Model Context Protocol moderate risk

Actors

The Apify MCP Server enables AI agents to use Apify Actors for web scraping, data extraction, and automation, supporting OAuth and Skyfire agentic payments.

Connections & Capabilities

Connects To

GitHubDockerSentry

Capabilities

readwriteexec

Quickstart

Install

npx @apify/actors-mcp-server --tools actors,docs,apify/rag-web-browser

Config

{
  "mcpServers": {
    "skyfire": {
      "url": "https://api.skyfire.xyz/mcp/sse",
      "headers": {
        "skyfire-api-key": "<YOUR_SKYFIRE_API_KEY>"
      }
    },
    "apify": {
      "url": "https://mcp.apify.com?payment=skyfire"
    }
  }
}

Exposed MCP Tools (5)

safe

search-actors

Searches the Apify store for available actors.

Read-only operation, no side effects.

safe

fetch-actor-details

Retrieves details about a specific Apify actor.

Read-only operation, no side effects.

moderate

call-actor

Calls an Apify actor with provided input parameters.

Executes an actor which may perform write operations.

moderate

add-actor

Dynamically adds an Apify Actor as a tool during conversation.

Adds a tool that can perform write operations.

moderate

create-pay-token

Creates a Skyfire PAY token for agentic payments.

Creates a token that allows for payment of actor runs.

Safety Assessment

The Apify MCP Server offers a convenient way to integrate AI agents with web scraping and automation tools. It's safe when used with trusted Actors and proper authorization. Risks arise from using untrusted Actors or mishandling Skyfire PAY tokens, potentially leading to unintended actions or data exposure.

OAuth support for secure client connections
Integration with Skyfire for agentic payments without API tokens
Dynamic tool discovery allows for flexible Actor usage
Clear separation of concerns between MCP server and Actors

Potential for misuse of Actors if not properly configured
Reliance on external Apify Actors introduces dependency risk
Improperly configured Actors could expose sensitive data
Skyfire integration requires careful management of PAY tokens
Access to external websites