Back to Home
UnitVectorY-Labs icon

mcp-graphql-forge

by UnitVectorY-Labs

Overview

Exposes curated GraphQL queries as modular tools through an MCP server, enabling intentional API interactions from agents.

Installation

Run Command
FORGE_CONFIG=mcp-graphql-forge/example mcp-graphql-forge

Environment Variables

  • FORGE_CONFIG
  • FORGE_DEBUG

Security Notes

The `token_command` in `forge.yaml` allows execution of arbitrary shell commands (e.g., `gh auth token`). If the `forge.yaml` configuration file is compromised or untrusted, this feature could lead to Remote Code Execution (RCE) with the privileges of the server process. The `env_passthrough` option further allows passing potentially sensitive environment variables from the server's environment to this arbitrary command. Debug mode (`--forgeDebug` or `FORGE_DEBUG=true`) logs full HTTP requests and responses, which could expose authentication tokens and sensitive data if logs are not secured.

Similar Servers

Stats

Interest Score34
Security Score4
Cost ClassMedium
Avg Tokens1000
Stars4
Forks2
Last Update2025-12-06

Tags

MCP ServerGraphQLAPI WrapperConfiguration-DrivenTooling