A

Apify MCP Server

MCP server that exposes Apify Actors as tools for AI assistants, with search, execution, and storage access

Overall Score92/100

Score Breakdown

Server Info

Package
@apify/actors-mcp-server
Registry
npm
Maintainer
ApifyVendor
Category
Developer Tools
Tags
scrapingautomationactors
Last Scanned
7 Apr 2026

Findings

3 issues

Authentication & Identity

LOWImplements MCP OAuth spec for per-user authentication

Apify's official server, hosted at https://mcp.apify.com, now leads with OAuth (connect with just the URL from clients like Claude.ai or VS Code); an Apify API token via the Authorization header remains available. Streamable HTTP is the transport (legacy SSE retired). The hosted OAuth endpoint is the vendor-recommended primary path; local stdio is positioned for development.

Remediation

Document the required OAuth scopes for each tool.

LLM Safety

HIGHTool descriptions contain instructional language

Descriptions include directives that could influence LLM behavior beyond tool selection.

Remediation

Remove instructional language. Descriptions should be purely factual.

Maintenance & Trust

HIGH14 dependency vulnerabilities (1 critical, 10 high)

npm audit found 1 critical and 10 high severity CVEs.

Remediation

Run `npm audit fix` and update vulnerable dependencies.

Tools

19 total
NameDescriptionRisk
search-actorsSearch the Apify Store to FIND and DISCOVER what scraping tools/Actors exist for specific platforms or use cases.read
fetch-actor-detailsGet detailed information about an Actor by its ID or full name (format: "username/name").read
call-actorCall any Actor from the Apify Store.write
search-apify-docsSearch Apify and Crawlee documentation using full-text search.read
fetch-apify-docsFetch the full content of an Apify or Crawlee documentation page by its URL.read
get-actor-runGet detailed information about a specific Actor run by runId.read
get-actor-run-listList Actor runs for the authenticated user with optional filtering and sorting.read
get-actor-logRetrieve recent log lines for a specific Actor run.read
abort-actor-runAbort an Actor run that is currently starting or running.write
get-datasetGet metadata for a dataset (collection of structured data created by an Actor run).read
get-dataset-itemsRetrieve dataset items with pagination, sorting, and field selection.read
get-dataset-schemaGenerate a JSON schema from a sample of dataset items.read
get-actor-outputRetrieve the output dataset items of a specific Actor run using its datasetId.read
get-key-value-storeGet details about a key-value store by ID or username~store-name.read
get-key-value-store-keysList keys in a key-value store with optional pagination.read
get-key-value-store-recordGet a value stored in a key-value store under a specific key.read
get-dataset-listList datasets (collections of Actor run data) for the authenticated user.read
get-key-value-store-listList key-value stores owned by the authenticated user.read
add-actorAdd an Actor or MCP server to the Apify MCP Server as an available tool.write

Deploy Apify MCP Server securely

CompleteFlow adds per-user authentication, permission scoping, and audit logging to any MCP server out of the box.

Deploy on CompleteFlow