A
ai.smithery/jirispilka-actors-mcp-server
@apify/actors-mcp-server
Greet anyone by name with friendly, personalized messages. Explore the origin of Hello, World thro…
No known CVEs
No license
Stale
Last commit 265d ago
Works with most clients
Transport: stdio, sse, http
1 tool · ~94 tok
Grade A · 0.0% of 200K ctx
Step 1
Install in your client
Config is the same across clients — only the file and path differ.
CD
Supported in Claude Desktopstdio, sse, http · Node 18+
Paste into ~/Library/Application Support/Claude/claude_desktop_config.json
{
"mcpServers": {
"ai-smithery-jirispilka-actors-mcp-server": {
"args": [
"-y",
"@apify/actors-mcp-server"
],
"command": "npx"
}
}
}Are you the author?
Add this badge to your README to show your security score and help users find safe servers.
Embed in your READMEAbout badges →
[](https://mcppedia.org/s/ai-smithery-jirispilka-actors-mcp-server)
Read me
What ai.smithery/jirispilka-actors-mcp-server does
The Apify Model Context Protocol (MCP) Server at mcp.apify.com instantly connects AI applications and agents to thousands of ready‑built tools. It allows your AI assistant to use any Apify Actor for web scraping, data extraction, and automation tasks in real time.
Test This Server
Run this in your terminal to verify the server starts. Then let us know if it worked — your result helps other developers.
npx -y '@apify/actors-mcp-server' 2>&1 | head -1 && echo "✓ Server started successfully"
After testing, let us know if it worked:
Loading README…
Scored, not listed
Why this score
Five weighted categories — click any category to see the underlying evidence.
Score breakdown
82/100across 5 weighted dimensions
0255075100
30
20
15
10
−18
Security
Maintenance
Efficiency
Documentation
Compatibility
Categoriesclick a row to see evidence
Security
OSV.dev1 fixed
CVE-2026-46341low · fixedCVSS 3.1
Apify Model Context Protocol (MCP) server: Domain Allowlist Bypass in fetch-apify-docs via String Prefix Matching
### Summary The `fetch-apify-docs` tool validates URLs against a domain allowlist using `String.startsWith()` instead of proper URL hostname comparison. This allows bypass via attacker-controlled subdomains (e.g., `https://docs.apify.com.evil.com/`), enabling the tool to fetch and return arbitrary web content to the LLM. ### Details #### Vulnerable component `src/tools/common/fetch_apify_docs.ts`, line 51: ```typescript const isAllowedDomain = ALLOWED_DOC_DOMAINS.some((domain) => url.startsWi
Inventory
Tools (1)
Click any tool to inspect its schema.
~94 tokens total
Community
Reviews
Be the first to review
Have you used this server?
Share your experience — it helps other developers decide.
How easy was setup?Did it work reliably?How was the documentation?
Sign in to write a review.
Frequently Asked Questions
- Is ai.smithery/jirispilka-actors-mcp-server safe to use?
- ai.smithery/jirispilka-actors-mcp-server has no known CVEs as of the latest MCPpedia security scan. It does not require authentication, so any local process can connect — keep this in mind in shared environments.
- How do I install ai.smithery/jirispilka-actors-mcp-server?
- ai.smithery/jirispilka-actors-mcp-server supports copy-paste install configs on its MCPpedia page for Claude Desktop, Cursor, and Claude Code. Scroll to the Quick Install section and select your client.
- What can ai.smithery/jirispilka-actors-mcp-server do?
- ai.smithery/jirispilka-actors-mcp-server provides 1 tool: run_actor. See the full tools list on the server page for descriptions and parameters.
- What AI clients work with ai.smithery/jirispilka-actors-mcp-server?
- ai.smithery/jirispilka-actors-mcp-server is compatible with claude-desktop, cursor, claude-code. It uses stdio and sse and http transport.
- Is ai.smithery/jirispilka-actors-mcp-server actively maintained?
- ai.smithery/jirispilka-actors-mcp-server is less actively maintained — last commit was 265 days ago.
Related
Similar servers
Others in other
Pi Lean Ctx95Pi Coding Agent extension (CLI-first) — routes bash/read/grep/find/ls through lean-ctx CLI for strong token savings. Optional MCP bridge can register advanced tools.
2.4k 6
Sigmap9497% token reduction for AI coding sessions — zero deps, 21 languages, MCP server
491 6
S
Sunpeak93App framework, testing framework, and inspector for MCP Apps.
188 1
Caveman Shrink93MCP proxy that compresses prose fields (tool descriptions, etc.) using caveman rules. Same accuracy, fewer context tokens.
68.2k 4
MCP Security Weekly
Get CVE alerts and security updates for ai.smithery/jirispilka-actors-mcp-server and similar servers.
Community
Discussion
Start a conversation
Ask a question, share a tip, or report an issue.
Has anyone used this with Cursor?How do you handle auth?Any alternatives?
Sign in to join the discussion.
