# io.github.mbeato/apimesh (npm · @mbeato/apimesh-mcp-server)

74 paid web-analysis APIs (SEO, security, TLS, DNS, email) as MCP tools. USDC via x402.

- Trust score: 60/100 (medium)
- Change this week: +20
- Registry status: active
- Liveness: live
- Owner verified: no
- Last scored: 2026-08-03

## Components

- npm · `@mbeato/apimesh-mcp-server`: 60/100 (this document), [markdown](https://verifymcp.io/servers/mbeato-apimesh/mbeato-apimesh-mcp-server.md), [page](https://verifymcp.io/servers/mbeato-apimesh/mbeato-apimesh-mcp-server)

## Channel facts

- Registry: `npm`
- Package: `@mbeato/apimesh-mcp-server`
- Version: `1.8.2`
- Transport: `stdio`

## Trust breakdown

How this component scores in each security and reliability category. Every signal is checked automatically from public evidence about the published package, including repeated runs of it in an isolated sandbox, and we only credit what we can confirm. Scores are 0–100 per category. Scoring method: https://verifymcp.io/docs/scoring (what has changed: https://verifymcp.io/docs/scoring/changelog)

Scored 2026-08-03.

- **Supply Chain Security**: 87/100
  - No malware found by supply-chain analysis.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
  - No install/post-install scripts declared.
  - Only part of the dependency tree could be resolved (95 of 99), so this covers what we could see, not the whole tree.
- **Provenance & Transparency**: 19/100
  - Repository check failed: the declared repository URL redirects; it must resolve directly.
  - Provenance check failed: no build-provenance attestation is published.
  - Clear OSI-approved license (MIT).
  - Actively maintained (last published 99 days ago).
  - Disclosure check failed: no security disclosure policy was found in the source repository.
- **Schema Quality & AI Usability**: 57/100
  - AI-judged instruction clarity (fair).
  - Tool/resource definitions use about 4471 tokens (~58/item across 76 items; 76 tools + 0 resources), lean.
  - Usage-examples check failed: none of the tools include examples.
- **Stability & Change Management**: 23/100
  - Stability observed for 7 of 30 days with no destabilising changes; credit accrues until the full window elapses.
- **Tool Coverage**: 100/100
  - 100% of tools have a non-trivial description (not blank, and not just the tool's name).
  - 100% of tool parameters carry a description.
- **Capabilities**: 100/100
  - Implements a supported MCP spec version (2025-11-25); the latest is 2026-07-28.

## Install

### Claude

```bash
claude mcp add mbeato-apimesh -- npx -y @mbeato/apimesh-mcp-server
```

### Codex

```bash
codex mcp add mbeato-apimesh -- npx -y @mbeato/apimesh-mcp-server
```

### opencode

```json
{
  "$schema": "https://opencode.ai/config.json",
  "mcp": {
    "mbeato-apimesh": {
      "type": "local",
      "command": [
        "npx",
        "-y",
        "@mbeato/apimesh-mcp-server"
      ],
      "enabled": true
    }
  }
}
```

### OpenClaw

```bash
openclaw mcp add mbeato-apimesh --command npx --arg -y --arg @mbeato/apimesh-mcp-server
```

### Hermes

```yaml
mcp_servers:
  mbeato-apimesh:
    command: "npx"
    args: ["-y", "@mbeato/apimesh-mcp-server"]
```

### Other

```json
{
  "mcpServers": {
    "mbeato-apimesh": {
      "command": "npx",
      "args": [
        "-y",
        "@mbeato/apimesh-mcp-server"
      ]
    }
  }
}
```

## Changelog

Every change recorded for this component, newest first. Days that predate change tracking, or that we cannot explain, say so: "we were watching and nothing happened" and "we were not watching" are different claims.

### 2026-08-03 (score 60, +4)

- [functional improvement] Stability: unverified → 0.23

### 2026-08-02 (score 56, +22)

- [security regression] Install scripts: pass → unverified
- [security regression] Provenance: fail → unverified
- [security improvement] Known CVEs: unverified → partial
- [security improvement] Malware scan: unverified → pass
- [functional regression] License: pass → unverified
- [functional regression] Maintenance: pass → unverified
- [functional improvement] Dependency health: unverified → partial
- [functional] Licence: MIT

### 2026-08-01 (score 34, −17)

- [functional] We updated how we score, so this day's move reflects our rubric, not a change to the server

### 2026-07-30 (score 51, +31)

- [security regression] Provenance: unverified → fail
- [security regression] Malware scan: pass → unverified
- [security improvement] Install scripts: unverified → pass
- [security improvement] Known CVEs: unverified → partial
- [functional regression] Security disclosure: unverified → fail
- [functional improvement] Tool coverage: unverified → 100
- [functional improvement] License: unverified → pass
- [functional improvement] Schema quality: unverified → fair
- [functional improvement] Maintenance: unverified → pass
- [functional] Licence: MIT

### 2026-07-29 (score 20, −20)

- [functional regression] Tool coverage: 100 → unverified
- [functional regression] Security disclosure: fail → unverified
- [functional improvement] Dependency health: unverified → partial
- [functional] First check of Schema quality: unverified

### 2026-07-27 (score 40)

First indexed and scored.

## MCP tools (76)

### `web_checker` (~88 tokens)

Check if a brand name is available across 5 domain TLDs (.com, .io, .xyz, .dev, .ai), GitHub, npm, PyPI, and Reddit in one call. Free preview: GET https://check.apimesh.xyz/preview?name=... returns .com availability only

Input parameters:

- `name` (string, required): The brand or product name to check

### `http_status_checker` (~59 tokens)

Check the live HTTP status of any URL, optionally verify against an expected code. Useful for uptime monitoring, redirect validation, and link checking

Input parameters:

- `expected` (number): Expected HTTP status code
- `url` (string, required): The URL to check

### `favicon_checker` (~48 tokens)

Check whether a website has a favicon and get its URL, format, and status. Useful for link previews and site branding validation

Input parameters:

- `url` (string, required): The URL to check for a favicon

### `microservice_health_check` (~66 tokens)

Check health and response times of up to 10 service URLs in parallel. Free preview: GET https://microservice-health-check.apimesh.xyz/preview?url=... checks 1 service for free

Input parameters:

- `services` (array, required): Array of service URLs to health-check

### `robots_txt_parser` (~44 tokens)

Fetch and parse a website's robots.txt into structured rules, sitemaps, and crawl directives

Input parameters:

- `url` (string, required): The website URL whose robots.txt to parse

### `core_web_vitals` (~83 tokens)

Get Core Web Vitals and Lighthouse performance scores for any URL. Returns LCP, CLS, INP field data plus performance, accessibility, best-practices, and SEO scores. Free preview: GET https://core-web-vitals.apimesh.xyz/preview?url=... returns performance score only

Input parameters:

- `url` (string, required): The URL to analyze

### `security_headers` (~84 tokens)

Audit HTTP security headers for any URL. Checks 10 headers (CSP, HSTS, X-Frame-Options, etc.) with weighted grading A+ through F and remediation suggestions. Free preview: GET https://security-headers.apimesh.xyz/preview?url=... checks 3 key headers for free

Input parameters:

- `url` (string, required): The URL to audit

### `redirect_chain` (~77 tokens)

Trace the full redirect chain for any URL. Returns each hop with status code, location, and latency. Detects loops and extracts the final canonical URL. Free preview: GET https://redirect-chain.apimesh.xyz/preview?url=... traces up to 5 hops for free

Input parameters:

- `url` (string, required): The URL to trace

### `email_security` (~84 tokens)

Check email security configuration for any domain. Analyzes SPF, DMARC, DKIM (probes 10 common selectors), and MX records with provider detection. Free preview: GET https://email-security.apimesh.xyz/preview?domain=... checks SPF and DMARC for free

Input parameters:

- `domain` (string, required): The domain to check (e.g. example.com)

### `seo_audit` (~99 tokens)

Run a comprehensive on-page SEO audit on any URL. Analyzes title, meta description, headings, images, links, content, canonical, OG tags, JSON-LD, and robots directives with a 0-100 score. Free preview: GET https://seo-audit.apimesh.xyz/preview?url=... returns title, meta, H1, and score for free

Input parameters:

- `url` (string, required): The URL to audit

### `indexability_checker` (~85 tokens)

Check if a URL is indexable by search engines. Performs 5-layer analysis: robots.txt rules, HTTP status, meta robots, X-Robots-Tag, and canonical tag. Free preview: GET https://indexability.apimesh.xyz/preview?url=... checks HTTP status and meta robots for free

Input parameters:

- `url` (string, required): The URL to check

### `brand_assets` (~75 tokens)

Extract brand assets from any domain. Returns logo URL, favicon, theme colors, OG image, and site name. Free preview: GET https://brand-assets.apimesh.xyz/preview?domain=... returns Google favicon URL for free

Input parameters:

- `domain` (string, required): The domain to extract assets from (e.g. example.com)

### `email_verify` (~83 tokens)

Verify an email address: syntax validation, MX record check, disposable domain detection, role-address detection, free provider detection, and deliverability assessment. Free preview: GET https://email-verify.apimesh.xyz/preview?email=... checks syntax and disposable status for free

Input parameters:

- `email` (string, required): The email address to verify (e.g. user@example.com)

### `tech_stack` (~89 tokens)

Detect the technology stack of any website. Analyzes HTTP headers and HTML to identify CMS, frameworks, languages, analytics, CDN, hosting, JavaScript libraries, and CSS frameworks. Free preview: GET https://tech-stack.apimesh.xyz/preview?url=... detects technologies from HTTP headers only

Input parameters:

- `url` (string, required): The URL to analyze (e.g. https://example.com)

### `wallet_usage` (~69 tokens)

Check your wallet's APIMesh spend and cap status. Returns daily/7d/30d spend totals, active spend cap with remaining budget, and recent requests. No authentication required.

Input parameters:

- `address` (string, required): Your 0x wallet address (e.g. 0xabc...def)

### `web_resource_validator` (~77 tokens)

Validate presence and correctness of common web resources (robots.txt, sitemap.xml, openapi.json, agent.json) for any domain. Returns availability status for the requested resource.

Input parameters:

- `resource` (string, required): The web resource to validate
- `url` (string, required): The website URL to validate resources for (e.g. https://example.com)

### `website_security_header_info` (~84 tokens)

Analyze security-related HTTP headers for any website. Checks Content-Security-Policy, Strict-Transport-Security, X-Content-Type-Options, X-Frame-Options, X-XSS-Protection, Referrer-Policy, and Permissions-Policy with issue detection.

Input parameters:

- `url` (string, required): The website URL to analyze (e.g. https://example.com)

### `website_vulnerability_scan` (~93 tokens)

Comprehensive website security audit combining hostname analysis, SSL certificate validation, HTTP security headers, cookie security, and Content Security Policy analysis. Returns an overall security score (0-100) with actionable recommendations. Supports basic, detailed, and full scan levels.

Input parameters:

- `level` (string): Scan detail level (default: full)
- `url` (string, required): The website URL to scan (e.g. https://example.com)

### `mock_jwt_generator` (~105 tokens)

Generate test JWTs with custom claims and expiry for local development. Returns a signed HS256 token. Useful for testing auth flows without a real identity provider.

Input parameters:

- `expiresInSeconds` (number): Token expiry in seconds (default: 3600, max: 7 days)
- `payload` (object, required): JWT payload claims (e.g. { sub: '123', role: 'admin' })
- `secret` (string, required): HMAC secret for HS256 signing

### `regex_builder` (~115 tokens)

Build and test regex patterns. POST /build creates a regex from a pattern string or components. POST /test validates a pattern against test strings. Useful for generating and debugging regular expressions.

Input parameters:

- `flags` (string): Regex flags (g, i, m, s, u, y)
- `mode` (string, required): 'build' to create a regex, 'test' to validate against strings
- `pattern` (string, required): Regex pattern string
- `testStrings` (array): Test strings (required for 'test' mode)

### `status_code_checker` (~63 tokens)

Check the live HTTP status code of any URL. Returns the actual status code, reason phrase, and response headers. Simpler than http_status_checker — no expected-code validation.

Input parameters:

- `url` (string, required): The URL to check (must include http:// or https://)

### `swagger_docs_creator` (~106 tokens)

Generate OpenAPI 3.0 documentation for an API endpoint. Provide the path, method, summary, and optionally parameters/requestBody/responses to get a complete OpenAPI spec fragment.

Input parameters:

- `description` (string): Full description of the endpoint
- `method` (string, required): HTTP method (GET, POST, PUT, DELETE)
- `path` (string, required): API endpoint path (e.g. /api/users)
- `summary` (string, required): Short summary of what the endpoint does

### `user_agent_analyzer` (~54 tokens)

Parse a User-Agent string into structured data: browser name/version, OS name/version, device type, and bot detection. Useful for analytics and request filtering.

Input parameters:

- `ua` (string, required): The User-Agent string to parse

### `yaml_validator` (~50 tokens)

Validate YAML syntax and structure. Returns parsed result on success or detailed error with line/column on failure. Useful for CI pipelines and config file validation.

Input parameters:

- `yaml` (string, required): The YAML string to validate

### `wallet_set_cap` (~119 tokens)

Set a spend cap on your wallet. Once the daily or monthly USDC limit is reached, further paid API calls return 429 before payment is attempted. Set limits to null to remove a cap.

Input parameters:

- `address` (string, required): Your 0x wallet address
- `daily_limit_usd` (number|null, required): Max daily spend in USD (null = unlimited)
- `label` (string|null): Friendly label (e.g. 'Claude Desktop')
- `monthly_limit_usd` (number|null, required): Max monthly spend in USD (null = unlimited)

### `subdomain_vulnerability_rankings` (~38 tokens)

Paid comprehensive subdomain enumeration and vulnerability ranking

Input parameters:

- `domain` (string, required): Domain name to scan, e.g., example.com

### `csp_policy_heuristics` (~40 tokens)

Paid comprehensive audit with advanced heuristic analysis, web crawling, scoring, and detailed recommendations

Input parameters:

- `url` (string, required): Target URL to analyze

### `ssl_tls_risk_analyzer` (~56 tokens)

Aggregates SSL/TLS configuration details from public scans, DNS records, and certificate transparency logs, then performs a risk assessment

Input parameters:

- `host` (string, required): Hostname or URL to analyze (http(s):// optional)

### `subdomain_vulnerability_ranking` (~36 tokens)

Paid comprehensive subdomain enumeration and vulnerability ranking

Input parameters:

- `domain` (string, required): Domain to enumerate e.g. example.com

### `subdomain_exposure_score` (~36 tokens)

Paid comprehensive full subdomain exposure scoring and audit report

Input parameters:

- `domain` (string, required): Domain name to analyze subdomains for

### `ip_infrastructure_analyst` (~51 tokens)

Analyze an IP address for ASN, ISP, geolocation, and routing info; returns comprehensive report with scoring and recommendations

Input parameters:

- `ip` (string, required): IPv4 or IPv6 address to analyze

### `subdomain_exposure_scorer` (~42 tokens)

Comprehensive enumeration and exposure scoring of all detected subdomains for a domain

Input parameters:

- `domain` (string, required): Base domain, e.g. example.com

### `ssl_tls_threat_assessment` (~39 tokens)

Comprehensive TLS security threat assessment for a domain

Input parameters:

- `domain` (string, required): The domain or hostname to assess SSL/TLS configurations for

### `privacy_policy_qualify` (~48 tokens)

Fetch and analyze privacy policies across domains for GDPR/CCPA compliance and data sharing signals

Input parameters:

- `url` (string, required): URL to privacy policy or site landing page (http or https)

### `dns_propagation_mapper` (~76 tokens)

Comprehensive DNS propagation audit across multiple global DNS resolvers with delay correlation, misconfiguration detection, scoring, grading, and recommendations

Input parameters:

- `domain` (string, required): Domain name to check propagation status for
- `recordType` (string): DNS record type to evaluate, e.g. A, AAAA, CNAME, TXT

### `ip_infrastructure_analyzer` (~47 tokens)

Comprehensive IP infrastructure analysis: ASN, ISP, geolocation, routing checks, scoring, recommendations

Input parameters:

- `ip` (string, required): IPv4 or IPv6 address to analyze (required)

### `ip_geolocation_enrichment` (~44 tokens)

Enrich an IP address with detailed ASN, ISP, geolocation, and routing data

Input parameters:

- `ip` (string, required): IPv4 or IPv6 address to analyze

### `website_authenticity_assessment` (~47 tokens)

Comprehensive website authenticity assessment combining SSL cert validation, DNS records, redirect chain analysis, and server headers

Input parameters:

- `url` (string, required): Target website URL (http(s)://...)

### `ssl_and_tls_hardening_score` (~48 tokens)

Run full SSL, TLS, and HTTP security header comprehensive hardening score with actionable recommendations

Input parameters:

- `url` (string, required): HTTPS URL to analyze (http:// will be rejected)

### `security_headers_checker` (~36 tokens)

Perform a comprehensive security headers audit with detailed scoring and remediation

Input parameters:

- `url` (string, required): Full URL starting with http(s)://

### `subdomain_exposure_ranking` (~62 tokens)

Comprehensive paid scan: exhaustive subdomain enumeration from DNS, CT logs, plus HTTP endpoint probing, header analysis, TLS version checks, outdated service detection, with full scoring and rich recommendations

Input parameters:

- `domain` (string, required): Root domain to enumerate and analyze

### `ssl_tls_hardening_forecast` (~44 tokens)

Analyze SSL/TLS info and forecast renewal and security outlook with detailed alerts and recommendations

Input parameters:

- `host` (string, required): Hostname to analyze (no scheme)

### `subdomain_exposure_rankings` (~37 tokens)

Paid, comprehensive analysis of subdomain exposure and security ranking

Input parameters:

- `domain` (string, required): Root domain to enumerate and analyze

### `ssl_tls_expiry_forecast` (~45 tokens)

Comprehensive SSL/TLS certificate and protocol expiry forecast for multiple domains

Input parameters:

- `domains` (string, required): Comma separated domains to analyze (required, max 10 domains)

### `network_route_mapper` (~46 tokens)

Paid comprehensive analysis of network routing paths including ASN hops, geolocation, latency, suspicion scoring, and remediation

Input parameters:

- `target` (string, required): Target IP address or domain name to analyze

### `subdomain_exposure_heatmap` (~50 tokens)

Exhaustive subdomain enumeration from multiple sources, risk analysis, exposure scoring, recommendations and heatmap report

Input parameters:

- `domain` (string, required): Root domain to audit (e.g. example.com)

### `dns_propagation_simulator` (~76 tokens)

Simulate DNS record propagation across multiple DNS resolvers with delay estimation and misconfiguration detection

Input parameters:

- `domain` (string, required): Domain name to check (e.g. example.com)
- `recordType` (string): DNS record type to query (A, AAAA, CNAME, TXT, etc.). Defaults to A.

### `ssl_tls_configuration_ranker` (~41 tokens)

Perform a deep, comprehensive SSL/TLS configuration audit of a target site

Input parameters:

- `url` (string, required): URL of the target site (https://...)

### `privacy_policy_enricher` (~56 tokens)

Fetch and analyze a privacy policy URL, combining multiple signals for GDPR and CCPA compliance, data sharing practices, and privacy features

Input parameters:

- `url` (string, required): Public URL of privacy policy page to analyze (HTTP or HTTPS)

### `privacy_risk_score` (~42 tokens)

Comprehensive privacy risk analysis of a domain's publicly available privacy policies and disclosures

Input parameters:

- `url` (string, required): Public URL of the domain's homepage or privacy policy

### `http_method_enumeration` (~50 tokens)

Full enumeration of HTTP methods supported by a target URL with scoring and analysis

Input parameters:

- `url` (string, required): Target URL (must be a valid HTTP or HTTPS URL, max 2048 characters)

### `web_misconfiguration_scan` (~38 tokens)

Run a comprehensive security misconfiguration scan against the specified URL

Input parameters:

- `url` (string, required): Target URL to scan (http or https)

### `dependency_license_audit` (~71 tokens)

Comprehensive license audit across multiple project manifests and license databases with risk scoring

Input parameters:

- `includeDev` (boolean): Optional flag to include devDependencies or test dependencies
- `manifest_urls` (string, required): Comma-separated list of public URLs to project manifest files (package.json, requirements.txt, pom.xml, etc.)

### `ssl_tls_configuration_forecast` (~42 tokens)

Comprehensive paid SSL/TLS configuration forecast and security score for a domain

Input parameters:

- `domain` (string, required): Domain name to analyze (e.g. example.com)

### `subdomain_risk_ranking` (~46 tokens)

Perform a deep, comprehensive subdomain enumeration and risk ranking audit

Input parameters:

- `domain` (string, required): The root domain to enumerate subdomains for (e.g. example.com)

### `content_shuffle_detector` (~54 tokens)

Paid comprehensive audit with multiple fetches, deep NLP content variation analysis, content diffing, and scoring to detect content shuffling and obfuscation

Input parameters:

- `url` (string, required): The target URL (http(s)://...)

### `api_schema_diff` (~43 tokens)

Compare multiple API schema versions (REST or GraphQL) to highlight differences and score compatibility

Input parameters:

- `schemas` (string, required): List of schema URLs and version labels to compare

### `api_linting` (~63 tokens)

Run a comprehensive linting and validation on provided OpenAPI spec and implementation URLs

Input parameters:

- `impl_url` (string, required): URL to the live API endpoint to test actual implementation.
- `spec_url` (string, required): URL to the OpenAPI specification document (JSON or YAML).

### `port_scanner_aggregate` (~79 tokens)

Deep scan of a list of IP addresses or CIDR ranges with multi-source aggregation and vulnerability scoring

Input parameters:

- `maxPorts` (number): Optional limit on number of top common ports to scan per host (default 100).
- `targets` (string, required): List of IP addresses (IPv4 or v6) or CIDR ranges to scan.

### `cdn_infrastructure_enricher` (~51 tokens)

Comprehensive paid audit integrating DNS, HTTP headers, IP and regional info with detailed scoring and recommendations

Input parameters:

- `url` (string, required): Target website URL (http(s)://...) to deeply analyze.

### `web_configuration_audit` (~43 tokens)

Comprehensive paid audit with detailed scoring, grade, meta tags, and .env leak detection

Input parameters:

- `url` (string, required): URL to audit (http(s)://...)

### `subdomain_vulnerability_ranker` (~42 tokens)

Exhaustive subdomain enumeration, vulnerability inference, scoring, and recommendations

Input parameters:

- `domain` (string, required): Target root domain (e.g. example.com)

### `ssl_tls_inception_score` (~52 tokens)

Comprehensive SSL/TLS certificate and protocol audit for the specified hostname or URL

Input parameters:

- `hostname` (string, required): Hostname or URL (http(s):// or plain hostname) to analyze SSL/TLS for

### `dns_propagation_heatmap` (~52 tokens)

Paid comprehensive DNS propagation audit across multiple resolver types, including scoring and actionable recommendations

Input parameters:

- `record` (string, required): DNS record full domain name
- `type` (string, required): DNS record type to query

### `api_schema_delta` (~58 tokens)

Compare multiple API schemas from given URLs and return detailed diff and evolution analysis

Input parameters:

- `type` (string, required): Type of schema, either REST JSON Schema or GraphQL SDL
- `urls` (string, required): Array of schema URLs to fetch and compare

### `port_scanner` (~34 tokens)

Perform a deep port scan on a target IP or hostname

Input parameters:

- `target` (string, required): Target IP or hostname to scan

### `ssl_tls_hardening_assessor` (~45 tokens)

Get a comprehensive SSL/TLS and DNS record security assessment for a hostname

Input parameters:

- `host` (string, required): Hostname to analyze, e.g. example.com

### `api_endpoint_discovery` (~40 tokens)

Comprehensively crawl and analyze API endpoints on the specified domain

Input parameters:

- `domain` (string, required): Target domain to scan, e.g., example.com

### `api_response_heuristics` (~35 tokens)

Comprehensive API response heuristic analysis with scoring and recommendations

Input parameters:

- `url` (string, required): URL of the API endpoint to analyze

### `api_standard_compliance` (~41 tokens)

Perform a comprehensive API standard compliance analysis on the target API response URL

Input parameters:

- `url` (string, required): HTTP or HTTPS URL of the API endpoint to analyze

### `content_security_policy_check` (~39 tokens)

Perform a comprehensive security header and content security policy audit

Input parameters:

- `url` (string, required): The full HTTPS or HTTP URL of the site to analyze

### `cross_origin_resource_policymapper` (~69 tokens)

Perform comprehensive CORS headers audit across multiple endpoints

Input parameters:

- `baseUrl` (string, required): Base URL or domain to analyze (e.g. https://example.com)
- `endpoints` (string): Optional comma-separated list of endpoint paths to analyze (e.g. /api,/auth)

### `dns_propagation_inspector` (~65 tokens)

Comprehensive DNS propagation audit across global resolvers with detailed result analysis

Input parameters:

- `domain` (string, required): Domain name to check DNS propagation for
- `recordType` (string, required): DNS record type to query, e.g., A, AAAA, CNAME, TXT

### `performance_security_compliance_report` (~50 tokens)

Comprehensive payable audit combining performance metrics, security headers, SSL cert and DNS analysis with scoring and prioritized fix suggestions

Input parameters:

- `url` (string, required): Target URL (http(s)://...) to scan.

### `site_security_baseline` (~36 tokens)

Comprehensive baseline audit with combined security headers, SSL, and configuration checks

Input parameters:

- `url` (string, required): Target website URL to analyze

### `ssl_expiry_forecast` (~51 tokens)

Paid endpoint combining certificate transparency logs, DNS, SSL cert data to forecast expiry across multiple domains

Input parameters:

- `domains` (string, required): Comma-separated list of domain names to check (max 10 domains).

## Diagnostics

Captured diagnostic sections: Provenance, Dependencies. The full working is on the page: https://verifymcp.io/servers/mbeato-apimesh/mbeato-apimesh-mcp-server#diagnostics

## Score history

- 2026-08-03: 60
- 2026-08-02: 56
- 2026-08-01: 34
- 2026-07-30: 51
- 2026-07-29: 20
- 2026-07-28: 40
- 2026-07-27: 40

## Links

- npm package: https://www.npmjs.com/package/@mbeato/apimesh-mcp-server
- Socket report: https://socket.dev/npm/package/@mbeato/apimesh-mcp-server
- Changelog RSS feed: https://verifymcp.io/servers/mbeato-apimesh/mbeato-apimesh-mcp-server/changelog.xml
- Changelog JSON feed: https://verifymcp.io/servers/mbeato-apimesh/mbeato-apimesh-mcp-server/changelog.json
- HTML version of this page: https://verifymcp.io/servers/mbeato-apimesh/mbeato-apimesh-mcp-server