Apollo GraphQL MCP server
48 tools · Last check that passed 27 Oct 2026, 01:50 UTC
Apollo's own remote MCP server for GraphOS gives an agent Apollo's documentation with no sign-in, and the graphs, schemas, metrics and API keys of the GraphOS organizations its sign-in or API key reaches. Once a day, Stackduke connects to it the way any MCP client would, with no account and no sign-in, and lists its tools. It never runs them.
All 48 tools
| Tool | Counted as |
|---|---|
DeleteApiKey | Deletes |
DeleteGraph | Deletes |
DeleteSubgraph | Deletes |
PublishContract | Deletes |
PublishGraphSchema | Deletes |
PublishPersistedQueries | Deletes |
PublishProposalRevision | Deletes |
PublishReadme | Deletes |
PublishSubgraph | Deletes |
RenameApiKey | Deletes |
ReviewProposal | Deletes |
TagGraphArtifact | Deletes |
UntagGraphArtifact | Deletes |
UpdateProposalStatus | Deletes |
AddProposalComment | Changes things |
CreateApiKey | Changes things |
CreateProposal | Changes things |
GetLatestLaunch | Changes things |
GetLaunch | Changes things |
GetLaunchHistory | Changes things |
RunSchemaCheck | Changes things |
RunSubgraphCheck | Changes things |
ApolloConnectorsSpec | Said to only read |
ApolloDocsRead | Said to only read |
ApolloDocsSearch | Said to only read |
GetApiKeys | Said to only read |
GetCheckResults | Said to only read |
GetClientMetrics | Said to only read |
GetContractConfig | Said to only read |
GetGraphArtifact | Said to only read |
GetGraphArtifactTags | Said to only read |
GetGraphSchema | Said to only read |
GetLintResults | Said to only read |
GetMyIdentity | Said to only read |
GetOfflineLicense | Said to only read |
GetOperationMetrics | Said to only read |
GetPersistedQueryListStatus | Said to only read |
GetProposal | Said to only read |
GetProposals | Said to only read |
GetReadme | Said to only read |
GetSchemaChecks | Said to only read |
GetSubgraphMetrics | Said to only read |
GetSubgraphSchema | Said to only read |
GetSupergraphSchema | Said to only read |
GetTopOperations | Said to only read |
GetVariantDetails | Said to only read |
LintSchema | Said to only read |
ValidateOperations | Said to only read |
The tools the server listed at the last check that passed, at its default address and settings, with no sign-in; an account that signs in, or other settings, may see other tools. What a tool is counted as doing is Stackduke's cautious reading of the server's labels, the tool's name and its description: where they disagree it takes whichever says the tool can do most, so it overcounts on purpose. It does not say the server is safe, and it does not list what a tool cannot do. Descriptions are not shown, because they are written for models and may try to steer them.
Recent checks
12 of the last 12 checks passed
A check passes when the server lists its tools. Checked at https://mcp.apollographql.com/.
Recent changes
23 Oct 2026, 09:53 UTC, after a check on 22 Oct 2026, 09:44 UTC
Can do more 16 tools added: AddProposalComment, CreateApiKey, CreateProposal, DeleteApiKey, GetApiKeys and 11 more. Description rewritten on ApolloDocsRead, ApolloDocsSearch, DeleteGraph, DeleteSubgraph, GetCheckResults and 15 more. Inputs or outputs changed on GetClientMetrics, GetOperationMetrics, GetSubgraphMetrics. 31 tools changed in all. Counted as able to do more: DeleteApiKey (make changes that cannot be undone), PublishProposalRevision (make changes that cannot be undone), RenameApiKey (make changes that cannot be undone) and 7 more.
From the scan of 27 Oct 2026, 01:52 UTC. "Changed" and "Can do more" count changes from the last 30 days; older ones stay listed here. A change made and undone between two checks is not seen. Every check is in the scanner's public data.
Know when Apollo GraphQL's tools change.
One email when Apollo GraphQL's official MCP server adds, removes or changes tools, with what changed. Nothing else.
What to watch for
- With a sign-in or a key, its tools can publish schemas and subgraphs, delete graphs and subgraphs, and create, rename and delete API keys. Apollo's GraphOS MCP Server tools reference
- Apollo says publishing a schema changes the schema that clients see, and that deleting an API key cannot be undone. Apollo's GraphOS MCP Server tools reference
- Schemas, READMEs and proposal comments written by other people come back to the agent, and text an agent reads can carry instructions for it. OWASP, prompt injection
How to limit it
With Apollo GraphQL's own settings, as its documentation describes them. Stackduke has not tested them.
- Apollo says its three documentation tools need no authentication, so we recommend connecting with no credentials when the agent only needs the documentation. Apollo's GraphOS MCP Server tools reference
- Use a graph API key, which Apollo says reaches a single graph. A personal API key or a sign-in reaches every graph the account can access. Apollo's GraphOS MCP Server install guide
- Apollo recommends a dry run before deleting a subgraph, and a schema check before publishing a schema. Apollo's GraphOS MCP Server tools reference
What Stackduke is designed to do
Stackduke is designed to sit between your agents and their MCP servers: to check each tool call against your rules before it runs, hold the risky ones for a person to approve, and keep a record of what was decided.
It does not yet forward or block tool calls for customers. Today it reads what this server offers and publishes what changes.