Delv
CommunityActive· 8d4.3by Cameron Rye

ActivityPub MCP

Explores the Fediverse through ActivityPub with WebFinger discovery and timeline fetching across Mastodon, Pleroma, and Misskey.

C
Safety & Trust

Delv Safety Grade: C

Score 61/100 · assessed 2026-04-18

Maintainer45
Permissions85
Supply chain65
Transparency70
Incidents100

ActivityPub MCP is a community tool by solo developer Cameron Rye that provides read-only access to Fediverse timelines and WebFinger lookups. The permissions are appropriately scoped: it only reads public ActivityPub endpoints without requiring authentication or API keys, which limits blast radius. The package is distributed via npm with a standard install, though the maintainer appears to be a single individual with limited track record. The repository is open source with reasonable documentation explaining the ActivityPub integration. No security incidents are known. The main risk is maintainer bus factor and the usual supply chain concerns of a community package. For read-only Fediverse research, the attack surface is modest, but users should understand they're depending on one person's maintenance commitment.

Green flags

  • Read-only access to public ActivityPub endpoints only
  • No authentication or API keys required reduces credential risk
  • Open source with clear documentation of ActivityPub protocol usage
  • Standard npm distribution with versioning

Red flags

  • Solo maintainer with limited public track record
  • No evidence of security review or audit
  • Relatively new project with uncertain long-term maintenance

Permissions requested

Outbound networknetwork:public
Assessed by Delv Editorial using public metadata. Grades are advisory and update as the ecosystem changes. They do not replace your own review of permissions and code before granting an agent access to sensitive systems.

Install

npx activitypub-mcp install

Review

ActivityPub MCP gives Claude direct access to the Fediverse through the ActivityPub protocol. It handles WebFinger discovery, fetches public timelines, and works across Mastodon, Pleroma, and Misskey instances. No API keys, no OAuth dance, just point it at a server and start reading. I'd reach for this when I'm researching how a conversation spreads across federated instances or when I want Claude to summarise what's happening on a specific Mastodon server without opening a browser. The WebFinger lookup is particularly handy for turning @[email protected] into a proper ActivityPub actor ID, which then lets you pull their public posts. One workflow I've used: ask Claude to fetch the timeline from a niche instance, summarise the top topics, then cross-reference with another instance to see how communities differ. The tool is read-only, which is both a strength and a limitation. You can't post, boost, or reply, so this isn't for building bots that interact. It's for observation and analysis. The lack of authentication means you're limited to public data, but that's usually enough for research or content discovery. Performance depends entirely on the target instance's responsiveness, and some smaller servers can be slow or flaky. Quirks: error messages can be cryptic if an instance doesn't fully implement ActivityPub, and there's no rate limiting built in, so you'll need to be thoughtful about how many requests you fire off. The documentation is light but the codebase is small enough to read if you need to understand what's happening under the hood. Skip this if you're after a full-featured Mastodon client or need write access. It's for developers who want to integrate Fediverse data into workflows, not for casual browsing. If you're building tools that analyse federated social networks or need Claude to pull context from Mastodon without leaving the conversation, this does the job cleanly.
Verdict

Install this if you're researching the Fediverse or building tools that need to read federated timelines programmatically. Skip it if you need to post, reply, or want a polished client experience. It's a solid read-only bridge for developers who understand ActivityPub's quirks.

Good at

  • No authentication required, works immediately with public Fediverse data.
  • WebFinger discovery handles the messy bits of turning usernames into ActivityPub actors.
  • Works across multiple platforms (Mastodon, Pleroma, Misskey) without platform-specific code.
  • Lightweight and focused, does one thing without bloat.

Watch out

  • Read-only, so you can't post, boost, or interact with the Fediverse.
  • Error handling is minimal, cryptic failures when instances misbehave.
  • No rate limiting built in, easy to hammer an instance accidentally.
  • Documentation is sparse, assumes you already understand ActivityPub.

Use cases

  • Fediverse research
  • Mastodon analytics
  • cross-instance browsing
  • federated social bots

Getting started

1. Run `npx activitypub-mcp install` to set it up. 2. Add the server to your Claude Desktop config (the installer should handle this, but verify in `claude_desktop_config.json`). 3. Restart Claude Desktop and confirm the MCP server appears in the available tools list. 4. Test it by asking Claude to fetch the public timeline from a known Mastodon instance like mastodon.social. 5. Watch out for slow or unresponsive instances, they'll cause timeouts without much feedback.

Works with

Claude DesktopClaude CodeCursor

Similar MCPs