Back to Browse

Actionbridge MCP Server

Developer ToolsModerate5.3MCP RegistryLocal
Free

Server data from the Official MCP Registry

Zapier exposed actions as MCP tools via a generic action runner.

About

Zapier exposed actions as MCP tools via a generic action runner.

Security Report

5.3
Moderate5.3Moderate Risk

actionbridge is a clean, well-scoped Zapier exposed-actions runner. Authentication is a required ZAPIER_API_KEY sent as a Bearer token, IDs are URL-encoded, and no code execution, shell use, or file access was found. The main points to note are that the ZAPIER_API_BASE_URL override would send the key to any host it is set to, and that execute_action can trigger side-effecting actions in connected apps without a confirmation step. Supply chain analysis found 4 known vulnerabilities in dependencies (0 critical, 2 high severity). Package verification found 1 issue.

8 files analyzed · 9 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

env_vars

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

What You'll Need

Set these up before or after installing:

ZAPIER_API_KEYRequired

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-cloudcorprecords-actionbridge": {
      "env": {
        "ZAPIER_API_KEY": "your-zapier-api-key-here"
      },
      "args": [
        "-y",
        "@reneturcios/actionbridge"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

actionbridge

Zapier exposed actions as MCP tools, talking to the documented Zapier exposed-actions (NLA) API. actionbridge is a clean-room generic action-runner core, under a new name: fresh code, no copied branding.

Special case, stated plainly: Zapier's surface is thousands of per-app actions behind a hosted per-user MCP endpoint; per-app action parity is NOT enumerable and is NOT claimed. actionbridge is a generic runner over whatever actions the key's account has exposed. It does not reproduce Zapier's hosted MCP endpoint, its per-user URL/key embedding, or any specific app's action catalogue.

Tools (generic runner core, 8)

list_actions, search_actions, get_action, execute_action, list_action_apps, describe_action_inputs, validate_action_params, get_execution_result.

Not included, by design: every specific app's action catalogue (not enumerable), Zap/Zaps management, folders, Zap history UI surfaces, app connections admin, and the hosted MCP endpoint itself.

Setup

Create a Zapier API key for the exposed-actions API and set it:

export ZAPIER_API_KEY=...

Optionally override the API base with ZAPIER_API_BASE_URL (default https://nla.zapier.com/api/v1). Without the key, every tool call fails with an error naming the missing variable.

CLI

npx @reneturcios/actionbridge list_actions
npx @reneturcios/actionbridge execute_action '{"action_id":"123","instructions":"Send it"}'
npx @reneturcios/actionbridge mcp        # stdio MCP server

Each tool name is a subcommand taking one JSON object argument.

MCP client config

{
  "mcpServers": {
    "actionbridge": {
      "command": "npx",
      "args": ["-y", "@reneturcios/actionbridge", "mcp"],
      "env": { "ZAPIER_API_KEY": "..." }
    }
  }
}

Docker

docker run -i -e ZAPIER_API_KEY ghcr.io/cloudcorprecords/actionbridge

Development

npm install
npm run build
npm test

License

MIT

Reviews

No reviews yet

Be the first to review this server!