← Back to search

@apify/mcpc

apify Apache-2.0 622 stars Scanned 2d ago

Universal command-line client for the Model Context Protocol (MCP).

npm ↗
C
64.6 / 100

Versions

0.6.0-beta.3latest
Jul 28, 2026
0.5.1
Jul 28, 2026
0.6.0-beta.2
Jul 27, 2026
0.6.0-beta.1
Jul 27, 2026
0.6.0-beta.0
Jul 26, 2026
+ show 41 moreshow less
0.5.0
Jul 21, 2026
0.5.0-beta.2
Jul 19, 2026
0.5.0-beta.1
Jul 19, 2026
0.5.0-beta.0
Jul 14, 2026
0.4.1-beta.1
Jul 10, 2026
0.4.1-beta.0
Jul 9, 2026
0.4.0
Jun 25, 2026
0.4.0-beta.1
Jun 25, 2026
0.4.0-beta.0
Jun 22, 2026
0.3.2-beta.0
Jun 12, 2026
0.3.1
Jun 8, 2026
0.3.1-beta.0
Jun 3, 2026
0.3.0
May 20, 2026
0.3.0-beta.1
May 20, 2026
0.3.0-beta.0
May 11, 2026
0.2.6
Apr 15, 2026
0.2.4
Apr 7, 2026
0.2.3
Mar 31, 2026
0.2.2
Mar 31, 2026
0.2.1
Mar 30, 2026
0.2.0
Mar 24, 2026
0.2.0-beta.2
Mar 24, 2026
0.2.0-beta.1
Mar 23, 2026
0.1.11-beta.5
Mar 19, 2026
0.2.0-beta.0
Mar 17, 2026
0.1.11-beta.4
Mar 12, 2026
0.1.11
Mar 5, 2026
0.1.11-beta.3
Mar 5, 2026
0.1.11-beta.2
Mar 5, 2026
0.1.11-beta.1
Mar 4, 2026
0.1.11-beta.0
Mar 4, 2026
0.1.10
Mar 1, 2026
0.1.9
Feb 2, 2026
0.1.8
Jan 21, 2026
0.1.7
Jan 4, 2026
0.1.6
Jan 2, 2026
0.1.5
Jan 1, 2026
0.1.4
Dec 31, 2025
0.1.3
Dec 29, 2025
0.1.2
Dec 27, 2025
0.1.0
Dec 27, 2025
0.3.0-beta.1latest
May 20, 2026
0.3.0-beta.0
May 11, 2026
0.2.6
Apr 15, 2026
0.2.4
Apr 7, 2026
0.2.3
Mar 31, 2026
+ show 13 moreshow less
0.2.2
Mar 31, 2026
0.2.1
Mar 30, 2026
0.2.0
Mar 25, 2026
0.2.0-beta.2
Mar 24, 2026
0.2.0-beta.1
Mar 23, 2026
0.1.11-beta.5
Mar 19, 2026
0.2.0-beta.0
Mar 17, 2026
0.1.11-beta.4
Mar 12, 2026
0.1.11
Mar 5, 2026
0.1.11-beta.3
Mar 5, 2026
0.1.11-beta.2
Mar 5, 2026
0.1.10
Mar 1, 2026
0.1.9
Feb 2, 2026
1.0.0latest
first seen May 20, 2026
PermissionsTool SafetyAuthAnnotationsCode QualityStabilitySpecVuln HistoryAuthorTransparencyCommunity

Tools 14

call-actor
annotations: none low

Calls an Actor on Apify platform

simple-tool
annotations: none low

A simple tool

fetch-data
annotations: none low

Fetches data

no-args-tool
annotations: none low

Tool with no arguments

undocumented-tool
annotations: none low

Tool with default values

tool-with-defaults
annotations: none low

Tool with default values

read_file
annotations: none low

search
annotations: none low

ping
annotations: none low

set-mode
annotations: none low

test
annotations: none low

rag-web-browser
annotations: none low

configure
annotations: none low

plain
annotations: none low

Notion's official MCP server.\nUse your workspace as a system of record.

Permissions 4

network medium
Server uses network capabilities via: fetch(), net
filesystem low
Server uses filesystem capabilities via: fs, fs/promises
shell high
Server uses shell capabilities via: child_process, execSync(), spawn()
env_vars low
Server uses env_vars capabilities via: process.env

Scan Findings 78

info
Tool: no-args-tool manifest_parser · 90%
low
Tool 'call-actor' has no annotations annotation_checker · 100%
low
Tool 'simple-tool' has no annotations annotation_checker · 100%
low
Tool 'fetch-data' has no annotations annotation_checker · 100%
low
Tool 'no-args-tool' has no annotations annotation_checker · 100%
low
Tool 'undocumented-tool' has no annotations annotation_checker · 100%
low
Tool 'tool-with-defaults' has no annotations annotation_checker · 100%
low
Tool 'read_file' has no annotations annotation_checker · 100%
low
Tool 'search' has no annotations annotation_checker · 100%
low
Tool 'ping' has no annotations annotation_checker · 100%
low
Tool 'set-mode' has no annotations annotation_checker · 100%
low
Tool 'test' has no annotations annotation_checker · 100%
low
Tool 'rag-web-browser' has no annotations annotation_checker · 100%
low
Tool 'configure' has no annotations annotation_checker · 100%
low
Tool 'plain' has no annotations annotation_checker · 100%
info
Sandbox failed to start for behavioral verification behavioral_verifier · 100%
medium
Vulnerable dependency: undici@7.28.0 (GHSA-4cwx-7wf7-3272) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.28.0 (GHSA-8xcm-r25x-g524) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.28.0 (GHSA-jr45-8vmc-qm54) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.28.0 (GHSA-m8rv-5g2x-5cg5) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.28.0 (GHSA-v3r7-h72x-cjcm) dependency_analyzer · 95%
medium
Buffer.from base64 in apify-mcpc-4a074dd/test/unit/lib/x402/signer.test.ts:249 entropy_analyzer · 75%
medium
Buffer.from base64 in apify-mcpc-4a074dd/test/unit/lib/x402/signer.test.ts:268 entropy_analyzer · 75%
medium
Buffer.from base64 in apify-mcpc-4a074dd/test/unit/lib/x402/signer.test.ts:308 entropy_analyzer · 75%
medium
Buffer.from base64 in apify-mcpc-4a074dd/test/unit/lib/x402/signer.test.ts:322 entropy_analyzer · 75%
medium
Buffer.from base64 in apify-mcpc-4a074dd/test/e2e/server/fixtures.ts:574 entropy_analyzer · 75%
medium
Buffer.from base64 in apify-mcpc-4a074dd/src/lib/resource-content.ts:56 entropy_analyzer · 75%
medium
Buffer.from base64 in apify-mcpc-4a074dd/src/cli/output.ts:894 entropy_analyzer · 75%
medium
Buffer.from base64 in apify-mcpc-4a074dd/src/lib/x402/signer.ts:275 entropy_analyzer · 75%
medium
Buffer.from base64 in apify-mcpc-4a074dd/src/lib/x402/fetch-middleware.ts:512 entropy_analyzer · 75%
info
package.json metadata manifest_parser · 100%
info
Tool: call-actor manifest_parser · 90%
info
Tool: simple-tool manifest_parser · 90%
info
Tool: fetch-data manifest_parser · 90%
info
Tool: undocumented-tool manifest_parser · 90%
info
Tool: tool-with-defaults manifest_parser · 90%
info
Tool: read_file manifest_parser · 90%
info
Tool: search manifest_parser · 90%
info
Tool: ping manifest_parser · 90%
info
Tool: set-mode manifest_parser · 90%
info
Tool: test manifest_parser · 90%
info
Tool: rag-web-browser manifest_parser · 90%
info
Tool: configure manifest_parser · 90%
info
Tool: plain manifest_parser · 90%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (34) manifest_parser · 80%
info
Sandbox failed to start for output poisoning scan output_poisoning · 100%
medium
Permission: network access detected permission_analyzer · 90%
low
Permission: filesystem access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
info
SBOM generated: 32 components sbom_generator · 100%
medium
No build provenance detected (SLSA L0) slsa_assessor · 90%
info
package.json metadata manifest_parser · 100%
info
Transport: streamable-http manifest_parser · 80%
info
Required env vars (19) manifest_parser · 80%
medium
Permission: network access detected permission_analyzer · 90%
high
Permission: shell access detected permission_analyzer · 95%
low
Permission: env_vars access detected permission_analyzer · 90%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.25.1 (GHSA-345p-7cg4-v4c7) dependency_analyzer · 95%
medium
Vulnerable dependency: @modelcontextprotocol/sdk@1.25.1 (GHSA-8r9q-7v3j-jr4g) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.22.0 (GHSA-2mjp-6q6p-2qxm) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.22.0 (GHSA-4992-7rv2-5pvq) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.22.0 (GHSA-f269-vfmq-vjvj) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.22.0 (GHSA-phc3-fgpg-7m6h) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.22.0 (GHSA-v9p9-hfj2-hcw8) dependency_analyzer · 95%
medium
Vulnerable dependency: undici@7.22.0 (GHSA-vrm6-8vpv-qv8q) dependency_analyzer · 95%
medium
Vulnerable dependency: uuid@13.0.0 (GHSA-w5hq-g745-h8pq) dependency_analyzer · 95%
medium
Buffer.from base64 in src/lib/x402/signer.ts:133 entropy_analyzer · 75%
medium
Buffer.from base64 in src/lib/x402/fetch-middleware.ts:407 entropy_analyzer · 75%
info
SLSA Build Level 3 detected slsa_assessor · 85%
medium
OAuth authorization code flow without PKCE oauth_scope_analyzer · 75%
info
Could not connect to MCP server for output poisoning scan output_poisoning · 100%
info
Could not connect to MCP server for behavioral verification behavioral_verifier · 100%
info
SBOM generated: 29 components sbom_generator · 100%
info
MITRE ATLAS technique coverage summary atlas_annotator · 100%
info
ATLAS: Adversarial ML Supply Chain (AML.T0043) atlas_annotator · 100%
info
ATLAS: Poison Training Data (AML.T0020) atlas_annotator · 100%