Mecanik API
Security analysis and developer utility endpoints. Simple REST API with pay-per-use credits.
Security & Website Analysis
Security Headers Scanner
Analyze HTTP security headers - HSTS, CSP, X-Frame-Options, Permissions-Policy. Letter grade (A+ to F) with recommendations.
/tools/security-headersSSL/TLS Checker
Verify SSL/TLS configuration, HSTS enforcement, HTTP-to-HTTPS redirect, and TLS version.
/tools/tls-checkTechnology Detector
Detect CMS, frameworks, CDN, analytics, and 35+ technology signatures behind any website.
/tools/tech-detectSEO Analyzer
Meta tags, Open Graph, structured data, canonical URL, robots directives, and 15+ on-page SEO factors.
/tools/seo-analyzeDNS Lookup
Query A, AAAA, MX, TXT, CNAME, NS, SOA, SRV, and CAA records via Cloudflare DNS-over-HTTPS.
/tools/dns-lookupEmail Deliverability
Check MX, SPF, DKIM (9 selectors), and DMARC for any domain. Deliverability score and grade.
/tools/email-deliverabilityDeveloper Utilities
QR Code Generator
Generate QR codes as SVG or Base64 PNG. Custom size, foreground and background colors.
/tools/qr-generatePlaceholder Image
SVG placeholder images with custom dimensions, colors, and text via query string.
/tools/placeholder-imageHash Generator
Compute SHA-1, SHA-256, SHA-384, SHA-512, and MD5 hashes using the Web Crypto API.
/tools/hash-generateJWT Decoder
Decode JWT headers and payloads, analyze expiration, issuer, algorithm, and security warnings.
/tools/jwt-decodePassword Strength
Entropy calculation, pattern detection, dictionary checks, keyboard patterns, crack-time estimation.
/tools/password-strengthCron Explainer
Parse cron expressions into human-readable descriptions with the next N scheduled run times.
/tools/cron-explainCredit Pricing
Every new account receives 10 free credits. No credit card required.
50 security scans or 250 utility calls. Great for trying out the API.
Buy Credits300 security scans or 1,500 utility calls. Perfect for regular usage.
Buy Credits1,000 security scans or 5,000 utility calls. Best value for heavy use.
Buy CreditsHow It Works
Create a Free Account
Sign up at members.mecanik.dev. You receive 10 free API credits immediately.
Generate an API Token
Go to the Security page in your dashboard and create a Bearer token for authentication.
Purchase Credits
Visit the Credits page to buy a credit pack via Stripe. Credits never expire.
Make API Calls
Call any endpoint at https://api.mecanik.dev/v1/client/{uuid}/tools/{endpoint} with your Bearer token.
Why Mecanik API
Low Latency Worldwide
Cloudflare Workers - no cold starts, sub-100ms response times globally.
Structured JSON
Consistent { result, success, errors } format. Easy to parse in any language.
No Subscriptions
Pay only for what you use. No recurring charges, no rate-tier commitments.
Secure by Default
Bearer token auth with hashed storage. HTTPS only. Full SSRF protection.
Credits Never Expire
Purchase once, use at your own pace. No monthly resets or use-it-or-lose-it.
Instant Checkout
Buy credits via Stripe in seconds. Balance updated immediately.
Frequently Asked Questions
How do I authenticate API requests?
Include your Bearer token in the Authorization header:
1Authorization: Bearer YOUR_API_TOKEN
Your account UUID is part of the endpoint URL: https://api.mecanik.dev/v1/client/{uuid}/tools/...
What happens when I run out of credits?
API calls that require more credits than your balance will return a 402 Payment Required response with a message telling you how many credits are needed and a link to purchase more.
Do credits expire?
No. Credits never expire. Purchase them whenever you need them and use them at your own pace.
What is the rate limit?
API calls are subject to general rate limiting to prevent abuse. Normal usage patterns will not trigger rate limits. If you need higher throughput, contact support.
Can I see my remaining credit balance?
Yes. Use the GET /v1/client/{uuid}/account/credits endpoint, or check your balance on the members dashboard
.
What response format do endpoints use?
All endpoints return JSON with this structure:
1{
2 "result": { ... },
3 "success": true,
4 "errors": []
5}
On failure, success is false and errors contains an array of { code, message } objects.
Start Building With the Mecanik API
Create a free account, grab your API token, and make your first call in under a minute.
Get Started