ActivityPub MCP
Explores the Fediverse through ActivityPub with WebFinger discovery and timeline fetching across Mastodon, Pleroma, and Misskey.
Delv Safety Grade: C
Score 61/100 · assessed 2026-04-18
ActivityPub MCP is a community tool by solo developer Cameron Rye that provides read-only access to Fediverse timelines and WebFinger lookups. The permissions are appropriately scoped: it only reads public ActivityPub endpoints without requiring authentication or API keys, which limits blast radius. The package is distributed via npm with a standard install, though the maintainer appears to be a single individual with limited track record. The repository is open source with reasonable documentation explaining the ActivityPub integration. No security incidents are known. The main risk is maintainer bus factor and the usual supply chain concerns of a community package. For read-only Fediverse research, the attack surface is modest, but users should understand they're depending on one person's maintenance commitment.
Green flags
- Read-only access to public ActivityPub endpoints only
- No authentication or API keys required reduces credential risk
- Open source with clear documentation of ActivityPub protocol usage
- Standard npm distribution with versioning
Red flags
- Solo maintainer with limited public track record
- No evidence of security review or audit
- Relatively new project with uncertain long-term maintenance
Permissions requested
Install
npx activitypub-mcp install
Review
Install this if you're researching the Fediverse or building tools that need to read federated timelines programmatically. Skip it if you need to post, reply, or want a polished client experience. It's a solid read-only bridge for developers who understand ActivityPub's quirks.
Good at
- No authentication required, works immediately with public Fediverse data.
- WebFinger discovery handles the messy bits of turning usernames into ActivityPub actors.
- Works across multiple platforms (Mastodon, Pleroma, Misskey) without platform-specific code.
- Lightweight and focused, does one thing without bloat.
Watch out
- Read-only, so you can't post, boost, or interact with the Fediverse.
- Error handling is minimal, cryptic failures when instances misbehave.
- No rate limiting built in, easy to hammer an instance accidentally.
- Documentation is sparse, assumes you already understand ActivityPub.
Use cases
- Fediverse research
- Mastodon analytics
- cross-instance browsing
- federated social bots
Getting started
Works with
Similar MCPs
- Bluesky Social MCPFull Bluesky control over the atproto client, covering profiles, feeds, posts, follows, and interactions.
- TwilioSend SMS, manage phone numbers, query call logs. The standard for voice/SMS workflows from inside an agent.
- GmailRead, search, send, label Gmail messages from Claude. Note: original repo archived March 2026; community forks may be more current.
- ResendResend's official MCP for transactional email. Send, list, schedule from Claude — straightforward, fast, well-documented.