Security-first, read-only-by-default MCP server for ActivityPub and the Fediverse.
If you already use Activitypub, the activitypub mcp server is the piece that lets your assistant work with it directly. Security-first, read-only-by-default MCP server for ActivityPub and the Fediverse.
A lightweight Model Context Protocol (MCP) server that lets an LLM explore and interact with the existing Fediverse — Mastodon, Misskey, Foundkey, Pleroma, and compatible servers. Read-only by default; write tools are opt-in.
The toolset is worth reading before you wire it up, because it tells you what the integration is really for:
Cursor — The Cursor tool exposed by this serverAuthentication — This runs OAuth (Mastodon-family) or MiAuth (Misskey) in your browser and saves credentials to ~/.config/activitypub-mcp/accounts.json. Multi-accountInstallation goes through your MCP client rather than a global install: point it at activitypub-mcp on npm and it is fetched when the client starts. The copy-paste blocks for Claude Desktop, Claude Code and Cursor are further down this page.
Configuration is passed through the environment: ACTIVITYPUB_ENABLE_WRITES, MCP_HTTP_SECRET, ACTIVITYPUB_DEFAULT_TOKEN. Treat anything key-shaped as a real credential — scope it to the minimum the server needs, and rotate it if it ever lands in a shared config.
Among the browser automation options, the useful question is rarely "what can it do" but "what does it cost you to run" — permissions, credentials, and how much of your context its toolset consumes. Activitypub's toolset — Cursor, Authentication — is a fair guide to whether it matches your workflow. It is maintained by cameronrye; worth a glance at recent repository activity before you build anything load-bearing on it.
SyncDev reviews every entry in this directory against the project's own documentation before publishing, and revisits them as servers change.
| Tool | What it does |
|---|---|
| Cursor | The Cursor tool exposed by this server. |
| Authentication | This runs OAuth (Mastodon-family) or MiAuth (Misskey) in your browser and saves credentials to ~/.config/activitypub-mcp/accounts.json. Multi-account is supported — use switch-account to change the active account. |
{
"mcpServers": {
"activitypub": {
"command": "npx",
"args": ["-y", "activitypub-mcp"],
"env": {
"ACTIVITYPUB_ENABLE_WRITES": "your-value",
"MCP_HTTP_SECRET": "your-value",
"ACTIVITYPUB_DEFAULT_TOKEN": "your-value"
}
}
}
}Add to claude_desktop_config.json, then restart Claude Desktop.
| Variable | Description | Required |
|---|---|---|
| ACTIVITYPUB_ENABLE_WRITES | Configuration value read at startup. | Optional |
| MCP_HTTP_SECRET | Credential the server authenticates with. | Yes |
| ACTIVITYPUB_DEFAULT_TOKEN | Credential the server authenticates with. | Yes |
Microsoft's official browser automation server — drive a real browser through the accessibility tree, no screenshots needed.
Industrial-strength web extraction — render, scrape, crawl and search entire sites into clean markdown.
The original Chromium automation reference server — simple, screenshot-driven browser control.
Give your coding agent the full DevTools toolbox: traces, network, console, heap snapshots and Lighthouse.
Puppeteer-powered browser control that drives pages from the accessibility tree instead of pixels.
Cloud browsers for AI agents — automation sessions that run in Browserbase's fleet, not on your machine.