registry / record

@apify/actors-mcp-server

npm / sealed 2026-06-12 / No. 1efcf664

re-scan this server gate it in your CI

> throne registry @apify/actors-mcp-server sealed

This server runs. It just needs your API keythe server installs and starts, then exits asking for an API key — [31mERROR[39m APIFY_TOKEN is required but not set in the environment variables or in ~/.apify/auth.json APIFY_TOKEN is required but not set in the environment variables or in ~/.apify/auth.json

receiptsealed evidence

scan id: 1efcf66490004f0f9eee030f63756b05
target: @apify/actors-mcp-server
sealed at: 2026-06-12 18:23:51Z
evidence hash: sha256:fef159fe932afd4f520d597e4952bbee98a8079ff0f26385235f1fdd6ddb4233

01connectFAIL0ms

server never launched: server process exited with code 1 before the MCP handshake — stderr: [31mERROR[39m APIFY_TOKEN is required but not set in the environment variables or in ~/.apify/auth.json APIFY_TOKEN is required but not set in the environment variables or in ~/.apify/auth.json

02discoverSKIPPED0ms

not run — server never launched

03validate_schemasSKIPPED0ms

not run — server never launched

04smoke_test_toolsSKIPPED0ms

not run — server never launched

05error_handlingSKIPPED0ms

not run — server never launched

06streamingSKIPPED0ms

not run — server never launched

07resource_lifecycleSKIPPED0ms

not run — server never launched

08concurrent_callsSKIPPED0ms

not run — server never launched

09reconnectSKIPPED0ms

not run — server never launched

01connectFAIL0ms

server never launched: server process exited with code 1 before the MCP handshake — stderr: [31mERROR[39m APIFY_TOKEN is required but not set in the environment variables or in ~/.apify/auth.json APIFY_TOKEN is required but not set in the environment variables or in ~/.apify/auth.json

02discoverSKIPPED0ms

not run — server never launched

03validate_schemasSKIPPED0ms

not run — server never launched

04smoke_test_toolsSKIPPED0ms

not run — server never launched

05error_handlingSKIPPED0ms

not run — server never launched

06streamingSKIPPED0ms

not run — server never launched

07resource_lifecycleSKIPPED0ms

not run — server never launched

08concurrent_callsSKIPPED0ms

not run — server never launched

09reconnectSKIPPED0ms

not run — server never launched

chatgpt desktopemulation profile pending real-traffic captureCOMING SOON

SECURITY: REVIEW / 7 finding(s) / review material, not a verdict

MEDIUMTHR-SECRET-02 / Hardcoded secrets or tokens in source

apiKey assigned a literal value e977… (32 chars) — verify it is not a live credential

package/dist/const.d.ts:64

MEDIUMTHR-SECRET-02 / Hardcoded secrets or tokens in source

apiKey assigned a literal value 2676… (32 chars) — verify it is not a live credential

package/dist/const.d.ts:72

MEDIUMTHR-SECRET-02 / Hardcoded secrets or tokens in source

apiKey assigned a literal value 8784… (32 chars) — verify it is not a live credential

package/dist/const.d.ts:81

MEDIUMTHR-SECRET-02 / Hardcoded secrets or tokens in source

apiKey assigned a literal value e977… (32 chars) — verify it is not a live credential

package/dist/const.js:81

MEDIUMTHR-SECRET-02 / Hardcoded secrets or tokens in source

apiKey assigned a literal value 2676… (32 chars) — verify it is not a live credential

package/dist/const.js:91

MEDIUMTHR-SECRET-02 / Hardcoded secrets or tokens in source

apiKey assigned a literal value 8784… (32 chars) — verify it is not a live credential

package/dist/const.js:102

LOWTHR-NET-05 / Hardcoded outbound endpoints

18 non-local endpoint host(s) referenced in code — verify each is expected for this server's purpose: 916ec26e2f0abda151403acb5d8370c7 (package/dist/instrument.js:21), api.apify.com (package/dist/apify_client.js:36), apify-image-uploads-prod.s3.amazonaws.com (package/dist/resources/widgets.d.ts:12), apify-image-uploads-prod.s3.us-east-1.amazonaws.com (package/dist/resources/widgets.d.ts:12), apify.com (package/dist/const.d.ts:88), console.apify.com (package/dist/mcp/server.js:828), crawlee.dev (package/dist/const.d.ts:87), developers.openai.com (package/dist/resources/widgets.js:28), docs.apify.com (package/dist/const.d.ts:87), docs.apify.com.evil.com (package/dist/tools/common/fetch_apify_docs.js:33), fonts.googleapis.com (package/dist/resources/widgets.d.ts:12), fonts.gstatic.com (package/dist/resources/widgets.d.ts:12), host (package/dist/mcp/actors.d.ts:15), images.apifyusercontent.com (package/dist/resources/widgets.d.ts:12), mcp.apify.com (package/dist/const.d.ts:91)

package/dist/apify_client.js:36

VERDICT: NEEDS YOUR API KEYSANDBOXED RUN — submitted server executed in a disposable microVM — compatibility not assessable: needs credentials: the server installs and starts, then exits asking for an API key — [31mERROR[39m APIFY_TOKEN is required but not set in the environment variables or in ~/.apify/auth.json APIFY_TOKEN is required but not set in the environment variables or in ~/.apify/auth.json / security: review — 7 finding(s), 0 highsealed by THRONE / No. 1efcf664 / 2026-06-12

executed in a disposable microVM, created for this scan and destroyed after it. nothing outlives a run.

maintainer of this server? challenge this record: hello@usethrone.dev. tell us what we got wrong and we re-run it in the open.

this page renders the stored record of a real run. nothing on it is asserted without the execution that proved it.