Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"actors-mcp-server": {
"command": "npx",
"args": [
"-y",
"@apify/actors-mcp-server"
]
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/actors-mcp-server)
Read me
What Actors Mcp Server does
Apify MCP Server
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@apify/actors-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
94/100across 5 weighted dimensions
0255075100
30
19
20
15
10
−6
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev1 fixed
CVE-2026-46341low · fixedCVSS 3.1
Apify Model Context Protocol (MCP) server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matching
### Summary The `fetch-apify-docs` tool validates URLs against a domain allowlist using `String.startsWith()` instead of proper URL hostname comparison. This allows bypass via attacker-controlled subdomains (e.g., `https://docs.apify.com.evil.com/`), enabling the tool to fetch and return arbitrary web content to the LLM. ### Details #### Vulnerable component `src/tools/common/fetch_apify_docs.ts`, line 51: ```typescript const isAllowedDomain = ALLOWED_DOC_DOMAINS.some((domain) => url.startsWi
Inventory
Tools (2)
Click any tool to inspect its schema.
~108 tokens total
Help improve this page
This server is missing a description.If you've used it, help the community.
Add informationCommunity
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is Actors Mcp Server safe to use?
- Actors Mcp Server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
- How do I install Actors Mcp Server?
- Install Actors Mcp Server via npm: `npx @apify/actors-mcp-server`. Then add it to your MCP client config file.
- What can Actors Mcp Server do?
- Actors Mcp Server provides 2 tools: call-actor, add-actor. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with Actors Mcp Server?
- Actors Mcp Server is compatible with claude-desktop, cursor, claude-code. It uses stdio transport.
- Is Actors Mcp Server actively maintained?
- Actors Mcp Server is actively maintained — last commit was 0 days ago. It has 1,297 GitHub stars.
Related
Similar servers
Others in other
Pi Lean Ctx95Pi Coding Agent extension (CLI-first) — routes bash/read/grep/find/ls through lean-ctx CLI for strong token savings. Optional MCP bridge can register advanced tools.
2.3k 6
Sigmap9497% token reduction for AI coding sessions — zero deps, 21 languages, MCP server
491 6
I
io.github.wyre-technology/autotask-mcp93MCP server for Kaseya Autotask PSA — companies, tickets, projects, time entries, and more.
42 6
Caveman Shrink93MCP proxy that compresses prose fields (tool descriptions, etc.) using caveman rules. Same accuracy, fewer context tokens.
67.3k 4
MCP Security Weekly
Get CVE alerts and security updates for Actors Mcp Server and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.