Apify MCP Server

Apify's MCP server connects AI agents directly to the Apify cloud platform to orchestrate scalable web scraping, data extraction, and web crawling workflows. It empowers agents to search for pre-built Apify actors, trigger automated data extraction jobs, monitor crawler run progress, and retrieve structured web datasets for LLM context enrichment.

Start for free

Apify MCP Server

Benefits with Ory + Apify MCP Server

Apify's MCP server lets your agents search the Apify Store, run Actors, and read the datasets those runs produce, all billed to your Apify account. A research agent that starts the wrong scraper repeatedly can burn through credits quickly. Ory Agent Security lets analysts' agents read existing datasets while only the data pipeline agents you approve can start runs, and it records which agent started each run and for whom.

View documentation

Use Cases

— 01 use case

Agent IAM

Research agents at Read pull datasets, scraping agents at Write start paid runs, schedulers get Admin, and Block keeps everyone else from spending your Apify credits.

Explore Agent IAM

Core Functionality

— 04 capabilities

Read, write, admin, or no access
Ory Agent Security classifies every tool on the Apify MCP server as read, write, or admin, so you can give each user, team, or agent type only the level it needs: read for research agents that read datasets, write for data pipeline agents that start runs, admin for the automation agent your data team owns, and no access for agents that should never spend credits.
Enforced before execution
Ory Agent Security checks each tool call against the user, the agent acting for them, and any sub-agent inside the agent harness, so a denied Actor run stops before it reaches your Apify account, with nothing to roll back and no gateway to deploy.
Observe, then enforce
Observe mode shows which agents start runs and where your credits go without blocking anything, so you can apply Ory's pre-built policy for the Apify MCP server and enforce it on your own schedule.
Complete audit trail
Every allow and deny decision on the Apify MCP server streams to your SIEM through OpenTelemetry with the user, agent, and action attached, so you can show which agent started a costly run and for whom.