grade F

10 days ago

pulsemcp

APIMesh

20 x402-payable API tools for web analysis including vitals, SEO, security, and email verification.

→ mbeato/apimesh · listed on pulsemcp

Install from

PulseMCP Glama

M8ven verifies MCPs across every public registry — install directly from whichever one you prefer.

// key findings

🚨

Secret credentials may flow to a network call

5 flows detected: APIMESH_ACTOR_KEY, DEVTO_API_KEY, GITHUB_TOKEN. We can’t prove the destination matches the brand the credential belongs to.

⚠️

Known vulnerabilities in dependencies: 1 high

Affects packages this MCP installs at runtime. Upgrade or remove the affected dependency.

🔐

You'll be asked for 18 credentials: APIMESH_ACTOR_KEY, APIMESH_API_KEY, CDP_API_KEY_SECRET, DASHBOARD_TOKEN, DATAFORSEO_PASSWORD, DEVTO_API_KEY, GITHUB_TOKEN, MPP_SECRET_KEY, OPENAI_API_KEY, PSI_API_KEY, RESEND_API_KEY, STRIPE_SECRET_KEY, STRIPE_WEBHOOK_SECRET, VERIFICATION_CODE_SECRET, X_ACCESS_SECRET, X_ACCESS_TOKEN, X_API_KEY, X_API_SECRET

These are read from process.env at runtime. Make sure you trust where they’ll be sent.

// required environment variables

This server reads these from process.env. You'll be asked to provide them before it can run.

🔐 secretAPIMESH_ACTOR_KEY

🔐 secretAPIMESH_API_KEY

configAPIMESH_BASE_URL

configCDP_API_KEY_ID

🔐 secretCDP_API_KEY_SECRET

configCORS_ORIGIN

🔐 secretDASHBOARD_TOKEN

configDATAFORSEO_LOGIN

🔐 secretDATAFORSEO_PASSWORD

configDATA_DIR

🔐 secretDEVTO_API_KEY

configDEVTO_AUTO_PUBLISH

🔐 secretGITHUB_TOKEN

configMPP_ENABLED

configMPP_REALM

🔐 secretMPP_SECRET_KEY

configNETWORK

🔐 secretOPENAI_API_KEY

configPORT

🔐 secretPSI_API_KEY

configREGISTRATION_ENABLED

🔐 secretRESEND_API_KEY

configSCOUT_ESCALATION_MODEL

🔐 secretSTRIPE_SECRET_KEY

🔐 secretSTRIPE_WEBHOOK_SECRET

🔐 secretVERIFICATION_CODE_SECRET

configWALLET_ADDRESS

🔐 secretX_ACCESS_SECRET

🔐 secretX_ACCESS_TOKEN

🔐 secretX_API_KEY

🔐 secretX_API_SECRET

// full audit trail

The full breakdown of what we checked, the deductions that landed, the network hosts, the dependency advisories, and concrete fix guidance is available to verified publishers.

// improvement guidance — verified publishers only

We have 8 concrete improvements we can share with the publisher of this MCP. Each comes with specific guidance to raise the trust score.

// embed badge in your README

[![M8ven Score](https://m8ven.ai/badge/mcp/mbeato-apimesh-15oyua)](https://m8ven.ai/mcp/mbeato-apimesh-15oyua)

commit: 59af66c8051fa96a6a2f705115c5943228fcd186

code hash: 6a2836937fec3bdc39a1eb3e80d00e991aed04f8074d8f01613408617c66cf0b

verified: 4/11/2026, 2:06:15 PM

view raw JSON →