Apollo MCP Server
MCP server that exposes GraphQL operations as tools for AI models.
Update first. Issues have been reported, but none is flagged on the version the registry lists. That version can trail the package's newest release, so check you run one past the issues below.
Registry name io.github.apollographql/apollo-mcp-server
· Source code · Website
Reported issues
Each issue is counted once, with its other IDs listed under it. "Listed version" means the version the registry lists: "Not flagged" means OSV doesn't mark it as affected, and "Not checked" means the source gives no version we can compare.
| Issue | Severity | Listed version | Reported |
|---|---|---|---|
| CVE-2026-35577Apollo MCP Server is a Model Context Protocol server that exposes GraphQL operations as MCP tools. Prior to version 1.7.0, the Apollo MCP Server did not validate the Host header on incoming HTTP requests when using StreamableHTTP transport. In confi… | medium | Not checked | Apr 9, 2026 |
Versions in the registry
2.1.0 (listed), 2.0.0, 1.20.0, 1.19.0, 1.18.0, 1.17.0, 1.16.0, 1.15.0, 1.14.0, 1.13.0, 1.12.0, 1.11.0, 1.10.0, 1.9.0, 1.8.2, 1.8.1, 1.8.0, 1.7.0, 1.6.0, 1.5.0, 1.4.1, 1.4.0, canary-20260112T145439Z-114c866