req	Description
url	string	yes	URL to privacy policy or site landing page (http or https)

No output schema declared.

No examples provided.

privacy_risk_score ~42

Comprehensive privacy risk analysis of a domain's publicly available privacy policies and disclosures

Input Output Examples

Name	Type	Req	Description
url	string	yes	Public URL of the domain's homepage or privacy policy

No output schema declared.

No examples provided.

redirect_chain ~77

Trace the full redirect chain for any URL. Returns each hop with status code, location, and latency. Detects loops and extracts the final canonical URL. Free preview: GET https://redirect-chain.apimesh.xyz/preview?url=... traces up to 5 hops for free

Input Output Examples

Name	Type	Req	Description
url	string	yes	The URL to trace

No output schema declared.

No examples provided.

regex_builder ~115

Build and test regex patterns. POST /build creates a regex from a pattern string or components. POST /test validates a pattern against test strings. Useful for generating and debugging regular expressions.

Input Output Examples

Name	Type	Req	Description
flags	string	—	Regex flags (g, i, m, s, u, y)
mode	string	yes	'build' to create a regex, 'test' to validate against strings
pattern	string	yes	Regex pattern string
testStrings	array	—	Test strings (required for 'test' mode)

No output schema declared.

No examples provided.

robots_txt_parser ~44

Fetch and parse a website's robots.txt into structured rules, sitemaps, and crawl directives

Input Output Examples

Name	Type	Req	Description
url	string	yes	The website URL whose robots.txt to parse

No output schema declared.

No examples provided.

security_headers ~84

Audit HTTP security headers for any URL. Checks 10 headers (CSP, HSTS, X-Frame-Options, etc.) with weighted grading A+ through F and remediation suggestions. Free preview: GET https://security-headers.apimesh.xyz/preview?url=... checks 3 key headers for free

Input Output Examples

Name	Type	Req	Description
url	string	yes	The URL to audit

No output schema declared.

No examples provided.

security_headers_checker ~36

Perform a comprehensive security headers audit with detailed scoring and remediation

Input Output Examples

Name	Type	Req	Description
url	string	yes	Full URL starting with http(s)://

No output schema declared.

No examples provided.

seo_audit ~99

Run a comprehensive on-page SEO audit on any URL. Analyzes title, meta description, headings, images, links, content, canonical, OG tags, JSON-LD, and robots directives with a 0-100 score. Free preview: GET https://seo-audit.apimesh.xyz/preview?url=... returns title, meta, H1, and score for free

Input Output Examples

Name	Type	Req	Description
url	string	yes	The URL to audit

No output schema declared.

No examples provided.

site_security_baseline ~36

Comprehensive baseline audit with combined security headers, SSL, and configuration checks

Input Output Examples

Name	Type	Req	Description
url	string	yes	Target website URL to analyze

No output schema declared.

No examples provided.

ssl_and_tls_hardening_score ~48

Run full SSL, TLS, and HTTP security header comprehensive hardening score with actionable recommendations

Input Output Examples

Name	Type	Req	Description
url	string	yes	HTTPS URL to analyze (http:// will be rejected)

No output schema declared.

No examples provided.

ssl_expiry_forecast ~51

Paid endpoint combining certificate transparency logs, DNS, SSL cert data to forecast expiry across multiple domains

Input Output Examples

Name	Type	Req	Description
domains	string	yes	Comma-separated list of domain names to check (max 10 domains).

No output schema declared.

No examples provided.

ssl_tls_configuration_forecast ~42

Comprehensive paid SSL/TLS configuration forecast and security score for a domain

Input Output Examples

Name	Type	Req	Description
domain	string	yes	Domain name to analyze (e.g. example.com)

No output schema declared.

No examples provided.

ssl_tls_configuration_ranker ~41

Perform a deep, comprehensive SSL/TLS configuration audit of a target site

Input Output Examples

Name	Type	Req	Description
url	string	yes	URL of the target site (https://...)

No output schema declared.

No examples provided.

ssl_tls_expiry_forecast ~45

Comprehensive SSL/TLS certificate and protocol expiry forecast for multiple domains

Input Output Examples

Name	Type	Req	Description
domains	string	yes	Comma separated domains to analyze (required, max 10 domains)

No output schema declared.

No examples provided.

ssl_tls_hardening_assessor ~45

Get a comprehensive SSL/TLS and DNS record security assessment for a hostname

Input Output Examples

Name	Type	Req	Description
host	string	yes	Hostname to analyze, e.g. example.com

No output schema declared.

No examples provided.

ssl_tls_hardening_forecast ~44

Analyze SSL/TLS info and forecast renewal and security outlook with detailed alerts and recommendations

Input Output Examples

Name	Type	Req	Description
host	string	yes	Hostname to analyze (no scheme)

No output schema declared.

No examples provided.

On this page

Handy links

Scoring key

80+ high trust
60–79 medium
below 60 low

How we score

Score history · last 30 days

27 Jul 3 Aug