Pay-per-call web analysis APIs for AI agents and developers. Security audits, performance monitoring, SEO analysis, email verification, tech stack detection, and more -- no signup required, just pay with USDC on Base and get your response.
APIMesh is a collection of 23 focused web analysis APIs, each on its own subdomain, with a 19-tool MCP server for direct use in Claude, Cursor, Windsurf, Cline, and any MCP-compatible client. Every endpoint supports three payment methods: crypto micropayments via x402, card payments via Stripe MPP, and traditional API keys via Stripe checkout.
Live Site -- Dashboard -- npm -- MCP Registry -- Smithery
curl https://core-web-vitals.apimesh.xyz/preview?url=https://example.com
curl https://security-headers.apimesh.xyz/preview?url=https://example.com
curl https://seo-audit.apimesh.xyz/preview?url=https://example.com
curl https://check.apimesh.xyz/preview?name=myappOne command to add all 19 tools to your AI coding assistant:
npx @mbeato/apimesh-mcp-serverOr add to your MCP client config (claude_desktop_config.json, .cursor/mcp.json, etc.):
{
"mcpServers": {
"apimesh": {
"command": "npx",
"args": ["@mbeato/apimesh-mcp-server"]
}
}
}# 1. Hit any paid endpoint -- returns 402 with payment details
curl https://core-web-vitals.apimesh.xyz/check?url=https://example.com
# 2. Include x402 payment header -- returns the full response
curl -H "X-PAYMENT: <signed-usdc-payment>" \
https://core-web-vitals.apimesh.xyz/check?url=https://example.comEvery API lives on its own subdomain: https://{api-name}.apimesh.xyz
| API | Endpoint | Price | Description |
|---|---|---|---|
| Core Web Vitals | GET /check?url= |
$0.005 | Lighthouse scores, LCP, CLS, INP field data, performance/accessibility/SEO grades |
| Security Headers | GET /check?url= |
$0.005 | Audit 10 HTTP security headers with A+ to F grading and remediation tips |
| SEO Audit | GET /check?url= |
$0.003 | On-page SEO analysis: title, meta, headings, images, links, OG tags, JSON-LD (0-100 score) |
| Email Security | GET /check?domain= |
$0.01 | SPF, DKIM (probes 10 selectors), DMARC, MX records with provider detection |
| Brand Assets | GET /check?domain= |
$0.002 | Extract logos, favicons, theme colors, OG images, site name from any domain |
| Redirect Chain | GET /check?url= |
$0.001 | Trace full redirect chain with per-hop status codes, latency, and loop detection |
| Indexability | GET /check?url= |
$0.001 | 5-layer analysis: robots.txt, HTTP status, meta robots, X-Robots-Tag, canonical |
| Web Checker | GET /check?name= |
$0.005 | Brand name availability across 5 TLDs, GitHub, npm, PyPI, Reddit |
| HTTP Status | GET /check?url= |
$0.001 | Live HTTP status check with optional expected status code |
| Favicon Checker | GET /check?url= |
$0.001 | Check favicon existence, URL, and format |
| Health Check | POST /check |
$0.003 | Parallel health check for up to 10 service URLs |
| Robots.txt Parser | GET /analyze?url= |
$0.001 | Parse robots.txt into structured rules, sitemaps, and crawl directives |
| Email Verify | GET /check?email= |
$0.001 | Syntax validation, MX check, disposable domain detection, role-address, deliverability |
| Tech Stack | GET /check?url= |
$0.003 | Detect CMS, frameworks, analytics, CDN, hosting, JS libraries from headers + HTML |
| API | Endpoint | Price | Description |
|---|---|---|---|
| Regex Builder | POST /build |
$0.002 | Generate and test regex patterns from natural language descriptions |
| YAML Validator | POST /validate |
$0.002 | Validate YAML syntax and structure |
| Mock JWT Generator | POST /generate |
$0.001 | Generate test JWTs with custom claims and expiry |
| User Agent Analyzer | GET /analyze?ua= |
$0.002 | Parse user agent strings into browser, OS, device, and bot info |
| Status Code Checker | GET /check?code= |
$0.001 | Lookup HTTP status code meaning and usage |
| Swagger Docs Creator | POST /generate |
$0.002 | Generate OpenAPI 3.0 documentation for your API endpoints |
These APIs were built, tested, and deployed by APIMesh's autonomous brain loop — no human wrote the code:
| API | Endpoint | Price | Description |
|---|---|---|---|
| Web Resource Validator | GET /validate?resource= |
$0.005 | Validate presence of robots.txt, sitemap.xml, openapi.json, agent.json |
| Website Security Header Info | GET /check?url= |
$0.01 | Analyze security-related HTTP headers (CSP, HSTS, X-Frame-Options, etc.) |
| Website Vulnerability Scan | GET /scan?url= |
$0.01 | Comprehensive security audit combining SSL, headers, cookies, and CSP analysis |
New APIs are added automatically as the brain discovers demand and builds solutions. See How the Brain Works below.
| Endpoint | Description |
|---|---|
GET /wallet/{address} |
Spend summary (daily/7d/30d), active spend cap, recent requests |
GET /wallet/{address}/history |
Paginated transaction history, filterable by API |
PUT /wallet/{address}/cap |
Set daily/monthly spend caps on your wallet |
APIMesh supports three ways to pay:
Agent request --> 402 Payment Required (price, wallet, network)
Agent signs USDC on Base --> includes X-PAYMENT header
Server verifies via Coinbase CDP --> returns response
No accounts. No API keys. No subscriptions. The agent handles payment autonomously.
- Protocol: x402 (open standard)
- Currency: USDC on Base (chain ID 8453)
- Facilitator: Coinbase CDP
Stripe MPP enables AI agents to pay with cards or stablecoins through Stripe's infrastructure.
Traditional auth for developers who prefer it. Purchase credits via Stripe checkout and include your API key in requests.
| Channel | Link |
|---|---|
| npm | @mbeato/apimesh-mcp-server |
| MCP Registry | io.github.mbeato/apimesh |
| Smithery | apimesh-mcp-server |
| x402scan | apimesh |
| x402 discovery | https://apimesh.xyz/.well-known/x402 |
| AI docs | https://apimesh.xyz/llms.txt |
| AI plugin | https://apimesh.xyz/.well-known/ai-plugin.json |
Most APIs offer free /preview endpoints so agents can verify functionality before paying. Every API has free /health and / info endpoints.
APIMesh has an autonomous build loop that runs daily on the server. It discovers demand, generates APIs, tests them, and deploys to production — no human in the loop.
Monitor → Scout → Build → Security Audit → Staging → Prod
│ │ │ │ │ │
│ │ │ │ │ └─ verify health
�� │ │ │ └─ deploy + test endpoints
│ │ │ └─ static analysis (secrets, SSRF, eval, etc.)
│ │ └─ LLM generates multi-file Hono API (up to 6 retries)
│ └─ gather market signals, score opportunities with LLM
└─ check API health, revenue, error rates
Hardened against prompt injection: external signal data is sanitized, LLM prompts use system-role security rules, generated code is audited for 14+ vulnerability patterns, and the test environment is sandboxed with .env isolation.
The brain currently uses OpenAI (gpt-4.1-mini) for code generation and scores opportunities based on demand, implementation depth, and competitive differentiation.
- Bun -- runtime and bundler
- Hono -- web framework
- x402 + MPP -- payment protocols
- Caddy -- reverse proxy with automatic HTTPS
- SQLite -- analytics and usage tracking
- OpenAI -- autonomous API generation
- awesome-mpp -- the MPP ecosystem registry (100+ projects)
Contributions are welcome. If you find a bug or want to suggest a new API tool, open an issue or start a discussion.
To run locally:
git clone https://github.com/mbeato/conway.git
cd conway
bun install
bun --hot apis/router.ts