Back to Browse

Apollo MCP Server

Developer ToolsModerate5.2MCP RegistryLocal
Free

Server data from the Official MCP Registry

MCP server that exposes GraphQL operations as tools for AI models.

About

MCP server that exposes GraphQL operations as tools for AI models.

Security Report

5.2
Moderate5.2Moderate Risk

Apollo MCP Server is a Rust-based GraphQL-to-MCP bridge whose provided code shows no exfiltration, backdoors, or unsafe shell execution; the main capabilities are network HTTP calls to GraphQL endpoints and Apollo GraphOS APIs, reading local config/schema/operation files, and environment variable expansion for credentials. Code visible here uses secrecy-wrapped secrets, a Debug-redaction approach, and strict clippy lints (unwrap/panic/indexing denied). Only minor observations were noted, and the truncated portions of the codebase (auth, header forwarding, token passthrough logic) could not be fully reviewed, so the score reflects the visible code only. Supply chain analysis found 5 known vulnerabilities in dependencies (0 critical, 3 high severity).

13 files analyzed · 8 issues found

Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.

Permissions Required

This plugin requests these system permissions. Most are normal for its category.

HTTP Network Access

Connects to external APIs or services over the internet.

File System Read

Reads files on your machine. Normal for tools that analyze or process local data.

env_vars

Check that this permission is expected for this type of plugin.

process_spawn

Check that this permission is expected for this type of plugin.

system_info

Check that this permission is expected for this type of plugin.

How to Install

Add this to your MCP configuration file:

{
  "mcpServers": {
    "io-github-apollographql-apollo-mcp-server": {
      "args": [
        "-y",
        "apollo-mcp-server-conformance"
      ],
      "command": "npx"
    }
  }
}

Documentation

View on GitHub

From the project's GitHub README.

MCP Toplist

version crates.io ci workflow status release binaries workflow status release container workflow status license codecov

Apollo MCP Server

Apollo MCP Server is a Model Context Protocol server that exposes GraphQL operations as MCP tools. It provides a standard way for AI models to access and orchestrate your APIs running with Apollo.

Documentation

See the documentation for full details. This README shows the basics of getting this MCP server running. More details are available on the documentation site.

Installation

You can either build this server from source, if you have Rust installed on your workstation, or you can follow the installation guide.

To install the latest release from crates.io, run:

cargo install --locked apollo-mcp-server

--locked builds with the same dependency versions that were tested for the release.

To build from this repository instead, run cargo build from its root and the server will be built in the target/debug directory.

Getting started

Follow the quickstart tutorial to get started with this server.

Usage

Full usage of Apollo MCP Server is documented on the user guide. There are a few items that are necessary for this server to function. Specifically, the following things must be configured:

  1. A graph for the MCP server to sit in front of.
  2. Definitions for the GraphQL operations that should be exposed as MCP tools.
  3. A configuration file describing how the MCP server should run.
  4. A connection to an MCP client, such as an LLM or MCP inspector.

These are all described on the user guide. Specific configuration options for the configuration file are documented in the config file reference.

Contributions

Checkout the contributor guidelines for more information.

Licensing

This project is licensed under the MIT License. See the LICENSE file for the full license text.

Security

Refer to our security policy.

[!IMPORTANT]
Do not open up a GitHub issue if a found bug is a security vulnerability, and instead to refer to our security policy.

Reviews

No reviews yet

Be the first to review this server!