graphql-mcp-server

The `BuildGenericOperationTool` (enabled by `generic_operation.enabled` in config) directly executes arbitrary GraphQL operation strings provided via the `operation` parameter of the `mcp.CallToolRequest` using `GraphqlClient.ExecRaw`. This constitutes a significant security risk, as it allows for GraphQL injection, enabling any client capable of calling this tool to execute arbitrary queries or mutations on the backend GraphQL schema endpoint. There are no apparent sanitization or validation steps for this input. Without strict control over the callers of this tool, it could be exploited for data exfiltration, unauthorized mutations, or denial-of-service against the GraphQL endpoint.