# Traefik Mesh

**Canonical:** https://apis.io/providers/traefik-mesh/  
**Website:** https://traefik.io/traefik-mesh  
**APIs profiled:** 3

Traefik Mesh (formerly Maesh) is a lightweight, non-invasive service mesh built on top of Traefik Proxy for Kubernetes. It provides automatic traffic management, observability, and security for microservices without requiring sidecar containers. Traefik Mesh is compliant with the Service Mesh Interface (SMI) specification and supports HTTP, TCP, and UDP traffic modes, traffic splitting, access control via TrafficTarget, rate limiting, circuit breaking, and retries. The project is effectively dormant: the last released version is v1.4.8 (2022-08-19), and commit activity since then has been limited to CI and documentation maintenance. The GitHub repository is not formally archived as of this profile date and there is no official deprecation banner on the project's README or documentation site, but the lack of feature releases for nearly four years and the absence of an SMI-compatible successor inside Traefik Labs' product line (Traefik Hub is positioned as Kubernetes-native API management, not a service mesh) make this an unmaintained project for practical purposes.

## Kin Score — 31.7 / 100 (thin)

Scored 2026-08-25 under rubric 0.14.0. Trend: flat (+0.0 from 31.7).

| Facet | Score |
|---|---|
| Discoverability | 81.5 |
| Contract Quality | 59.1 |
| Governance | 25.0 |
| Contract Governance | 25.0 |
| Operational Transparency | 18.4 |
| Developer Ergonomics | 16.7 |
| Commercial Clarity | 0.0 |
| Access Clarity | 0.0 |

## Agent readiness — 26.7 (agent-aware)

| Dimension | Value |
|---|---|
| Spec Presence | yes |
| Agentic Access | derived |
| Reversibility Documented | na |
| MCP Server | no |
| Auth Clarity | no |
| Idempotency | na |
| Error Semantics | verified |
| OpenAPI Examples | partial |
| Rate Limit Signal | no |
| Event Surface Described | no |
| Agent Skills | no |
| Well Known Catalog | no |
| Consent Identity | no |
| Agent Card | no |
| Dry Run Mode | na |
| Delegated Identity | no |
| Protected Resource Metadata | no |
| Dynamic Client Registration | no |
| Agentic Commerce | no |

## Access

Unknown — onboarding: unknown, pricing: unknown, trial: no (confidence: low).

## APIs (3)

- **Traefik Mesh Configuration API** — Endpoints for retrieving the current dynamic Traefik configuration generated by the Traefik Mesh controller.
- **Traefik Mesh Status API** — Endpoints for checking the readiness and status of the Traefik Mesh controller and proxy nodes.
- **Traefik Mesh Topology API** — Endpoints for inspecting the mesh topology as seen by the controller.

## Agentic access (1)

- **Traefik Mesh Agentic Access** — 5 operations

## Security (1)

- **Traefik Mesh Domain Security** — TLSv1.3 · HSTS · DMARC

## Use cases (4)

- **Canary Deployments** — Gradually shift traffic to new service versions using SMI TrafficSplit.
- **Service-to-Service Access Control** — Enforce zero-trust networking with SMI TrafficTarget ACL mode.
- **Observability** — Inspect live mesh configuration, topology, and node readiness via controller API.
- **Microservices Traffic Management** — Apply retries, circuit breakers, and rate limits without changing application code.

## Tags

Kubernetes, Service Mesh, Open-Source, SMI, Traffic Management, Dormant, Unmaintained

---

Profiled by [API Evangelist](https://apievangelist.com) and published on [APIs.io](https://apis.io/providers/traefik-mesh/). Scores are computed from the provider's own public artifacts under a published rubric.