Apollo GraphQL MCP Server
Exposes GraphQL operations as callable tools for AI models.
🛡️ AgentReady threat assessment
MAESTRO 7-layer threat model + OWASP AIVSS risk score for Apollo GraphQL MCP Server, derived from its capabilities.
These scores are auto-generated from public information (the agent's own listing, docs, and repository) using the canonical OWASP AIVSS formula and the MAESTRO framework — an estimate for guidance, not a penetration test, audit, or certification. See the scoring methodology — every score is re-derived by the same automated method as an agent's public evidence changes.
Overview
Apollo's MCP server turns curated GraphQL operations into agent tools, fronting any GraphQL API. Security depends on which operations are exposed and the auth passed through, since the underlying graph may reach many backend services.
Key features and capabilities
- GraphQL operations as tools
- Schema-driven tooling
- Auth passthrough
Use cases
- Let an agent call a GraphQL API safely
- Expose curated graph operations